LEGITIMATE INTERESTS • We can process your data where it is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of you, which require protection of personal data. These interests were identified by carrying out a Legitimate Interests Assessment. • You have the right to object to us processing your personal data on this basis. If you would like to know more about how to do so, please contact mydata@pogustgoodhead.com .  CLIENT DATA: • To ensure that we provide you with the best service possible, we use and store your personal data and/or the personal data of individual contacts at your organisation as well as keeping records of our conversations and meetings. • We think this is reasonable – we deem these uses of your personal data to be necessary for our legitimate interests in order to carry out our business activities. • We have to make sure our business runs smoothly, so that we can carry on providing services. We therefore also need to use your data for our internal administrative activities, such as invoicing where relevant. • We have our own obligations under the law, which is a legitimate interest of ours to insist on meeting. If we believe in good faith that it is necessary, we may therefore share your data in connection with crime detection or tax collection. SUPPLIER DATA: • We use and store the personal data of individuals within your organisation in order to facilitate the receipt of services from you as one of our suppliers. Where you are a sole trader, we also hold your financial details, so that we can pay you for your services. • We deem all such activities to be necessary within the range of our legitimate interests as a recipient of your services. PEOPLE WHOSE DATA WE RECEIVE FROM JOB APPLICANTS AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: • If you have been put down by a job applicant or a member of PGMBM as one of their referees, we use your personal data in order to contact you for a reference. • If a staff member has given us your details as an emergency contact, we will use these details to contact you in the case of an accident or emergency. We have a legitimate interest to store this data and use it in appropriate circumstances on behalf of our staff. • If a staff member has given us your details as a dependent or a next of kin, we will use your personal data as appropriate for the purpose of benefits or employment rights. We have a legitimate interest to store this data and use it in appropriate circumstances on behalf of our staff. CONSENT In certain circumstances, we are required to obtain your consent to the processing of your personal data in relation to certain activities. Depending on exactly what we are doing with your information, this consent will be opt-in consent or soft opt-in consent. • You have to give us your consent freely, without us putting you under any type of pressure; • You have to know what you are consenting to – so we’ll make sure we give you enough information; • We will keep records of the consents that you have given in this way. • In some cases, we will be able to rely on soft opt-in consent. We are allowed to market products or services to you which are related to the services we provide as long as you do not actively opt-out from these communications. • As we have mentioned, you have the right to withdraw your consent to these activities. You can do so at any time by emailing mydata@pogustgoodhead.com LEGAL OBLIGATIONS We also have legal and regulatory obligations that we need to comply with. • If we believe in good faith that it is necessary, we may share your data in connection with crime detection or tax collection. • We also may share your data with regulatory agencies or other relevant bodies in order to comply with our regulatory obligations. • We will keep records of your personal data (including personal data contained in communications and calls) in accordance with our legal and regulatory right and obligations. CONTRACT We can process your data where we are carrying out necessary steps in relation to a contract to which you are party or prior to you entering into a contract, for example, because you wish to instruct us to carry out legal services for you. ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS Sometimes it may be necessary for us to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data, in connection with exercising or defending legal claims. This may arise for example where we need to take legal advice in relation to legal proceedings or are required by law to preserve or disclose certain information as part of the legal process.