TMT FINANCE

PRIVACY NOTICE

Last updated: 4 November 2025

 
  1. Introduction

This privacy notice (the “Privacy Notice”) explains how TMT Consultants Ltd t/a TMT Finance processes your personal data in connection with your use of https://www.tmtfinance.com/ (the “Site”) and the provision of our products and services to you, including those we make available via the Site, third-party sites or otherwise in connection with our business (the “Products and Services”).

This Privacy Notice also explains how we process your personal data if you are another individual that interacts with our business, including if you:

  1. visit our website or access our Products and Services;
  2. are someone who has seen an online advert promoting our Products and Services or our business;
  3. interact with any of our marketing communications;
  4. work for businesses that provide goods or services to us;
  5. apply to work for us;
  6. visit our premises;
  7. attend events that we host; and/or
  8. are engaged by us to promote our business, including if you are an influencer or other talent.

Please take a moment to read this Privacy Notice as it provides you with important information about your personal data, including the rights you have in relation to it. Your access to and use of our Site is also subject to our Website Terms & Conditions, and your purchase of any Products and Services from us will be subject to our Services Agreement and End User Licence Agreement.

This Privacy Notice is intended to meet the requirements of privacy laws of the United Kingdom (“UK”) and the European Union (“EU”), in particular the EU’s General Data Protection Regulation, the UK GDPR, and other similar European privacy laws (which we refer to collectively in this Privacy Notice as the “GDPR”).

Any changes we make to this Privacy Notice will be posted on our Site, including to reflect any changes to our use of personal data or to comply with applicable law or regulatory requirements. Where possible we may notify you of these changes by email, but we encourage you to check this page regularly to keep up to date.

 
  1. About us

The Site and our Products and Services are made available by TMT Consultants Ltd t/a TMT Finance (“TMT”, “we”, “us, “our”). TMT is a company registered in England and Wales (No: 06879982) with its registered office at 32 Lafone St, London, SE1 2LX. TMT is registered as a controller with the Information Commissioner’s Office (Registration No: ZB419689).

TMT is the controller of personal data for the activities described in this Privacy Notice, except where we say otherwise (for example, where we process personal data on behalf of our clients when providing our Products and Services).

 
  1. How to contact us

If you want more information, have any questions about our processing of your personal data or this Privacy Notice, and/or wish to exercise your rights in connection with your personal data, you can contact us using the following methods:

 
  1. How we collect and receive personal data

We may collect and receive personal data in the following ways:

  • Personal data you provide to us. You may give us your personal data directly, for example, when you use or purchase our Products and Services, contact us with enquiries, complete forms on our Site, or any integrated third-party sites, subscribe to receive our marketing communications or provide feedback to us.
  • Personal data we collect automatically, including through cookies and other similar technologies. When you access and use our Site, we may collect Technical Data and Usage Data (as defined in the Types of Personal Data we Collect section below) automatically, including through our use of cookies and other similar technologies.
    For more information about this data, please see our Processing Activities Schedule, and for more information about our use of cookies and other similar technologies, please see the Cookies section below.
  • Personal data we receive from third parties. We may receive personal data from third parties. Such third parties may include event suppliers and organisations we work with, analytics providers, data suppliers, third-party directories and third parties that provide technical services to us so that we can provide our Site and our Products and Services.
  • Personal data that is publicly available. We may collect personal data that is available from public sources (including media publications) or that you or a third party may otherwise publish (for example on websites, posts on social media platforms, or speeches at events).
 
  1. Types of personal data we collect

We may process or otherwise be a controller of the following types of personal data:

  • Identity Data. Name (first, middle, and last); and title.
  • Contact Data. Email address; telephone number; and postal address.
  • Registration Data. Username; password; and any other personal data that you may provide to register an account with us.
  • Professional Data. Job title and organisation that you represent (where you or your organisation supplies products or services to us).
  • Image Data. Photos or video recordings that feature you or your likeness, including any images which we take or obtain, for example when you visit our premises or when you attend events that we host. 
  • Transaction Data. Details of Products and Services you purchased from us or products and services that we may purchase from you or the organisation that you work for, including payment information (such as payment card details, bank account details and billing address).
  • Profile Data. Date of birth; gender; country of residence; nationality; information about your interests, affiliations and preferences, including any dietary requirements; other information that you supply in connection with your use of our Site or in your interactions with us (including your provision of feedback or responses to our surveys, or your attendance at an event); and the content of any communications when you contact us.
  • Usage Data. Data observed or collected in relation to browsing activity on our Site, interaction with our emails, or attendance at our events.
    This may include information about page views and events on our Site; information about the webpage or other source that users were previously on before reaching our Site; information about when a browsing session started and ended; information about views of and clicks on our adverts, together with advertising or other identifiers associated with a user or their device (e.g. a device’s IDFA (iOS) or AAID (Android) or advertising cookie identifiers); and information about your attendance at our events.
  • Technical Data. IP address; details of the Site that you are viewing, such as full web page URL; browser type, device type and operating system and any other information available to us about the device you are using; location data, including the geographic location (which may be approximate, such as the city or region you are in, or more precise) of a device derived from IP address, GPS signals or information about a device’s connection with local Wi-Fi equipment; diagnostic data (including crash logs, launch time, hang rate and energy use, and any other data collected for technical diagnostics purposes), and any relevant unique identifiers assigned to a device or browser (including cookie identifiers).
  • Social Media and Communications Platform Data. Information that is logged by the third-party providers of social media or communications platforms in relation to events that users take in relation to our social media pages or content. Events can include views, clicks, following or unfollowing, and any other types of interaction with our page or content. This information may be combined by third-party providers of social media or communications platforms with other information about the person taking the action and the device they are using, such as social media handles, platform username, the date and time of the event, the country/city (derived from IP address or social media profiles, or usernames) of the user, age/gender information and the type of device used. Unless specified otherwise in this Privacy Notice, this personal data is not shared with us, but third-party social media and communication platform providers may use it to provide us with anonymous and aggregate statistics about our social media pages and content, and use of any integrated communications platforms, and we may be a joint controller of this personal data, as described in the Social media pages and insights and Advertising and Social Media Partners sections below.
  • Incident Data. Information about any injury that you suffer or incident you may be involved in (or witness) at an event hosted by us or if you visit our premises.
    This may include any personal data you or others provide (including any factual description and opinions); details of any injury suffered; actions taken by us or others in response to the incident or injury, including details of any medical assistance or treatment that has been provided or advised; and any other personal data collected during the process of completing our incident report.
  • Communications Data. Marketing preferences; and service communication preferences.
  • Recruitment Data. Profile Data (to the extent that it is relevant to our recruitment activities or you volunteer it during our recruitment process), together with other information including details of your eligibility to work (including documents and information that we may collect to verify this); your work preferences (including areas and dates where you are available for work); skills, qualifications, training and work history; any personal data which appears in your curriculum vitae or application; and any other personal data that you provide during our recruitment process.
 
  1. Our processing activities

We process your personal data for the following purposes:

  • to provide you with our Site and carry out other online activities;
  • to provide you with our Products and Services;
  • to deal with customer services and enquiries, carry out surveys and obtain feedback, and to manage public relations;
  • to carry out insights and analytics, data improvement, and personalisation;
  • to carry out advertising and marketing activities;
  • to train AI models and provide you with more personalised services via the use of AI features;
  • for recruitment purposes; and
  • for business administration and legal compliance purposes, including to exercise or defend legal claims.

For more information about our processing activities, including the personal data that is processed in connection with those activities, please see our Processing Activities Schedule.

 
  1. Cookies

Where specified in this Privacy Notice, cookies, web beacons, pixel tags and other similar technologies (which we collectively refer to in this Privacy Notice as “Cookies”) may be used for the purposes described.

In addition to the information set out in this Privacy Notice, you can find out further information about the Cookies that we use on our Site and learn how you can manage your consent to the use of non-essential Cookies, by visiting our Cookie Settings page..

In addition, where we use Cookies relating to services provided by Google, Mixpanel, HubSpot, or Hotjar, those providers have published information about how they use personal data in connection with their services here (Google), here (Mixpanel), here (HubSpot), and here (Hotjar).

Google Analytics. How Google uses personal data in connection with Google Analytics is explained here. If you do not want your personal data to be used for the purposes of Google Analytics, you can install the Google Analytics opt-out browser add-on (note: this only works on certain browsers), available here.

Google Advertising. How Google uses personal data in connection with its online advertising services is described in its Privacy Policy and here. You can also use Google’s Ad Settings to manage your online advertising preferences.

Mixpanel analytics. How Mixpanel uses personal data in connection with its analytics services is explained here. If you do not want your personal data to be used for Mixpanel analytics, you can use Mixpanel’s opt-out mechanism (which relies on a cookie and applies only to the browser/device in which you set it), available here.

HubSpot analytics. How HubSpot uses personal data in connection with its analytics and feedback services is explained here. If you do not want your personal data to be used for HubSpot, you can use HubSpot’s opt-out mechanisms (which typically rely on a cookie or browser/device setting and apply only to that browser/device), available here.

Hotjar analytics. How Hotjar uses personal data in connection with its analytics and feedback services is explained here. If you do not want your personal data to be used for Hotjar, you can use Hotjar’s opt-out mechanisms (which typically rely on a cookie or browser/device setting and apply only to that browser/device), available here.

You can also manage your Cookie preferences using functionality provided by your browser; however, please be aware that some parts of our Site require essential Cookies. If you block essential Cookies, parts of our Site may not function properly, or you may be unable to access our Site.

For more general information about Cookies and how to manage them—including blocking or deleting Cookies across a wide variety of browsers—visit All About Cookies.

On your mobile device, you may also adjust your privacy and advertising settings to control whether you receive more relevant advertising.

 
  1. Sharing personal data

We only share personal data with third parties when we are legally permitted to do so. When we share personal data with others, we put contractual arrangements and security mechanisms in place to protect the personal data and to maintain the confidentiality and security of it.

The circumstances where we may typically share personal data are set out below, but this list is not exhaustive:

  • Third-party suppliers who provide applications/functionality, data processing or IT services. We share personal data with third parties who support us in providing our Site and help provide, run and manage our internal IT systems.
    Such third parties may also include, for example, providers of information technology, cloud-based software-as-a-service providers, identity management, website design, hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure datacentres around the world, and personal data may be stored in any one of them. We may also share your personal data with third-party service providers to assist us with insight analytics.
  • Payment providers and banks. We share personal data with third parties who assist us with the processing of payments.
  • Delivery and courier companies. We share personal data with suppliers who assist us in the delivery of documents, information and materials.
  • Advertising partners. We share personal data with third party advertising partners.
    This data is used to provide you with, and measure the effectiveness of, online personalised advertising and for other advertising related activities. For more information, please see the Advertising and Social Media Partners section below.
  • Third-party marketing and customer relationship management specialists. We share personal data with specialist suppliers who assist us in managing our marketing database and activities, and sending out our marketing and account-related communications.
  • Third-party suppliers who assist us in administering our promotions. We share personal data with specialist suppliers who assist us in administering our prize draws, prize competitions and other promotions.
  • Event partners and suppliers. When we run events, we will share personal data with third-party service providers that are assisting us with the operation and administration of that event. If we are running an event in partnership with other organisations, we will share personal data with such organisations for use in relation to the event.
  • Recruitment agencies and related organisations. We share personal data with external recruiters and third-party providers that undertake background checks on our behalf.
  • Auditors, lawyers, accountants and other professional advisers. We share personal data with professional services firms who advise and assist us in relation to the lawful and effective management of our organisation and in relation to any disputes we may become involved in.
  • Law enforcement or other government and regulatory agencies and bodies. We share personal data with law enforcement or other government and regulatory agencies or other third parties as required by, and in accordance with, applicable law or regulation.
  • Business partners. We may also disclose personal data to third parties:
    • if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets; or
    • if we or substantially all our assets are acquired by a third party, in which case personal data held by us will be one of the transferred assets.
  • Other third parties. Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.
 
  1. Your rights

You have the following rights in relation to your personal data:

  • Your right of access. If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details).
    If you require additional copies, we may charge a reasonable fee for producing those additional copies.
  • Your right to rectification. If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified.
    If we have shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we’ve shared your personal data with so that you can contact them.
  • Your right to erasure. You can ask us to delete or remove your personal data in some circumstances, such as where we no longer need it or where you withdraw your consent (where applicable).
    If we have shared your personal data with others, we will let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal data with so that you can contact them directly.
  • Your right to restrict processing. You can ask us to “block” or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it for a particular purpose. This may not mean that we will stop storing your personal data but, where we do keep it, we will tell you if we remove any restriction that we have placed on your personal data to stop us processing it further.
    If we’ve shared your personal data with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
  • Your right to data portability. You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer it to your chosen third party.
  • Your right to object. You can ask us to stop processing your personal data, and we will do so, if we are:
    1. relying on our own or someone else’s legitimate interest to process your personal data, except if we can demonstrate compelling legal grounds for the processing; or
    2. processing your personal data for direct marketing purposes.
  • Your rights in relation to automated decision-making and profiling. You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us.
  • Your right to withdraw consent. If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.
    You can exercise your right of withdrawal by contacting us using our contact details in the How to contact us section above or by using any other opt-out mechanism we may provide, such as an unsubscribe link in an email.
  • Your right to lodge a complaint with the supervisory authority. If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, please contact us in the first instance using the contact details provided in the How to contact us section above.
    You can also report any issues or concerns to a national supervisory authority in the place of your residence or the place of the alleged infringement. You can find a list of contact details for all EU supervisory authorities at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
    As we are incorporated in the United Kingdom, our regulatory authority is the Information Commissioner’s Office (ICO). Contact details for the ICO can be found on its website at https://ico.org.uk.
 
  1. Information security

We are committed to keeping personal data secure and we have implemented information security policies, rules and technical measures to protect personal data under our control from unauthorised access, improper use or disclosure, unauthorised modification and unlawful destruction or accidental loss. In addition, our personnel and data processors (third parties that process personal data on our behalf) are obliged to respect the confidentiality of the personal data relating to users of our Site and those who purchase our Products and Services.

 
  1. How long we keep your personal data

We will only keep your personal data for as long as necessary for the purposes set out in this Privacy Notice. This includes retention and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

If any personal data is only useful for a short period (e.g. for a specific activity or marketing campaign), we will not retain it for longer than the period for which it is used by us.

If you have opted out of receiving marketing communications from us, we will need to retain certain personal data on a suppression list indefinitely so that we know not to send you further marketing communications in the future. However, we will not use this personal data to send you further marketing unless you subsequently opt back in to receive such marketing.

 
  1. Third-party links and services

This Privacy Notice only applies to personal data processed by us. Our Site may contain links to third-party websites, apps or services. We have no control over these third-party websites, apps or services and this Privacy Notice does not apply to your interaction with the relevant third parties.

 
  1. Personal data of minors

Our Site and Products and Services are not intended for use by, or targeted at, minors (individuals under the age of 18). However, this does not prevent minors from providing personal data to us, for example by accessing the Site via the internet. Where we do process personal data of minors, we will comply with all applicable laws and regulations relating to that processing.

 
  1. If you fail to provide your personal data

Where we are required by law to collect personal data, or we need to collect personal data under the terms of a contract we have with you, and you fail to provide that personal data, we may not be able to fulfil any obligations that we owe to you, and we may not be able to enter into or perform a contract with you.

 
  1. International transfers of personal data

We may transfer personal data to third parties (as described in the Sharing personal data section above) that are located in countries that do not have data protection laws that protect personal data to the same standard as the GDPR.

These third countries may not give you the same rights as under the GDPR in relation to your personal data and may not have a data protection supervisory authority to help you if you have any concerns.

When transferring personal data to third countries, we usually rely on one of the following:

  1. Adequacy decisions: We may transfer your personal data to countries or organisations that have been deemed to provide an adequate level of protection for personal data by the European Commission, the UK Government, or any other relevant government body. This may include transfers to organisations that participate in the Data Privacy Framework listed here (to learn more about the Data Privacy Framework please visit https://www.dataprivacyframework.gov/).
  2. Contractual safeguards: We may use specific contractual terms approved by the European Commission, the UK Government, or any other relevant governmental body to safeguard personal data. The contracts that we usually rely on are referred to as “Standard Contractual Clauses” or “SCCs”, although we may from time to time use other approved mechanisms. To find out more about the SCCs we use, please see here (EU) and here (UK). You can also contact us using the contact details set out in the How to contact us section above.
 
  1. Advertising and Social Media Partners

This section provides information about third parties that may be a controller of your personal data in relation to certain activities described in this Privacy Notice, meaning that the third party may (alone or jointly with us) determine how and why they will use your personal data.

Google

Google has published information about how it uses personal data in connection with its advertising services here. In addition, Google provides further information about how it uses personal data in connection with online advertising in its Privacy Policy and here. You can also use Google’s Ad Settings to manage your online advertising preferences.

LinkedIn

Where we receive insights from LinkedIn for the purposes described in the Social media pages and insights section below, we are joint controllers with LinkedIn in relation to LinkedIn’s processing of their Social Media Data to provide those insights to us.

For further information about how LinkedIn uses your personal data in connection with these activities, including the legal basis LinkedIn relies on and the ways to exercise your data subject rights in respect of LinkedIn’s processing, please see LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

 

Processing Activities Schedule

 

This Schedule sets out detailed information about the purposes for which we process the personal data described Types of personal data we collect section above and the lawful bases we rely on to do so.

This Schedule is split into the following sections – please click on the link below to be taken to the relevant section:

  1. Providing our Site and carrying out other online activities
  2. Provision of our Products and Services
  3. Customer Services, Feedback and Relationship Management
  4. Insight and Analysis, Data Improvement and Personalisation  
  5. Advertising and Marketing Activities
  6. Recruitment
  7. Business Administration, Compliance and Legal Affairs

 

1. Providing our Site and carrying out other online activities

Purpose and Personal Data Processed Description Lawful Basis
Delivery of our Site
Technical Data
To provide our Site to you, including showing correct notices, recording cookie preferences, training AI models, and providing a personalised experience via AI features.
Essential Cookies are used. See Cookies.
Legitimate interests – to provide our Site effectively.
Compliance with a legal obligation.
Performance of a contract.
Support, maintenance and security
Identity Data, Contact Data, Technical Data, Registration Data
Administer and protect our Site and users, including troubleshooting, fixing errors, system maintenance, support, security, and fraud prevention.
Respond to user enquiries and requests for feedback.
Essential Cookies are used. See Cookies.
Legitimate interests – to run our business and protect users.
Compliance with a legal obligation.
Set up and manage user accounts
Identity Data, Contact Data, Communications Data, Registration Data, Technical Data
Set up and manage user accounts, verify users for secure areas, and contact users regarding their accounts. Performance of a contract.
Legitimate interests – to provide secure and effective access.
Site development and improvement
Usage Data, Technical Data
Develop and improve the Site through insights and analysis of usage.
Non-essential Cookies are used. See Cookies.
Consent (non-essential Cookies).
Legitimate interests (where non-essential Cookies are not used).
Personalisation of our Site
Usage Data, Technical Data, Profile Data
Personalise user experiences, show relevant content, train AI models, and provide AI-based personalised services.
Non-essential Cookies are used. See Cookies.
Consent (non-essential Cookies).
Legitimate interests (where non-essential Cookies are not used).
 

2. Provision of our Products and Services

Purpose and Personal Data Processed Description Lawful Basis
Supply of our Products and Services
Identity Data, Contact Data, Transaction Data, Professional Data
Register customers, process and deliver orders, maintain databases, keep transaction records, and train AI models for personalised services. Performance of a contract.
Legitimate interests – to provide products/services safely and efficiently.
Compliance with a legal obligation.
Refunds
Identity Data, Contact Data, Transaction Data
Process any refund or cancellation requested. Performance of a contract.
Legitimate interests – to provide good service and improve customer services.
Administration of Events
Identity Data, Contact Data, Profile Data, Image Data, Professional Data, Usage Data
Register visitors, exhibitors, and speakers; provide event info; facilitate travel; make logistical arrangements; take photos/videos for promotion; send operational SMS updates. Performance of a contract.
Legitimate interests – event promotion and communication.
Explicit consent for special category data.
Event insight and engagement
Identity Data, Contact Data, Usage Data, Professional Data
Gain insights about attendance and engagement at events to improve future events (aggregate and anonymised data). Consent (where required).
Legitimate interests – measure event success and plan future events.
 

3. Customer Services, Feedback and Relationship Management

Purpose and Personal Data Processed Description Lawful Basis
Customer services and general enquiries
Identity Data, Contact Data, Transaction Data, Profile Data, Professional Data, Communications Data
Manage and respond to enquiries submitted by users. Legitimate interests – provide good service and improve customer services.
Social media pages and insights
Identity Data, Contact Data, Social Media Data
Publish and manage social media pages to promote business and analyse engagement with aggregate insights from the platform. Legitimate interests – improve online presence and content relevance.
Managing our relationship
Identity Data, Contact Data, Profile Data, Transaction Data, Professional Data, Communications Data
Manage relationships with customers, suppliers, and organisations, provide updates on products, services, and important information. Performance of a contract.
Legitimate interests – provide best experience and effective administration.
Compliance with legal obligations.
Survey and feedback
Identity Data, Contact Data, Transaction Data, Profile Data, Communications Data
Conduct surveys and feedback to improve Site and services. Legitimate interests – improve Site and products/services.
Public Relations and Media
Identity Data, Contact Data, Profile Data, Professional Data, Communications Data
Respond to media requests and send corporate communications for PR purposes. Legitimate interests – ensure accurate representation in media and provide requested information.
 

4. Insight and Analysis, Data Improvement and Personalisation

Purpose and Personal Data Processed Description Lawful Basis
Insight and analysis
Technical Data, Usage Data, Profile Data
Analyse Site usage, marketing effectiveness, advertising success, customer insights, and events. Legitimate interests – develop and improve Site and services.
Consent (non-essential Cookies).
Data improvement
Identity Data, Contact Data, Profile Data
Improve data quality through enrichment, cleansing, and segmentation. Legitimate interests – efficient use of data.
Compliance with legal obligations.
Personalisation
Technical Data, Usage Data, Profile Data
Tailor information and experiences for users on Site, AI features, and marketing communications.
Non-essential Cookies are used. See Cookies.
Legitimate interests – best user experience and marketing support.
Consent (non-essential Cookies).
 

5. Advertising and Marketing Activities

Purpose and Personal Data Processed Description Lawful Basis
Marketing communications
Identity Data, Contact Data, Communications Data
Promote business via email, phone, or post. Personalised where relevant. Consent (email).
Legitimate interests (phone/post).
Users can unsubscribe at any time.
Third-party marketing (lead generation)
Identity Data, Contact Data, Profile Data, Communications Data
Share data with partners/sponsors for marketing and event follow-ups. Consent.
Legitimate interests – enable marketing services and promote partners' businesses.
Prize draws, competitions, promotions
Identity Data, Contact Data, Profile Data
Administer promotions and competitions, subject to terms and conditions. Performance of a contract.
Legitimate interests – fair administration and regulatory compliance.
 

6. Recruitment

Purpose and Personal Data Processed Description Lawful Basis
Recruitment
Identity Data, Contact Data, Recruitment Data
Assess suitability for roles, communicate about recruitment, keep records, comply with legal obligations, review equal opportunity profiles. Legitimate interests – best recruitment decisions.
Performance of a contract or steps prior to contract.
Compliance with legal obligations.
 

7. Business Administration, Compliance and Legal Affairs

Purpose and Personal Data Processed Description Lawful Basis
Business administration and legal compliance
Identity Data, Contact Data, Registration Data, Professional Data, Image Data, Transaction Data, Profile Data, Usage Data, Technical Data, Social Media Data, Incident Data, Communications Data, Recruitment Data
Comply with legal obligations, enforce rights, protect third-party rights, facilitate business transitions. Legitimate interests – effective business operation.
Compliance with legal obligations.
Security
Identity Data, Contact Data, Image Data
Implement physical security, CCTV monitoring, building access controls, and visitor logs. Legitimate interests – keep premises secure and safe.
Health, Safety and Incidents
Identity Data, Contact Data, Profile Data, Incident Data
Report or manage health, safety, or other incidents at premises or events. Compliance with legal obligations.
Legitimate interests – manage and improve incident handling.
Necessary to protect vital interests.