Sign Up

What is 8 + 4?

Have an account? Sign In Now

Sign In

What is 8 + 4?

Forgot Password?

Don't have account, Sign Up Here

Forgot Password

Lost your password? Please enter your email address. You will receive a link and will create a new password via email.

What is 8 + 4?

Have an account? Sign In Now

Please type your username.

Please type your E-Mail.

Please choose an appropriate title for the question so it can be answered easily.
Please choose the appropriate section so the question can be searched easily.

Type the description thoroughly and in details.

What is 8 + 4?

Sign InSign Up

Watercooler by DPOrganizer

Watercooler by DPOrganizer Logo Watercooler by DPOrganizer Logo

Watercooler by DPOrganizer Navigation

Search
Ask A Question

Mobile menu

Close
Ask a Question
  • Home
  • Categories
    • GDPR
    • Privacy Management
    • Professional Development
    • Software tips and tricks
    • Polls
  • Help
  • About Watercooler
Home/ Questions/Q 8644
Next
In Process
nhazlewood
nhazlewood

nhazlewood

  • 1 Question
  • 1 Answer
  • 0 Best Answers
  • 0 Points
View Profile
  • 0
Asked: January 18, 20222022-01-18T14:54:32+01:00 2022-01-18T14:54:32+01:00In: GDPR, Privacy Management

Documenting the legal basis for personal information given orally for customer support

  • 0

Starting the data mapping for processes and had the legal basis for collecting PII(Name, contact info, email) as consent but I realised that consent is not appropriate since no verbal request for consent was made or documented before the information was received. Therefore, what would be better to use in this case as the legitimate reason for processing the customer data provided? I believe legitimate interest is most suitable given the scenario but would like the opinion of other professionals.

  • 2 2 Answers
  • 0 Followers
  • 0
Answer
Share
  • Facebook

    2 Answers

    • Voted
    • Oldest
    • Recent
    1. DP-Pro

      DP-Pro

      • 0 Questions
      • 15 Answers
      • 0 Best Answers
      • 15 Points
      View Profile
      DP-Pro Bronze contributor
      2022-02-09T09:35:47+01:00Added an answer on February 9, 2022 at 9:35 am

      Ideally we’d need a bit more information about the process to be able to give an informed answer but what you are describing is the fuzzy margin between CONSENT and EXPLICIT CONSENT. Simply by providing contact details could constitute consent, but it is not clear whether this was FREELY GIVEN. Furthermore, without providing any contextual dialogue at the time the details were obtained it is unlikely that the provision of these details was SPECIFIC or INFORMED, meaning that any assumed CONSENT will be invalid. If the details were necessary for a product or service, then CONTRACT might be the more appropriate lawful basis. I tend to regard LEGITIMATE INTERESTS as the last option, because it is so wide and vague in its application, but there are options and the choice is yours..

      • 0
      • Reply
      • Share
        Share
        • Share on Facebook
        • Share on Twitter
        • Share on LinkedIn
      • nhazlewood

        nhazlewood

        • 1 Question
        • 1 Answer
        • 0 Best Answers
        • 0 Points
        View Profile
        nhazlewood
        2022-02-09T15:07:07+01:00Replied to answer on February 9, 2022 at 3:07 pm
        This answer was edited.

        In this scenario and customer, prospective customer or even job applicant can contact the call center in order to make a compliant, information on services, quotes, request for changes in account, more information concerning a service already signed up for, even job vacancies.
        As part of the customer service process is to take the information of the requester/caller (name, email, contact number) which is noted in a ticketing system and then pass on the request to the relevant department who could deal with the matter by reaching back out to the customer/prospect directly, if the customer representative taking the incoming call cannot address the request on his/her own.
        So the purpose of processing is clear, and I agree legitimate interest should be last resort but would consent be applicable in this scenario as it the PII was requested and given freely as it was necessary in order to service the incoming call & request of a customer or prospect?

        • 0
        • Reply
        • Share
          Share
          • Share on Facebook
          • Share on Twitter
          • Share on LinkedIn

    Leave an answer
    Cancel reply

    You must login to add an answer.

    What is 8 + 4?

    Forgot Password?

    Sidebar

    Ask A Question

    Trending contributors

    Smurf333

    Smurf333

    • 12 Answers
    Bronze contributor
    Dave_Wylie

    Dave_Wylie

    • 28 Answers
    Bronze contributor
    CRodica

    CRodica

    • 6 Answers
    Rising star contributor
    Atis

    Atis

    • 4 Answers
    Ian G

    Ian G

    • 5 Answers
    Rising star contributor

    Recent questions

    • Ian G

      Revoke.com - new third party portal for customer right requests

      • 0 Answers
    • Anonymous

      Instagram!!

      • 0 Answers
    • Olga

      DPO in EU and UK

      • 2 Answers
    • Smurf333

      DBS scenario with HR retaining excessive information for longer than ...

      • 2 Answers
    • CRodica

      Parties role towards employees data for administrative purposes

      • 0 Answers

    Explore

    • Home
    • Categories
      • GDPR
      • Privacy Management
      • Professional Development
      • Software tips and tricks
      • Polls
    • Help
    • About Watercooler

    Footer

    Your privacy

    • Cookie notice
    • Privacy notice

    Terms and policy

    • Acceptable Use Policy
    • Terms of Use

    © 2021 DPOrganizer. All Rights Reserved. With Love by DPOrganizer.