Contact privacy guide and templates
This guide helps customers prepare privacy information for professional contacts. It does not establish a legal basis, grant marketing permission or replace the agreement. The customer remains responsible for completing and providing its notice; SLSBMB handles its own controller duties separately.
1. Choose the actual situation
Where Article 14 or a corresponding rule applies, determine when you obtained the data, including collection on your behalf, and whether earlier communication or disclosure creates an earlier deadline. Do not restart the clock at purchase or export. A first campaign email is a suitable delivery point only if it is lawful and timely. For contacts you hold without emailing, arrange timely notification separately or document an applicable exception. A general statement that data is public or that a supplier is compliant is not evidence of an exception.
2. Short line for an otherwise lawful first email
Template: [Customer legal name] uses your professional contact details for [specific purpose]. How we obtained them, our legal basis and your choices: [link to the customer's complete privacy notice]. You can object to marketing by replying or using [working unsubscribe method].
Use a notice for the actual customer and campaign. A general SLSBMB policy or unsubscribe link alone does not supply all that information. Do not add marketing to a purely administrative notification or treat the notification as marketing consent.
3. Standalone notification when no campaign email will be sent in time
Subject: How [customer legal name] uses your professional details
[Customer legal name and address] has obtained [actual categories of data] from [actual source, including SLSBMB AI where applicable and whether public sources were involved] for [specific purpose]. We rely on [actual lawful basis and, for legitimate interests, the interests pursued]. Our full notice at [accessible URL] explains recipients, retention, transfers and safeguards, and your rights. You can contact [privacy contact] and object to direct marketing at any time through [working method]. This message provides privacy information; it does not ask you to buy anything or assume that you consent to marketing.
4. Full customer notice template
Controller and contact. [Legal name, address, privacy contact; representative and data protection officer contacts where applicable.]
Data and sources. We obtained [actual data categories] from [identify the actual source as specifically as reasonably possible, including whether it was publicly accessible]. [Explain relevant indirect sourcing and acquisition dates; do not claim a public source merely because the person has a profile.]
Purpose and basis. We process these details for [specific purposes] on [actual basis for each]. Where we rely on legitimate interests, those interests are [describe them]. [For consent, explain withdrawal; do not describe silence or public availability as consent.]
Recipients and transfers. We disclose data to [recipients or meaningful categories and purposes]. [Identify relevant third countries and the applicable adequacy decision or other actual safeguards, with how to obtain them. Do not claim signed transfer clauses that do not exist.]
Retention. We keep the data for [actual periods or meaningful criteria]. We keep only the information needed to honour an objection or meet a separate legal requirement after that purpose ends, as explained here: [criteria].
Your choices and rights. Contact [privacy contact] to request access, correction, erasure, restriction or portability where applicable. You can object to direct marketing at any time through [method]; we will stop that marketing. [Explain objections to other legitimate-interest processing and withdrawal of consent where relevant.] You can complain to [relevant supervisory authority and contact/link], and [include any applicable right to complain directly to us].
Automated decisions. [State whether automated decision-making within the applicable Article 22 rule occurs. If so, provide meaningful information about the logic, significance and expected consequences and the applicable rights. Ordinary AI-assisted matching does not itself establish an Article 22 decision.]
5. Before using a template
Replace every bracketed field with verified information, remove inapplicable alternatives, choose a language and channel the person can reasonably understand and access, and retain the version and provision record. Ask a@slsbmb.com for source and acquisition information SLSBMB holds. The template does not certify your data handling, deliver the notice or create an included legal-advice service.