GDPR Consent: Statistical purpose

[Christian_Aubrecht]

Hey guys,

I was coming across the following issue and I need some advise to overcome it.

I gather sensitive personal data for statistical or marketing purposes.

Now, would I need to get two separate consents, one which allows me to gather, retain and process the SP data and another one that allows me to use it for these specific marketing purposes?

Many thanks for the help!

Christian

 

[thelegalstop]

Yes, you are correct. You don't necessarily need two separate emails, but you need to have protection in place for both these purposes and your customers need to agree to both of them. You may give them an option to consent to one of those, eg. for statistical purposes only, not for marketing if it's something that fits in your business model.

Anyway, you need to have consent for both purposes and you ideally need to explain what "statistical" actually means, i.e. what kind of algorithms you use, how you handle the statistical reports, whether you share the results with anyone, can the results be traced back to the individual etc.