cagliostro wrote:ctfc-fan wrote:Only thing I’d disagree with Cag is GDPR doesn’t stop you marketing to someone so long as it’s likely to be relevant, the marketing message has all your details on it and there is a way to instantly unsubscribe.
A lot of this comes under PECR and thankfully it doesn’t otherwise business would grind to a halt.
Wrong......it does not matter if it is relevant.....you need MY consent...GDPR is a business enabler...read it, understand it....and if you cannot be bothered to read millions of pages...talk to me.
Cag
From the ICO:
When can we make marketing calls to individuals?
You can call any individual who has specifically consented to receive marketing calls from you – for example, by ticking an opt-in box. See What counts as consent?
You can also make live calls without consent to a number if it is not listed on the TPS – but only if that person hasn’t objected to your calls in the past.
In practice, this means you will need to screen most call lists against the TPS register. You will also need to keep your own ‘do not call’ list of people who object or opt out, and screen against that as well.
For further information, see our guidance on direct marketing.
When can we make marketing calls to businesses?
The rules are the same as for calls to individuals. So, you can call any business that has specifically consented to your calls – for example, by ticking an opt-in box.
You can also make live calls to any business number that is not registered on the TPS or the CTPS, but only if they haven’t objected to your calls in the past.
You should remember that some businesses (sole traders and some partnerships) register with the TPS, and others (companies, some partnerships and government bodies) register with the CTPS. For business-to-business (B2B) calls, you will therefore need to screen against both the TPS and the CTPS registers, as well as your own ‘do not call’ list.
When can we rely on legitimate interests for marketing?
You can rely on legitimate interests for marketing activities if you can show the way you use people’s data is proportionate, has a minimal privacy impact, and people would not be surprised or likely to object to what you are doing – but only if you don’t need consent under PECR.