To comply with GDPR, 27Works Limited has carried out a Legitimate Interests Assessment which is documented below.

Purpose of proceessing

27Works has a legitimate interest to process personal data relating to decision makers and budget holders in organisations in the UK as part of direct marketing in order to promote our business. All data is gathered from publicly available sources and / or directly from the companies concerned.

Lawful Business Objective

The processing is necessary in order to target relevant business decision makers and budget holders as part of business-to-business direct marketing activity as specifically identified by the Privacy and Electronic Communications Regulations 2003 (PECR) and Recital 47 of the GDPR.

Reasonable Expectation

The data subjects are senior business people with decision making and budgetary responsibilities and can reasonably be expected to be contacted with marketing material relating to their professional roles.

Adequate, Relevant & Limited

The data collected is limited to names of senior managers and directors, their job titles, company addresses, company landline telephone numbers and corporate email addresses.

Opt Out

If a data subject requests that their data is removed from our mailing list, their data is removed.

Privacy Policy

27Works has included reference to this assessment within its privacy policy to show that we are relying on legitimate interests to process data.