Basis for legitimate interest
1. Identification of legitimate interest(s)
What is the purpose of the processing operation?
Acasta Energy Services Limited processes data for sales, marketing, communication and analytical purposes. This includes but is not limited to the provision of tailored offers and services, as well as relevant and effective communication to customers, potential customers and stakeholders.
Why does this happen and who benefits from this?
Individuals and their organisations benefit from an understanding of the unique capabilities and services provided by acasta, which could in turn create added value and enhance profitability of the projects they are associated with. Acasta Energy Services Limited benefits from reduction of non-productive work and continued sales, which is essential to the continuation of the business.
Are there any wider public benefits to the processing?
No
How important are those benefits? What would the impact be if you couldn’t go ahead?
Lack of information could be detrimental to ongoing engineering projects. In addition, the maintenance of a clean and accurate list of customers, prospects and suppliers is essential to the smooth operation of the business. Without this processing, the business would be unable to consistently execute the tasks required for our and our customer’s continued operation.
Would your use of the data be unethical or unlawful in any way?
No, the use of data is compliant with GDPR laws which allows processing on the basis of legitimate interest subject to the completion of a legitimate interest assessment.
2. The necessity test
Why is it important to process this data?
Without this data, Acasta Energy Services Limited would be unable to provide a tailored and effective service to its customers and would be unable to identify and inform customers, prospects and stakeholders about products and services which add value to their projects. The data processing also enables Acasta Energy Services Limited to appoint contractors to work on the company’s behalf (such as when a design engineering contractor is asked to respond to aa prospect's request for technical information), which helps to provide a higher level of service to customers.
Is there another way of achieving this objective?
No, the processing of data in this way is essential to these objectives.
3. The balancing test
What is the connection between the individual and Acasta Energy Services Limited?
We keep data of customers, prospects and relevant stakeholders, all of whom operate in a business to business environment.
Data is generally collected directly although it can sometimes be indirect, such as a referral from a colleague. In all cases, the individual will be informed that their data is being processed and will be provided with the option to exercise their rights in line with rules set out by GDPR.
In a business to business environment, individuals would reasonably expect information to be stored and used in this manner by other organisations within the manufacturing and engineering industry.
How does this processing benefit the individual?
In a business and engineering environment, it is important to individuals that they have an appreciation of the capabilities and unique selling points of organisations operating within the industry. The data processing enables them to receive tailored and relevant information to that regard. This, in turn could enhance the profitability and efficiency of projects they are associated with.
Does the processing affect the individual’s rights?
No, our processing complies with rules set out by GDPR and given the business nature of our relationship with data subjects, is very unlikely to cause distress to any individual. In addition, we do not keep data of children or vulnerable people.
Does the individual have influence and control over the processing of their data?
Yes, individuals will be made aware that we have their data and can request to change their preferences on the processing of thier data.
4. Mitigation controls
To ensure that individuals, especially those who have not directly given their data, have choice and power over the processing of their data, all new entries on our database will receive an email with a link to a preference centre, where they can control and limit the use of their information.
We will also ensure that our databases are routinely cleaned.
