All articles
16. 9. 2018
2 min read

Is it “legal” to process personal data from public registers or social networks?

Do you want to reach or market to contacts that are publicly available? What do you think? Can you or are there pitfalls associated with doing so?


Have you got a brilliant idea in your head for the perfect marketing campaign? It is certainly very tempting to look up the company’s managing directors in the register and address the offer directly to them. Or have you gone to the trouble of searching on social media for the information that users publicly state about themselves and created your own database? Be careful.

If there is any further use of the published data, you need to consider the purpose for which the personal data was published. It cannot be used for any other purpose without meeting the compatibility test. And what is actually assessed under this test? For example, it may be an assessment of the relationship between the original and new purposes of the processing, the possible risks associated with the new processing or the security safeguards.

Did you pass the compatibility test? Even so, this does not mean that you can automatically use the data. The next step, which is absolutely necessary, is to secure the legal basis, which in this case will most often be the legitimate interest of the controller. It is important that you document your assessment of legitimate interest carefully and be prepared to produce it for inspection if requested by the Data Protection Authority.

Are you unsure whether the contacts you have obtained from public registers or social media can be used for your marketing purposes? Contact our team and we’ll be happy to go through everything with you.

Have a project?

Get in touch and we'll discuss how we can help.
Contact us

More articles

1 Aug 2026

Cyber Resilience Act: New Rules for Secure Software and Digital Products

The European Union is introducing another important regulation in the field of cybersecurity. It is called the Cyber Resilience Act, or CRA for short, and applies to all products with a digital component. This means not only smart devices, but also software, applications, and systems that connect to a network or communicate with another service…
Read the article
15 Jul 2026

Withdrawal button – Wontilles responds in advance to new legislative requirements

The legislative environment in the field of e-commerce is undergoing constant changes, which place high demands on online shop operators.
Read the article
1 Jun 2026

Railsformers at the Faculty of Arts at the OU: Ruby on Rails in practice and now also in IT business

At the Faculty of Science of the University of Ostrava, we have long been giving students practical experience with Ruby on Rails development and showing them what it looks like to work on real web applications. From the original pilot course, we have developed a stable course Ruby on Rails I and II, which we…
Read the article