What Is the Legal Basis of Data Processing?

This guide explains how Cognism processes personal data under the lawful basis of legitimate interest, in accordance with GDPR. 

It outlines the assessments, safeguards, and measures in place to ensure data is handled responsibly while protecting individual rights.

How Cognism processes data under legitimate interest

Lawful basis for processing data

Cognism collects and processes personal data under the lawful basis of legitimate interest, as defined in Article 6(1)(f) of the General Data Protection Regulation (GDPR).

This means we process data where it is necessary for our legitimate business purposes and where those interests are not overridden by the rights and freedoms of the individuals concerned.

Assessments and safeguards

We have completed the required legitimate interest assessments to confirm that this processing is lawful and proportionate.

These assessments were conducted with support from external legal counsel. They evaluate:

• The purpose of the data processing 
• The necessity of processing the data 
• The impact on individuals’ rights and freedoms 

We also have appropriate technical and organisational measures in place to ensure data is processed securely and in line with GDPR requirements.

As a result of these measures, Cognism can process data in a compliant and responsible way while respecting individual privacy rights.

You can also read:

• How does Cognism handle a data subject’s opt-out requests?
• How does Cognism comply with the requirements of the CCPA?