Opens in a new tab
All articles
16. 9. 2018
2 min read

Is it “legal” to process personal data from public registers or social networks?

Do you want to reach or market to contacts that are publicly available? What do you think? Can you or are there pitfalls associated with doing so?

Public contacts: the compatibility test and legal basis

Have you got a brilliant idea in your head for the perfect marketing campaign? It is certainly very tempting to look up the company’s managing directors in the register and address the offer directly to them. Or have you gone to the trouble of searching on social media for the information that users publicly state about themselves and created your own database? Be careful.

If there is any further use of the published data, you need to consider the purpose for which the personal data was published. It cannot be used for any other purpose without meeting the compatibility test. And what is actually assessed under this test? For example, it may be an assessment of the relationship between the original and new purposes of the processing, the possible risks associated with the new processing or the security safeguards.

Did you pass the compatibility test? Even so, this does not mean that you can automatically use the data. The next step, which is absolutely necessary, is to secure the legal basis, which in this case will most often be the legitimate interest of the controller. It is important that you document your assessment of legitimate interest carefully and be prepared to produce it for inspection if requested by the Data Protection Authority.

Are you unsure whether the contacts you have obtained from public registers or social media can be used for your marketing purposes? Contact our team and we’ll be happy to go through everything with you.

Have a project?
Get in touch and we'll discuss how we can help.
Contact us
More articles
4 Nov 2026

How to Label AI Content on Social Media Under the AI Act

Artificial intelligence is being used in marketing more and more often. Companies use it to create images, videos, advertising visuals, voiceovers, product demos and even entire campaigns. This raises an important question: when do you need to disclose that content was created or edited using AI? The European AI Act introduces transparency rules aimed at…
Read the article
16 Oct 2026

Grants of up to CZK 2.5 million for cybersecurity: turn your idea into a practical solution

Cybersecurity is no longer just a matter of firewalls and antivirus software. Growing regulatory requirements, customer pressure and increasingly frequent attacks are forcing companies to approach security systematically, from risk management and supply chain protection to incident preparedness. A new grant opportunity is now available. The National Cyber and Information Security Agency (NÚKIB) has announced…
Read the article
12 Oct 2026

Seznam Event Measurement (SEM) on Wontilles. Accurate Measurement Without Worries

Digital marketing is undergoing a major transformation. Stricter personal data protection, the gradual end of third-party cookies, and the growing popularity of script-blocking tools are creating a new challenge for e-shop operators. Without reliable data on user behavior, effectively managing performance campaigns is practically impossible. That is why the Sklik advertising system is introducing a…
Read the article