Legitimate Interest Assessment

 

Introduction

This Legitimate Interest Assessment (LIA) document outlines the assessment of legitimate interests for processing personal data under the UK General Data Protection Regulation (UK GDPR). This document is created in reference to the Quantanite Privacy Policy.

1. Purpose of Processing

The purpose of this assessment is to evaluate Quantanite’s reliance on the lawful basis of “Legitimate Interests” under Article 6(1)(f) of the UK GDPR for the processing of personal data in the recruitment and operational contexts. We process personal data for various purposes related to providing customer experience (CX) solutions and outsourcing services, including:

● Providing customer care, support, and backend services.
● Facilitating sales and marketing activities.
● Resolving client issues and providing technical support.
● Improving service quality and operational efficiency.
● Reporting to clients on service delivery and performance.
● Processing job applications.
● Maintaining and improving IT systems and websites.

2. Purpose Test

We have identified a legitimate interest for processing personal data of candidates and stakeholders for the following purposes:

● Business Operations: Conducting and managing business operations efficiently to provide services.
● Service Improvement: Enhancing service quality and improving operational efficiency.
● Marketing and Sales: Promoting services and engaging with potential clients to expand business.
● Recruitment: Processing job applications and recruiting qualified candidates.
● IT Infrastructure: Maintaining and improving IT systems and websites for secure and efficient operations.

These interests are necessary for the ongoing operation and growth of our business and are not outweighed by potential risks to data subjects’ rights and freedoms.

3. Necessity Test

Processing personal data is necessary for the identified purposes. Without processing this data, it would be impossible to:

● Deliver agreed-upon services.
● Respond to customer inquiries and provide support.
● Market services to potential clients.
● Recruit suitable employees.
● Maintain and secure IT infrastructure.

We considered alternative methods that would be less intrusive, but they would not meet our operational or recruitment needs as effectively. For example, anonymizing data would hinder candidate evaluation and communication. Therefore, the processing of personal data is deemed necessary for these purposes.

4. Balancing Test

A balancing test has been conducted to ensure that the legitimate interests do not override the rights and freedoms of individuals. The test involves considering:

  • The nature of the data: Various types of data are processed, including Personal Identifiable Information (PII), financial information, customer interactions, technical data, sales data, employment data, and cookies data. The data processed is limited, relevant, and not excessive.

  • The reasonable expectations of individuals: Individuals engaging for services, employment, or website interaction would reasonably expect their data to be processed for the outlined purposes.

  • The potential impact on individuals: Robust security measures are implemented to protect personal data and minimize any potential impact on individuals’ privacy.

  • Safeguards implemented:

    • Strict technical and organizational security measures.

    • Access controls and authentication procedures.

    • Regular security audits and vulnerability assessments.

    • Employee training on data privacy and security.

    • Compliance with international standards (ISO 27001, SOC 2, PCI-DSS).

    • Appropriate safeguards such as data minimization and transparency via privacy notices.

  • Individual Rights: Individuals can exercise their rights at any time, including objection to processing based on legitimate interests.

Based on these considerations, the legitimate interests do not unduly impact individuals’ rights and freedoms.

5. Conclusion

We believe that Quantanite’s use of legitimate interests as a lawful basis for processing candidate and stakeholder personal data is justified, necessary, and balanced. We will review this Legitimate Interest Assessment annually or when any material change in processing occurs.

6. Contact Information

For any questions or concerns regarding this Legitimate Interest Assessment, please contact: