Receiving mail from website

unholyangel

Ergates said:

unholyangel said:

Deleted_User said:

They'll have linked the IP address to other data they hold, perhaps from previous visits.

If your partner hasn't consented to marketing, then they'll probably be doing it under legitimate interest. It's effectively a physical version of the abandoned basket email.

If the partner didn't consent to marketing they can't use legitimate interest. Individuals have an absolute right to object to their details being used for marketing. Even if they don't object/opt in for marketing, they can't rely on legitimate interest where the data may be processed in a way the individual doesnt expect or anticipate, and the individuals rights are king and will override any legitimate interest if the processing of the data is incompatible with the data subjects rights. If it could be achieved in a less obtrusive way, it is unlikely the legitimate interest basis would apply. 

Then of course you need to consider if any of the marketing is done via electronic means, as that kind of marketing MUST be opt in (ie the individual needs to take positive action to confirm they're happy to receive such communications, the business cannot assume - regardless of any legitimate interest). 

That's not always strictly true - there are legitimate interests a company can use even if the individual really really doesn't want them to use their data in that way.

For instance - a bank keeping records of customers who have committed fraud.  No amount of "I want you to delete all records relating to me" will override the banks right to keep a list of crooks they don't want to do business with again.

Data subjects don't have the right to object to all processing of data (and is why i said if it's incompatible with the data subject's rights rather than just saying their rights are king). But btw, even the information you list would have it's limitations, ie they'd only be able to keep the information for a certain period of time. Otherwise it could actually breach human rights in addition to data protection. 

Although I'd also note that info (background checks on customers, employees etc) is required to adhere to their legal obligations rather than just because they feel it would be beneficial for the business to do so. So it would unlikely ever be processed under the legitimate interest basis (and therefore isn't an example of a business overriding a data subject's rights with legitimate interest). 

Sooler

Did she enter a postcode to check delivery cost? and then selected an address?

alnic_2

Sooler said:

Did she enter a postcode to check delivery cost? and then selected an address?

I have asked her this myself as it doesn't make any sense to me, she must have entered some kind of data, but she's 100% adamant that all she did was go to the site and look at a bed frame. 

mobileron

Could it be Alexia/

Alderbank

They are an independent retail company operating mainly from shops in London and East of England region. Their website gives a lot of detail about how they harvest and process data. They say 'To build a rich picture of who you are and what you like, and to inform our business decisions, we will combine data captured from across the Mattressman Group, third parties and data from publicly available lists.'

• Has your partner ever entered any of their competitions or prize draws?
• Has she ever used Klarna for anything?