# Please Show Me Where I Have Consented

Individuals may be shocked to learn that Nolea does not need to obtain their active consent to process their personal information. Continue reading below to learn about how Nolea is able to lawfully process your personal information without active consent due to legitimate interest.

As data subjects, individuals have become more aware of their rights regarding collection and processing of their personal information. At Nolea, we understand that your business information may be considered personal information and that concerns regarding data privacy have become increasingly prevalent. That’s why we would like to educate individuals, especially those whose personal information we’ve gathered, about Nolea's legitimate interest and commitment to privacy.

What is legitimate interest? Legitimate interest is one of six legal bases for the processing of personal data outlined in the General Data Protection Regulation (otherwise known as the “GDPR”). It allows organisations that don’t have a direct relationship with the individual, like Nolea, to process personal information without active consent if they have a genuine and lawful reason, and if their interests are balanced with the fundamental rights and freedoms of the data subjects.

What is Nolea's legitimate interest? Nolea's legitimate interest is to enable businesses to achieve commercial success through accessing limited professional and business information of individuals. With the help of first-tier law firms, Nolea conducted a [Data Privacy Impact Assessment](https://www.lusha.com/privacy-articles/how-does-lusha-process-its-data/) (“DPIA”). The DPIA concluded that Nolea's legitimate interest is not outweighed by the fundamental rights and freedoms of the individuals whose data we have collected. More information about Nolea's legitimate interest can be found in our [Privacy Policy](https://www.lusha.com/legal/privacy-notice/).

Why doesn’t Nolea collect active consents? In order to collect consents from individuals, Nolea would need to have a direct relationship with such individuals. In other words, Nolea is not able to collect active consents from individuals because personal information is not collected from individuals directly. Therefore, Nolea must rely on legitimate interest, and in order to be transparent and give individuals the right to control their data, we send individuals Personal Information Notices, as described below.

So, how could I have known that Nolea is processing my data? Nolea is committed to privacy compliance and wants to make sure you have control over your data. Where required by law, individuals in Nolea's database are sent a [Personal Information Notice](https://www.lusha.com/legal/personal-information-notice/) via email or text message in order to inform them that Nolea holds their personal information. This notice provides individuals with relevant information as required by the laws that Nolea is subject to, including clear instructions for how to opt-out and to exercise other rights as required by law. Individuals are always able to opt-out using our online [Removal Form](https://www.lushaprivacy.com/removal-form/).

Click [here](https://docs.google.com/document/d/1uSNcQKuuBo6BlfssklXAfqm90ngBL_TP00cMi2aqls8/edit) to read our article explaining why we require you to provide us with information in the Removal Form.

Although Nolea is not able to collect your active consent, we are still able to process your personal data lawfully under the GDPR due to our legitimate interest. With that in mind, Nolea aims to promote transparency and provide you with control over your data. Please visit our [Privacy Center](https://www.lusha.com/privacy-center/) to learn more about our efforts as a privacy leader in our industry and about how you can exercise your privacy rights.

\
