RGPD y B2B: lo que las empresas deben saber

Yes the GDPR applies to any entity that processes personal data. This entity can be anything from non-profits to for-profit businesses, public organization, sole traders and more. Personal data under the GDPR is defined as any data that relates to a living person. This includes pieces of information that, when collected together, can lead to the identification of a person. e.g. Ip addresses are considered personal information under the GDPR.

The biggest way in which the GDPR affects B2B marketing is that the GDPR requires a legal basis for processing personal data. This means that at least one legal basis must legitimately apply to the marketing activities that use personal data. There are 6 legal bases: Consent, Contract, Legal Obligation, Vital Interests, Public Task, and, Legitimate Interest.

The GDPR principle of lawfulness, fairness, and transparency are applicable to any entity that processes personal data. In total there are 7 main principles of the GDPR that can be considered “rules” and should be and the center of the processing decisions that you make. The seven key principles of the GDPR are Lawfulness, fairness and transparency, Purpose limitation, Data minimization, Accuracy, Storage limitation, Integrity and confidentiality (security), and Accountability. You can find these principles laid out in detail in Article 5 of the GDPR text.

Si bien el RGPD no hace ninguna distinción entre los tipos de empresas en general, puede haber algunas diferencias en la práctica. Por ejemplo, las empresas B2B pueden ser más fiables y demostrar una base jurídica, como el interés legítimo, al enviar correos electrónicos a una dirección de correo electrónico empresarial. Además, si la dirección de correo electrónico no está vinculada a ninguna persona, incluso puede quedar fuera del alcance de los «datos personales». Sin embargo, ten en cuenta que decidir qué base jurídica aplicar puede ser complicado y, por lo tanto, te recomendamos encarecidamente que consultes a un abogado.

• Apply the principle of data minimalization –the more types of data your process, the largest the risk. Strategize and plan with risk in mind
• Identify and/or review your legal basis for processing personal data, ideally with a legal professional.
• Have a compliant privacy policy: Under the GDPR privacy policies must be easy to read and understand, easy to access, must contain the right information and must be up-to-date.
• Review your systems for honoring GDPR user rights.
• Keep valid records of your data processing activities (including internal records of processing)
• Manage consent in a compliant way and maintain valid records of consent.