Privacy notice for marketing professionals

We hold professional information about marketing, brand and communications professionals that we obtained from public sources rather than from those individuals directly. Where that is the case, the GDPR (Article 14) requires us to tell you what we hold and why. This page is that notice. If you would rather not be included, we will remove you — see “Your rights” below.

Who we are

North Fjord LLC, a Delaware limited liability company with offices at 7120 W. 127th St., Palos Heights, IL 60463, United States, operating the CampaignsLive platform at app.campaignslive.com, is the data controller for this information.

For anything in this notice, including exercising your rights, contact northfjordllc@gmail.com. We are in the process of appointing a representative in the EU under Article 27; until that is in place, please use the address above and we will respond directly.

What we hold

Public professional information: your name, your LinkedIn profile URL, your current job title and employer, previous roles, education, skills, the city or region you list, and the professional summary you have published.

We do not hold your email address or your phone number. We do not collect special-category data (such as health, beliefs, or political opinions), and we do not attempt to infer it.

If we have been in touch with you, we also keep a short record of that. Where someone at our company has contacted you — for example about a job — we note when it happened, which role was discussed, and how the conversation ended (for instance “not interested” or “interview arranged”), together with a one-line summary. This is so we know we have already spoken to you and what you said. We do not keep the messages themselves.

Where we got it

From publicly available professional profiles, collected through a third-party data provider (Apify) acting on our instructions as our processor. We did not obtain it from you directly, which is why we are giving you this notice.

Any record of contact described above comes from our own correspondence with you — that part did come from you, through a conversation you took part in.

Why we use it, and our legal basis

We use it for internal business development, market intelligence and recruiting — understanding who works in marketing at the companies and agencies we work with, may work with, or may hire from.

Our legal basis is our legitimate interests (Article 6(1)(f)) in operating a business-to-business marketing company. We have carried out a balancing test weighing those interests against your rights, and you can ask us for a summary of it at the address above.

Who sees it

Only our own staff, and only those of them whose work requires it. We do not sell, license, publish or otherwise share this information with third parties.

How long we keep it

No longer than 24 months from the date we last verified it. After that we either re-verify the information or delete it. If you ask us to remove you, we do so straight away rather than waiting for that period to run.

International transfers

The controller, North Fjord LLC, is established in the United States, and our processor Apify is established in the European Union (Czech Republic). Your information may therefore be transferred from the EU to the United States. If you would like details of the safeguards that apply to that transfer, contact us at the address above and we will provide them.

Your rights

You have the right to ask us for a copy of what we hold about you, to have it corrected or erased, to restrict how we use it, to object to our using it, and to receive it in a portable form where that applies.

You can object to this processing at any time, and you do not have to give a reason. If you do, we remove your record and add your profile URL to a suppression list, so that you are not added again by any future collection.

To exercise any of these rights, email northfjordllc@gmail.com with the LinkedIn profile URL or the name concerned, so that we can find the right record. We do not need any further identity documents for a removal request.

You may also complain to your data protection supervisory authority. In Greece this is the Hellenic Data Protection Authority (www.dpa.gr).

Automated decisions

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you.

Relationship to our main privacy policy

This notice covers only professional information collected from public sources about people who are not our users. If you hold an account with us, our Privacy Policy describes how we handle your account data.