Yes, the use of B2B Lead Generation feature is allowed under the GDPR, which was introduced as a European privacy law on 25 May 2018.
Octoboard matches the IP address of the visitor against a publicly available database of company data (such as the Chamber of Commerce). According to the GDPR, the IP address is considered to be private data, and there must be solid justification for its use. The justification is ‘own legitimate interest’, provided for in Article 6(1)(f) of the GDPR. This article states working with personal data is permitted if this serves a clear interest and privacy standards are maintained.
Marketing and analytics are considered to be legitimate interests, and Octoboard only uses private data in a limited capacity. IP addresses are not saved and only publicly accessible corporate data is shared with the users. This means that Octoboard maintains privacy standards. As an Octoboard user, you are obliged to state these facts in your company’s privacy statement, as well as the register of data processing operations.
You are free to contact visitors directly using data acquired through Octoboard's software. The GDPR does not apply to company data such as public telephone numbers. Please be aware that sending unsolicited commercial emails or text messages contravenes spam laws, even when these are sent to public telephone numbers or info@ email addresses. If you’d like to contact a person within a company, you must have a clear basis for doing so, such as an opt-in or a warm client relationship. Simply the fact that someone has visited your site is not a sufficient basis for emailing or calling this person. You will need an additional, specific reason to engage in personal contact.
You can install the tracking code by adding the code manually to your website.
GDPR requires companies to inform their visitors about what happens to their personal data. They must do so in a privacy statement. An explanation in the Terms and Conditions is not legally valid. You can choose how you would like to word this in your privacy statement. The following is a sample text that you could base your text on: To measure B2B use of our website, we use the Octoboard solution based in Dublin, Ireland. This service shows us company names and domains based on the IP addresses of our visitors. The IP address is not stored after use.
Directly after Octoboard's systems have received an IP address, matched company data is requested and shown in the portal. The IP addresses are not shown or stored.