DSGVO Archives - Leadrebel Blog https://blog.leadrebel.io/tag/dsgvo/ Blog about B2B Lead Generation Fri, 17 Mar 2023 09:02:04 +0000 en-US hourly 1 https://wordpress.org/?v=6.7.1 https://blog.leadrebel.io/wp-content/uploads/2019/09/output.png DSGVO Archives - Leadrebel Blog https://blog.leadrebel.io/tag/dsgvo/ 32 32 10 GDPR Compliant Sales Software https://blog.leadrebel.io/gdpr-compliant-sales-software/ Sat, 05 Nov 2022 15:36:01 +0000 https://blog.leadrebel.io/?p=1759 10 GDPR Compliant Sales Software Since May 25, 2018, all companies are obliged to comply with the new EU data protection guidelines, also known as the General Data Protection Regulation (GDPR). It regulates the processing and use of personal data. Violations can result in high fines. GDPR-compliant sales software is therefore fundamental. In this article,

The post 10 GDPR Compliant Sales Software appeared first on Leadrebel Blog.

]]>
10 GDPR Compliant Sales Software

Since May 25, 2018, all companies are obliged to comply with the new EU data protection guidelines, also known as the General Data Protection Regulation (GDPR). It regulates the processing and use of personal data. Violations can result in high fines. GDPR-compliant sales software is therefore fundamental. In this article, you will learn what is necessary to work in compliance with the GDPR and find a list of 10 GDPR compliant sales software products.

Why the GDPR is relevant for your company

The overarching goal of the European General Data Protection Regulation is to strengthen the right to informational self-determination. It applies to all companies and public bodies within the EU that store and process personal data. Companies outside the EU that offer their products or services to EU citizens and collect their data are also obliged to comply with the GDPR.

Since personal data is processed for almost every business transaction in sales, marketing or service, every company is also obliged to comply with the GDPR. The collection and processing of personal data is particularly necessary for sales software that is used to acquire new customers and improve customer relationships. After all, personal data is required to contact the right contact person using the right communication channel. The processing of an order alone is based on personal data. The use of a GDPR-compliant CRM or software system is therefore elementary.

What is personal data?

Personal data includes all information in the private and business environment that relates to an identifiable natural person.

These include:

  • First and Last Name
  • Address
  • Phone number
  • IP address (from private website visitors)
  • E-mail address
  • Contact details of the contact persons of customers or suppliers
  • Contact details of newsletter recipients

Specifications for GDPR-compliant sales software

GDPR-compliant sales software supports your company in the management of personal data and guarantees your customers security and the protection of their rights. For the GDPR to allow the use and processing of personal data at all, there must be a legal basis for it. For example, personal data is required to process a contract. There is also a legal basis if the personal data must be collected to comply with the law or if the person concerned has given their consent to the use of the data.

Even if there is a legal basis, the personal data may only be used for the original purpose (purpose limitation). Only as much data may be collected as is necessary for the specific purpose (data minimization). Furthermore, all personal data should be deleted as soon as they are no longer needed for the original purpose (storage limitation). The legal retention period is ten years. If the data recorded by customers, suppliers or employees is incomplete or incorrect, it must be corrected immediately (accuracy). In addition, personal data must be protected against loss, falsification, and access by unauthorized persons (data security).

Required functionalities for GDPR compliance of the sales software:

  • Right to information: At the request of a customer, it must be possible to clearly show which data has been stored and for what purpose.
  • Right to erasure: Unless another law requires the storage of personal data, it must be possible for all data to be erased as soon as the data subject so requests.
  • Logging: Who and when recorded, deleted, or changed data must be always recorded.
  • Obligation to provide evidence: Consent to the use of personal data must be documented in writing.
  • Data economy: Software must have a deletion concept so that data is only stored for the necessary duration.
  • Data portability: it must be possible to provide personal data in a commonly used format upon request.
  • Right to restriction of processing: Personal data may only be processed automatically with specific consent.
  • Right to object: Anyone can object to the processing of personal data. This right must be pointed out in the very first communication.
  • If an objection is filed, all personal data must be inactive in the sales software and may no longer be processed automatically.
  • Access Control: Functions to be able to view and export data must be protected. Access rights may only be granted to authorized persons.
  • Data storage: Data must be stored within the EU.

10 Software for Selling with GDPR Compliance

1CRM

The sales software from 1CRM ensures compliance with the EU GDPR through new functions. Personal data can, for example, be prepared for the right to information, data can be changed and deleted. 1CRM provides detailed instructions on the website. The server location is in Germany. The CRM system can also be hosted on your own server.

SuperOffice

https://www.superoffice.de/funktions/dsgvo/

SuperOffice’s B2B specialists offer special features to comply with GDPR regulations. When the consent is saved, it is documented who recorded it and the communication channel used to give the consent. Data protection violations are immediately displayed for processing and different access permissions can be set. All data is protected by an ISO 27001 certified Information Security Management System.

LeadRebel

https://leadrebel.io/de/dsgvo

LeadRebel is sales software that identifies website visitors and converts them into qualified leads to attract new B2B customers. The software comes from Switzerland and is hosted in Germany. LeadRebel works demonstrably in compliance with data protection regulations. GDPR compliance is regularly checked externally to be able to offer customers the greatest possible security. The functions relevant to data protection include:

  • Company related tracking
  • Personal data of employees will not be saved
  • Gathering data only from open sources
  • Encrypted traffic
  • Hosted in EU (Germany)
  • Data processing agreements with all suppliers

TecArt CRM PRO

https://www.tecart.de/dsgvo-konformant#home

The CRM system of the German company TecArt works according to the modular principle. All data is stored in a data center in Germany. The company promises the highest GDPR compliance and offers numerous functions for a GDPR-compliant way of working.

Falcana

Falcana’s sales software is designed for small and medium-sized companies. It offers general data protection functions such as deleting addresses, capturing consents, and distributing permissions. In addition, the “Privacy Premium” extension can be activated, which contains many automated functions to ensure compliance with the GDPR in an even more time-saving manner.

Cobra CRM

https://www.cobra.de/crm-und-datenschutz/cobra-crm-geprueft-nach-dsgvo

Cobra CRM promises high standard of GDPR compliance with their software for sales. The sales software offers an extra data protection cockpit, with which the data protection officer should keep an overview. Numerous functions support GDPR compliance. An e-book about cobra CRM and GDPR is available for download on the website.

Combit CRM

https://www.combit.net/crm-software/

The all-in-one sales software is hosted in Germany and can be used via a private cloud. Combit actively supports you in complying with the provisions of the GDPR and documents processes automatically.

Clap

The sales software Weclapp supports compliance with data protection guidelines with various functions. Information about stored personal data can be obtained at any time. The data is stored on servers in Frankfurt am Main. Data transfers are always encrypted.

CentralStationCRM

https://centralstationcrm.de/Haeufige-Fragen-FAQ

With redundant data storage in a high-security data center in southern Germany and encrypted data transmission, CentralStationCRM offers a high level of security.

Pipedrive

https://support.pipedrive.com/de/article/pipedrive-and-gdpr

Pipedrive, one of the world’s most successful CRM providers, also is GDPR-compliant. Third parties are used to ensure lawful data transfer, according to Pipedrive. To meet the data protection guidelines, a data center was set up in Germany.

Conclusion: 10 GDPR-compliant sales software

As a company, it is essential that your sales software works GDPR-compliant. This greatly simplifies your adjustments to the EU General Data Protection Regulation and protects you from violations. More importantly, you will increase your customers’ trust in your company.

The post 10 GDPR Compliant Sales Software appeared first on Leadrebel Blog.

]]>
Generating More Leads: 14 Smart Lead Generation Tips https://blog.leadrebel.io/lead-generation-tips/ Wed, 07 Aug 2019 16:05:56 +0000 http://blog.leadrebel.io/?p=195 Generating More Leads: 14 Smart Lead Generation Tips In the following article, you will find 14 lead generation tips. The more leads you have, the more likely you are to sell. Lead generation is the key to any company. Even if your product is (still) lacking in sophistication, your chances of making a profit increase

The post Generating More Leads: 14 Smart Lead Generation Tips appeared first on Leadrebel Blog.

]]>
Generating More Leads: 14 Smart Lead Generation Tips

In the following article, you will find 14 lead generation tips. The more leads you have, the more likely you are to sell. Lead generation is the key to any company. Even if your product is (still) lacking in sophistication, your chances of making a profit increase when you connect with people who are interested in your business.

14 Smart Lead Generation Tips:

  1. Talk directly to your potential customers
  2. Use Google Ads to generate more leads
  3. Invest in new technologies
  4. More leads through Facebook
  5. Use outbound and inbound marketing methods together
  6. Optimize content: Content strategy
  7. Lead generation B2B: Is it all over because of GDPR?
  8. Generate more leads with LinkedIn
  9. Automate your marketing
  10. Offer a free software tool on your website
  11. Answer a question on Quora
  12. Comment on other blogs
  13. Rely on email marketing
  14. Interview influencers and generate more leads

1. Talk directly to your potential customers

Direct customer retention should be at the top of the priority list. 

However, most companies opt for indirect engagement instead – such as frequently asked questions (FAQs). This may be cheaper but not the most effective way to communicate with customers.

Instead set up live chat, forums, and help centers. This makes it easier for customers to contact you and helps generate leads.

Tip: set up a community channel, like on Slack or Telegram, and make sure customer inquiries are answered as quickly as possible. 

2.  Use Google Ads to generate more leads

To generate leads, marketers often use direct-response campaigns; for example, with Google Ads. Those encourage customers to perform a specific action. If you want to place such ads, you have to consider some crucial points.

Tip: Google offers free training for beginners and advanced users. In Germany, register via the Google Zukunftswerkstatt (Google Digital Workshop). Link for Switzerland: Learn with Google. If you want to get a taste of Google first: Read this article.

By the way: we at LeadRebel can manage your campaigns and generate more traffic. More traffic means more leads, primarily if you use our software.

3. Lead generation tips: Invest in new technologies

Keep an eye on emerging technologies. Chatbots? Optimization for smartphones and tablets? If the big guys are doing it, you better consider it, too.

Chatbots are virtual assistants that enhance the customer experience. In general, they act as courteous employees who answer questions or give instructions. Simple chatbots can be programmed very cheaply, or you can create them yourself with the help of a modular system.

The bank DBS Singapore uses a chatbot as a mobile app. The customer can call up transactions, make transfers or request a current interest rate/exchange price via text or voice request. If the chatbot cannot answer a question, it forwards the customer to an employee.

The inhibition threshold of interacting with a robot is low.

4. More leads through Facebook

On Facebook, you can create campaigns to generate leads. Customers can automatically enter their contact details using an Instant Form. Besides, the feature offers the possibility to track the lead conversion events on your website with the Facebook pixel.

In this blog article, you can learn more about it.

5. Use outbound and inbound marketing methods together

Many companies still rely on outbound marketing and are not yet ready to switch to inbound. For a good reason: Outbound has proven itself and worked for a long time.

But times are changing. React and optimize some strategies in the first step:

  • personalize your email communication
  • become active in online communities
  • solve the problems of your customers – online

This promotes the relationship between your company and your customers.

6. Optimize content: Content strategy

Content is the traffic engine for your website generating more leads.

A good blog post can generate you leads for years. The same applies to useful videos and podcasts. Extra tip: Spread crisp infographics.

7. Lead generation B2B: Is it all over because of GDPR?

How do you get data? By buying some. Clients should, however, consider the following two points:

If you purchase customer data, the service provider must inform you of a clause. It declares that the personal data obtained from him will be passed on to third parties and states for which purposeyou can use the data.

For example: If you have a white paper about software development, you cannot send hardware advertisements to this lead.

Once you have entered the data records, you must inform the new leads of the data entry within 30 days.

8. Lead generation tips: Generate more leads with LinkedIn

LinkedIn is currently the most enterprise-oriented social networking site on the market. It allows its users to distribute content to an audience with impressive backgrounds and profiles.

This article gives you all the details.

9. Automate your marketing

What about a tool that generates leads for you? Is it one of the lead generation measures that pay off?

You are probably already familiar with LeadRebel. You can learn more here. There are many other tools that you can use effectively in combination with LeadRebel.

Some examples:

Marketo Marketing Automation Software: The software enables good integration into the selected CRM program. Users appreciate the pre-designed smart forms that recognize existing contacts and automatically offer content for download.

Hubspot Marketing Automation Software: The software is a tool suitable for start-ups as well as medium-sized companies. The all-in-one marketing solution puts you in control of the performance of marketing activities, all content and preferred channels. The platform is a real all-rounder.

10. Offer a free software tool on your website

If you provide a free, user-friendly software tool on your site that directly delivers a result to the customer, this can boost trust. An excellent example of this is the Website Analyzer available on Neil Patel’s Quick Sprout blog.

11. Lead generation tips: Answer a question on Quora

Quora is a question & answer based social networking site with fun. Millions of people from different population groups ask questions on the Internet every day. If you answer enough questions, users will recognize your profile over time. The probability that they will visit your website increases.

12. Comment on other blogs

Leave helpful comments that show that you know what you’re talking about. This makes your name better known and can support you in B2B lead generation. Be kind and generous. People want to see what else you have to offer.

13. Rely on email marketing

Email marketing is based on direct engagement.

Pay attention to the following points when sending content:

  • Subject line: The subject line must be seductive and crisp – the recipient must want to read the content. It should address the issues that your potential leads are generally facing.

Conciseness: The content of the e-mail should be concise, short and appealing.

  • Integrate social media links into your emails so you can reach readers instantly through your social media channels.
  • Embed texts and images. The images must load quickly – so you should reduce the size of the file before sending it.

Integrate a call-to-action button: CTAs in the top half of the email are most useful.

14. Interview influencers and generate more leads

Address influencers your customers respond to positively and interview them for your blog or social channels.

  • Ask brief/profound questions.
  • Summarize the most important points. 
  • Ask the influencer if he/she can say a few words about your products at the end. 

This lead generation tip will increase your credibility and your chances of getting good leads.

Image Source: https://www.flickr.com/photos/152123747@N06/32863956976

The post Generating More Leads: 14 Smart Lead Generation Tips appeared first on Leadrebel Blog.

]]>
Lead Generation and GDPR https://blog.leadrebel.io/lead-generation-and-gdpr/ Tue, 23 Jul 2019 09:59:32 +0000 http://blog.leadrebel.io/?p=62 New Customer Acquisition in the Age of GDPR The GDPR, the EU’s General Data Protection Regulation, has been in force for all EU citizens since 25 May 2018. The two-year implementation period was an intense process for entrepreneurs examining personal data. Lead generation and GDPR is a complex topic and needs lots of attention. It

The post Lead Generation and GDPR appeared first on Leadrebel Blog.

]]>
New Customer Acquisition in the Age of GDPR

The GDPR, the EU’s General Data Protection Regulation, has been in force for all EU citizens since 25 May 2018. The two-year implementation period was an intense process for entrepreneurs examining personal data. Lead generation and GDPR is a complex topic and needs lots of attention.

It takes a good compliance strategy if you intend to successfully integrate the new data protection law into your company with impunity. Therefore, it is recommended to continually incorporate the requirements into every business process – including customer acquisition – by GDPR principles.

In this article, you’ll learn how to do it the easy way. Besides, you will receive a compact overview of changes and helpful hands-on tips.

Lead generation and GDPR: Caution when Handling Data

Latest from 25 May 2018, every company – be it a large enterprise or a start-up, a B2B or B2C – must deal with the new EU regulation on the protection of personal data of EU citizens, the General Data Protection Regulation.

Why? 

  • The new regulation strengthens the privacy rights of consumers concerning their personal data.
  • Personal data are, e.g. the name, birth date, place of birth and residence, employer, religious affiliation, contact data, address, credit card and passport number, IP addresses, location data, cookies. 
  • Data protection now applies to the smallest areas; company size does not matter: every business that processes personal data is affected. 

Here is why: 

  • The GDPR requires that companies handle personal data transparently and securely at all times. 

Hence, it does not matter where a company is located. Not just companies operating within the EU have to apply the GDPR. All organizations that process data from EU citizens are accountable for them. 

What the Data Protection Regulation Entails

You frequently organize raffles or send emails to people who have not yet registered with your company?

Until now, it was easy to collect and use this data. 

Previously, silence and inaction of customers were considered tacit consent. Thanks to the GDPR, this is no longer the case. 

Still unsure to what extent the GDPR is relevant for you? Put the following questions to yourself: 

  • Have you used purchased mailing lists previously?
  • Added business card contacts to your mailing lists habitually? 
  • Have you ever asked existing customers for recommendations? 

If any of the answers are “yes”, then you should familiarize yourself – in addition to the amendments – with the legal basis of the GDPR. You will find them at the end of this post. 

GDPR in the Context of Customer Acquisition

In this part, we will focus on the practical application of the GDPR for customer acquisition. 

Put simply:

  • Every work step involved with customers and suppliers must be re-evaluated in the light of the new data protection regulation.
  • Thorough attention must be paid to ensuring that every partner in your company will be informed of their rights when transferring personal data.
  • Evidence of this must be provided when required.

This has implicationsfor various areas of your B2B outbound lead generation. The GDPR applies to all types of direct advertising, be it: emails, brochures, catalogs, sales calls, product samples as well as data research and storage. 

How the GDPR is Changing Customer Acquisition

Data collection & obtaining approvals 

Typically, you obtain a person’s consent by using a web form, a link to your privacy policy, and a follow-up email. 

The GDPR enables customers to exercise their right to receive information at any time about the type of data collection, its purpose and intended use. 

Individuals may also request unrestricted information on the purpose and retention period of the storage of their data (see Article 13 and Article 14).

  • From the time of capture, you have 30 days to explicitly inform the person of your best practice and to explain your reasons. 

If a person responds to your confirmation and requests that you delete the data, you must do so immediately. 

However, you may still keep some anonymized data so that it will no longer be possible to approach the contact in the future.

Sounds easier than it is.

In some cases, you are obliged by law to retain certain personal data even though this person has asked you to delete his or her data.

In such cases, you need to inform the individual that you are required by law to retain this information. Always state the reasons for this.

You must not send any advertising to this person (unless the person has explicitly agreed).

  • Also, in this case, document the person’s consent. Well-documented consent is the foundation for your compliance with the GDPR.

Data Processing under the GDPR

Of course, if a potential customer has agreed to the data processing, you want to utilize the data. In light of the GDPR, this means that you must check the processing of these data.

Example: A potential customer calls your company and asks for a free version of your software. You then send him some emails to help him get started.

This is no longer permitted since May 2018. You will risk a fine for doing so.

In this way, you avoid fines:

  • Inform the prospect that you have saved his or her email address.
  • Make sure that the person concerned actively agrees or subscribes to a mailing list.
  • After a phone call, send a follow-up email. You will find more details in the following section.

Pitfalls: How Exactly Does Customer Acquisition Change with the GDPR?

In 2017, the Data Protection Conference, the independent data protection authority of the federal government, confirmed in a short paper that direct advertising is only possible if the addressee agrees to the measures.

Once you have obtained this consent, you can safely start the acquisition process. Without this consent, however, your hands are tied.

For most companies, it is common to use the data available to the organization. Direct advertising is, therefore, still permitted in most circumstances. But if you want to be on the safe side, ask your respective business partner to agree to your advertising measures.

  • You may want to consult a lawyer to determine whether direct advertising is permitted in an individual case.

When dealing with private consumers, section 7 of the German Unfair Competition Act (UWG) still applies. If you want to make telephone calls or send fax, email or SMS advertising, you must obtain the consent of the consumer.

Section 7 (UWG) governs the exceptions to this rule. Your lawyer will assess whether you can use them for your communication.

Email Acquisition in the Age of the GDPR

Under no circumstances should you send automated, unsolicited emails to potential customers.

However, you may send individual emails if there is a legitimate interest. We recommend that you attach a link to your privacy policy to such an email. You should also state the reason why you are contacting the prospect.

Another way to properly acquire emails is to use a “keep me informed” button on the website. You should also use a double opt-in form in your newsletter registration process. Thirdly, there must be traceable records of the agreement.

Any pre-checked boxes or similar procedures that do not require active action by the potential client are not permitted.

  • To do: Include checkboxes into your form.

Telephone Acquisition in the Age of GDPR

You may still perform cold calling, as it does notfall under the GDPR.

However: You should explicitly ask for permission before saving the data of an interested party in your system.

  • Check on the phone if the potential customer would like to receive your newsletter.
  • Immediately email the link to the newsletter subscription (so you meet the double opt-in requirement).
  • The mail should mention whyyou called the customer, whatyou agreed to do, and whyyou sent the email.

By doing so, you are protecting yourself from all sides. It is not always easy to document phone calls unless they are recorded. With the procedure mentioned above, however, you can bypass this hurdle.

Some special rules apply to telephone calls in general.

  • If you wish to contact a private individual in the future, you must always obtain explicit consent.
  • When making sales calls, never suppress your phone number. If you violate this rule, you may be fined up to €10,000.
  • If you do not adhere to the overall guidelines, you could be fined up to €300,000.

The situation is different for traders: here, you only need a presumed consent. From experience, it can be assumed that you will receive the permission.

  • As you know, in online marketing, you obtain the necessary consent through a double opt-in form.
  • You cannot use this procedure for telephone advertising.

Why?

This method cannot ensure that the owner of the telephone number and the email addressee are the same person. A scammer could give you a phone number that belongs to another person.

Networking: Lead Generation under the GDPR

Those who sell go to trade fairs and events. There, the ambitious salesman collects business cards and contact data. Previously, it was hassle-free to add the collected contact data to the mailing lists and start advertising.

This is no longer permitted under the GDPR.

What you’re allowed to do:

To send a targeted email or make a call to an individual contact. The exchange of a business card is a legitimate interest in maintaining contact.

It’s going to be difficult here:

Suppose a friend of yours asks you to contact another entrepreneur because he needs your help. In the age of the GDPR, you can no longer contact this person by telephone acquisition, but only when you have received a written declaration of consent from the potential customer. This must state clearly that you may call him for advertising purposes.

Contact via Social Media

If you have acquired customers and recruited staff through LinkedIn so far, you may continue to do so. The GDPR does not prevent you from contacting potential customers.

The good news is that LinkedIn and Xing provide you with handy copy and paste templates for all your contact requests. After a successful initial contact, you may obtain consent for sending a newsletter and maintaining communication.

Please be careful: In case of doubt, you must be able to prove that you have received this permission from the potential customer. As in all other cases, “documentation” is key.

What Happens to the Data that You Have Already Collected?

The GDPR contains the “right to forget“. If a customer requests it, every company is obliged to delete already stored data.

  • Make sure that you make it easy for the customer to unsubscribe from your newsletters.
  • Under the GDPR, your contacts may request a copy of any personal data you have stored about them.

At any time, they may request you to correct or delete this information.

It is best to set up a procedure with which you can automatically meet such demands.

Interim Conclusion: Lead Generation and GDPR

If you still want to win new customers, remember the following checklist:

Private individuals: For fax, email, telephone and SMS advertising, prior consent is required. The legal basis has, therefore, not changed.

Companies: in this case, the presumed consent, according to Article 6 GDPR, is sufficient.

Email and online marketing: Protect yourself with a double opt-in form. Every email program offers this procedure.

Phone-advertising: Obtain express permission to store the data of a private person. Commercial calls are based on “legitimate interest”.

Section 7 (UWG) includes exceptions to this rule, and if an existing customer has given you consent through an earlier purchase, you may also promote similar products.

Lead generation and GDPR Best Practice: How to Avoid Violations of Data Protection Laws

Are there any situations in which you can waive a consent?

Suppose you want to send your new brochure to an existing customer. Because the customer is already in your database, you assume that the customer agrees.

Remember: In principle, nothing works without consent in matters of direct advertising.

However, the situation is slightly different for existing customers: As an entrepreneur, you may continue to offer him similar services and goods without having to obtain additional consent.

Practice shows, though, that the courts handle this exception rigorously. Hence, we recommend that you contact a lawyer in case of doubt to clarify the matter.

Correct training, avoid mistakes

Think about how you can train your sales staff to rule out legal violations. If in doubt, seek expert advice and organize in-company training.

The GDPR is founded on these legal principles

The following laws still govern direct promotional activities via telephone and email advertising:

  • German Civil Code (BGB)
  • Telecommunications Act (TKG)
  • Unfair Competition Act (UWG)
  • Federal Data Protection Act (BDSG)
  • General Data Protection Regulation (GDPR)

Here you will find an overview of the legal basis of the GDPR. They are divided into six areas that you should know.

Legal basis of the GDPR:

  1. Legal obligations and compliance with statutory regulations
  2. Agreements
  3. (Vital) interests
  4. Acting in the public interest or under official authority
  5. Legitimate interests
  6. Consent of data subjects

The strictest, most accurate and ideal legal basis for the processing of the data controller is the existence of at least one lawful provision (Article 6(1)).

We can name many examples of this legal basis: 

  • Employment records
  • Accident reports for patient records 
  • Health and safety records
  • Etc.

2. Lead generation and GDPR : Agreements

One example is the processing of credit card information so that the customer can make a payment.

If, e.g. your customer requests service or product information by email or via social network, processing that customer’s personal information is permitted in order to answer her question.

3. (Vital) interests

“Vital interests” only refer to situations involving life-threatening emergencies. This category includes emergency services that receive a list of names and ages based on an emergency call.

It is permissible to process these data if a person is in critical condition. You can extend this requirement to affiliated persons, such as children or parents.

4. Acting in the public interest or under official authority

Example: the electoral register of a political party. This subsection covers that a party may be permitted to maintain a copy of the data.

5. Lead generation and GDPR : Legitimate interests

These cases are less clear. Legitimate interests allow you to develop a legal basis if you cannot identify the categories.

This includes procedures designed to prevent fraud and involving the transfer of data to other companies or entities of the contractor. Such is the case where there is a central body for internal administrative purposes. This case applies to customers or employees.

Based on this justification, you can process data without having to obtain the consent of the data subject. However, this only applies in situations where you do not endanger the rights, freedoms or interests of the data subject because it is in your interest.

To compare these potentially conflicting interests, you need to perform an “evaluation test”.

This legal basis must always reflect the interest of the data subject:

Consumer consent is a prerequisite. As the data controller, you must prove that you have been permitted to process the data. You must record this.

This legal basis is particularly important for customer acquisition under the GDPR because it covers the collection of a person’s contact data for marketing purposes, such as email newsletters.

The GDPR stipulates the circumstances under which this permit is valid and how it can be administered. Besides, the person concerned is allowed to withdraw this consent at any time and without considerable effort.

Interim conclusion:

For each of the six basic principles, a legally sound and transparently communicated processing standard is compulsory.

7. Short FAQ on GDPR

Lead generation and GDPR : What about cookies?

According to the GDPR, you must inform your website visitors that you use cookies. Make sure that you use the language your users understand. You could, for example, place different banners for two languages at different places on your website.

Point out that you record the surfing behavior with cookies. Users must give their consent to it.

Is cold calling still allowed?

In many cases, cold calling is still possible. It is crucial that you obtain the express permission of the persons concerned. If you do not have this consent for data storage, telephone acquisition is not permitted

Do other laws expire due to the GDPR?

In advertising, sanctions of the GDPR prevent the application of parts of the Federal Data Protection Act (BDSG). However, most of the previous sections of earlier legislation are still valid.

How do I handle social media?

For the end-user of social media platforms, nothing changes at the moment. Platform providers themselves must, however, update their terms of use and actively request consents.

Lead generation and GDPR: What if a contract already exists. Can I just contact the customer? 

The tying of measures is illegal. You are not permitted to conclude a joint contract with permission for data processing. In this way, you would force the consent of your contracting partner. The prohibition of tying shall revoke any consent.

Can I send new advertising materials to an existing customer?

If your current customers already appreciate your advertising efforts, you may continue to send them materials about similar products and services. Make sure, however, that your advertising complies with the GDPR. 

What does the GDPR mean for picture material?

By operation of law, nothing has changed significantly as a result of the GDPR. As before, you always need the prior consent of the person you are photographing.

Photos and videos that you want to use for private purposes do not represent an obstacle.

However, we advise Instagrammer, YouTuber and bloggers who photograph strangers to be more cautious here in the future.

Those who want to be sure always obtain the permission of the persons concerned.

Conclusion: Lead generation and GDPR

Latest since 25 May 2018, the GDPR requires a new approach to data protection. The GDPR intends to encourage companies to only contact individuals who wish to have an explicit relationship with your company.

No longer may you assume that you have permission to send campaigns simply because you have discovered an email address.

This must be done before each new data entry:

  • Phrase each request for consent unequivocally.
  • Explain explicitly how you will use customer data and how long it will be stored.
  • Define a process.

Opt-in procedures and subscription management tools are readily available, providing you assistance.

These changes are not popular with all companies. Small companies, in particular, fear of legal consequences. The GDPR is merely concerned with protecting consumer data and giving more weight to European fundamental data protection rights. Companies making money with user data need to protect it and manage it properly. To do so, the customer’s consent is required. Those who fail will be severely penalized and held accountable.

Image source: https://commons.wikimedia.org/wiki/File:Gdpr_Europe.jpg

Disclaimer: This article is only for non-binding information purposes and does not constitute legal advice.

The post Lead Generation and GDPR appeared first on Leadrebel Blog.

]]>