Under the UK GDPR, if a business wants to process personal data it can only do so if it can satisfy at least one of the conditions provided. These include:

• Legitimate interests – processing is necessary for purposes of legitimate interests
• Contractual – processing is necessary for the performance of a contract
• Consent – the individual concerned has consented to the processing.

Fixflo relies on the legitimate interests condition. This is on the basis that it is in a landlord’s legitimate interest to maintain its property or properties that are managed using Fixflo.