Back to Privacy notice

Lawful basis for processing

We must have a legal basis for using your personal information and make it clear to you, which one is being used. These include:

• if you, or your legal representative, have given us consent
• if you have entered into a contract with us, including if you are an employee
• it is required by law (legal obligation)
• it is necessary to protect someone in an emergency (vital interests)
• it is necessary to perform our statutory duties (public task)
• It is because the processing is within our legitimate interests as a business (legitimate interest)

We will retain personal information for as long as it required for the legal basis noted above and in accordance with our retention schedule.

Where we need to process any of your personal information, which is defined as special category information, we must also ensure that we have an additional legal basis for doing so. These include:

• if you, or your legal representative, have given us consent
• it is required by law (legal obligation)
• it is necessary to protect someone in an emergency (vital interests)
• necessary for the establishment, exercise or defence of legal claims
• it is necessary to perform our statutory duties (public task)

We have prepared more detailed privacy notices for some of our services, to provide you with additional information about how we use personal information.