B2B emailing - IPRS

B2B emailing + - Opozorilo: Mnenje je bilo izdano na podlagi določb Zakona o varstvu osebnih podatkov (ZVOP-1, Uradni list RS, št. 94/07 - uradno prečiščeno besedilo), ki je z dnem

2. 2023 prenehal veljati in ga je nadomestil nov Zakon o varstvu osebnih podatkov (ZVOP-2, Uradni list RS, št. 163/22), zato mnenje ni več nujno aktualno. Mnenja po ZVOP-2 so na voljo tukaj. Datum: 17.09.2020 Številka: 07126-1/2020/33 Kategorije:Neposredno trženje, nagradne igre --> Kategorije: Neposredno trženje, nagradne igre The Information Commissioner (Slovenian National Supervisory Body for Personal Data Protection; hereinafter: IC)) has received your inquiry concerning B2B emailing. The IC initially emphasises that it is only possible to provide specific answers to your questions in the course of an inspection procedure where all aspects of data processing and its compliance with the relevant GDPR provisions are assessed in the context of a specific use case. Hence, at this point, and in relation to your description of the planned data collection, it is only possible to provide general comments, as follows bellow. The IC would like to inform you that in our opinion the e-mail addresses of individual employees (for example - name.surname@company.com) undoubtedly still represent personal data. Namely, an e-mail address, from which the name, surname and employment data are evident, meet the condition that the individual becomes identified or at least identifiable. Namely, these personal data (usually) enable a fairly easy identification of an individual. This means that for the lawful processing of e-mail addresses of individual employees under Art. 6 of the GDPR, it will be necessary to have one of the legal bases. Special provisions on direct marketing via e-mail in the Republic of Slovenia are incorporated in Art. 158 of the Electronic Communications Act (Official Gazette of the Republic of Slovenia, no. 109/12, 110/13, 40/14, 54714, 81/15, 40/17) and Electronic Commerce Market Act (Official Gazette of the Republic of Slovenia, no. 96/09, 19/15). Implementation of the provisions of these two Acts is monitored by the Agency for Communication Networks and Services of the Republic of Slovenia, and not by the IC. Therefore, we can only offer clarification regarding protection of personal data. In our opinion, a publicly disclosed e-mail address (or telephone number) of a person listed on the organization's website or other publicly available source (e-mail addresses that would be “guessed” as you state in your e-mail, do not meet the required criteria) may also be used to send commercial messages (direct marketing) if this is in accordance with the purpose of its publication. In such case, the direct marketing could be in line with Art 6