Three Legal Bases Explained: Consent, Contract, and Legitimate Interest in GEO Booster’s Data Processing
If you share your details with a company, you want to know why your data is being processed, what that processing supports, and which legal basis applies. That is especially important when you submit a contact request, become a customer, or simply browse a website. In GEO Booster’s data processing, three legal bases play a central role: consent, performance of a contract, and legitimate interest.
This article explains those three legal bases in clear terms and shows how they apply to GEO Booster’s data processing. You will learn which personal data is involved, what each basis means in practice, and how this structure supports transparency under the General Data Protection Regulation (AVG).
What are legal bases for data processing?
Under privacy law, an organization must have a valid reason to process personal data. That valid reason is called a legal basis.
In GEO Booster’s data processing, the privacy policy identifies three legal bases:
- Consent for the contact form
- Performance of a contract for the customer relationship
- Legitimate interest for website analysis and security
A simple way to understand them is this:
| Legal basis | What it means | How it applies |
|---|---|---|
| Consent | You actively agree to the processing | When you submit a contact form |
| Performance of a contract | Data is needed to deliver a service or fulfill an agreement | When GEO Booster provides services to customers |
| Legitimate interest | Processing supports a real business need that is balanced against privacy rights | For website analysis and security |
These legal bases are not interchangeable. Each one serves a different purpose, and each should match the actual reason for processing personal data.
Why GEO Booster’s data processing uses different legal bases
Different interactions require different legal justifications. Someone filling out a contact form has a different relationship with a business than an active customer. Likewise, website analysis and security serve operational purposes that are different from direct service delivery.
GEO Booster’s data processing reflects that distinction by linking each type of processing to a specific basis:
- Consent when someone voluntarily submits a contact request
- Contract when customer data is needed to provide the service
- Legitimate interest when data supports analysis and security
This approach helps make the handling of personal data more understandable. It also makes it easier for individuals to know what to expect and when their rights apply.
Consent in GEO Booster’s data processing
What consent means
Consent means a person gives permission for their personal data to be processed for a specific purpose.
In practical terms, consent is commonly used when someone chooses to initiate contact and provides information for follow-up. The key idea is that the person takes a clear action to share their data for that purpose.
How consent applies here
In GEO Booster’s data processing, consent applies to data submitted via the contact form.
The personal data collected through the contact form is:
- Name
- Email address
- Phone number
- The message you send
This data is processed exclusively to handle your request and contact you.
That matters because it sets a clear boundary. The data from the contact form is tied to a defined purpose: responding to an inquiry or arranging follow-up communication.
When consent is relevant for prospects
If you are exploring GEO Booster and want to ask a question or schedule an appointment, the contact form is the main example of consent-based processing.
The privacy policy also states that personal data is used for:
- Answering your contact request
- Scheduling an appointment
This makes consent one of the most visible legal bases for new prospects interacting with the business for the first time.
Key point about consent
A direct answer for readers who want the short version:
What does consent cover in GEO Booster’s data processing?
It covers the personal data you provide through the contact form so GEO Booster can handle your request and contact you.
Contract in GEO Booster’s data processing
What performance of a contract means
Performance of a contract applies when personal data is necessary to provide a service, manage a customer relationship, or fulfill agreed obligations.
In other words, if a company cannot realistically deliver the service without certain data, contract becomes the relevant legal basis.
How contract applies here
In GEO Booster’s data processing, performance of a contract applies to customer relationships.
For customers using the platform, the personal data collected includes:
- Company name
- Website URL
- Email address
- Data added as sources, such as websites and documents
This data is used to carry out GEO Booster’s services.
That link is important. The data is not described as optional background information. It is part of what supports the delivery of the service itself.
Why this basis matters for customers
Contract-based processing helps explain why customer data is handled differently from contact-form data. Once someone becomes a customer, the relationship moves from inquiry to service delivery.
The privacy policy also states that customer data is used for:
- Delivering GEO Booster’s services to customers
- Meeting legal obligations
This means contract is central to the operational side of the relationship. It supports the work GEO Booster performs for clients through its platform.
Retention and the customer relationship
The privacy policy states that customer data is retained for the duration of the agreement and for up to 7 years afterward in connection with tax obligations.
This gives customers a clearer picture of how contract-based processing connects to recordkeeping and compliance.
Key point about contract
What does performance of a contract cover in GEO Booster’s data processing?
It covers the customer data needed to provide GEO Booster’s services during the client relationship.
Legitimate interest in GEO Booster’s data processing
What legitimate interest means
Legitimate interest allows data processing when an organization has a genuine operational need, provided that need is balanced with people’s privacy rights.
This basis is often used for activities such as maintaining website functionality, improving services, or supporting security measures, as long as the use of data remains proportionate.
How legitimate interest applies here
In GEO Booster’s data processing, legitimate interest applies to website analysis and security.
The privacy policy states that when someone visits the website, data may be collected automatically, including:
- Browser type
- Operating system
- Pages visited
- The time of the visit
This data is used to analyze and improve the website and services. The policy also states that website analysis and security fall under legitimate interest.
Google Tag Manager and cookies
The privacy policy states that GEO Booster uses Google Tag Manager for analysis purposes. It also states that the website uses cookies and that, through Google Tag Manager, analytical and/or marketing cookies may be placed.
The cookie setup is described as follows:
- Functional cookies are always placed because they are necessary for the functioning of the website
- Permission is requested for other cookies
This is helpful context because it shows how website analysis is structured in practice.
Security measures
The privacy policy also explains that GEO Booster takes appropriate technical and organizational measures to protect personal data against loss, misuse, or unauthorized access.
It specifically states that:
- The website uses an SSL connection
- Systems are updated regularly
Security is a common operational requirement for any digital service. Here, it is explicitly named as part of the basis of legitimate interest.
Key point about legitimate interest
What does legitimate interest cover in GEO Booster’s data processing?
It covers website analysis and security, including automatically collected website-visit data used to analyze, improve, and protect the website and services.
What personal data does GEO Booster process?
For readers who want a quick overview, here is a practical summary of the types of personal data involved in GEO Booster’s data processing.
Contact form data
Processed on the basis of consent:
- Name
- Email address
- Phone number
- Message sent through the form
Customer platform data
Processed on the basis of performance of a contract:
- Company name
- Website URL
- Email address
- Sources added by the customer, including websites and documents
Website visit data
Processed in the context of legitimate interest for analysis and security:
- Browser type
- Operating system
- Pages visited
- Time of visit
How long data is kept
Retention periods are another part of understanding GEO Booster’s data processing.
The privacy policy states:
- Contact data is kept for a maximum of 12 months after the last contact, unless a customer relationship begins
- Customer data is kept for the duration of the agreement and for up to 7 years afterward in connection with tax obligations
This gives a clearer picture of how data handling aligns with the purpose of processing.
Third-party sharing in GEO Booster’s data processing
The privacy policy states that personal data is not shared with third parties, unless sharing is necessary for the service, such as with hosting providers or email providers, or when legally required.
It also states that data processing agreements have been concluded with all processors.
This is an important practical point because data processing often involves external service providers. The policy defines that sharing as limited and tied to service delivery or legal necessity.
Your rights under the AVG
Understanding legal bases also means understanding your rights.
According to the privacy policy, you have the right to:
- Access your personal data
- Correct or delete your personal data
- Withdraw your consent
- Object to processing
- Transfer your data (data portability)
- File a complaint with the Autoriteit Persoonsgegevens
You can submit a request via info@netstar.nl, and GEO Booster states that it will respond within 30 days.
Practical takeaways: how to interpret GEO Booster’s data processing
If you want to understand the privacy policy quickly, focus on this framework.
1. Ask what interaction you are having
The legal basis depends on the context:
- Sending a message? That is tied to consent.
- Using the service as a customer? That is tied to contract.
- Browsing the website? That can involve legitimate interest for analysis and security.
2. Match the data to the purpose
A good privacy explanation always connects the data collected to the reason it is used.
In GEO Booster’s data processing:
- Contact details support communication
- Customer data supports service delivery
- Website-visit data supports analysis, improvement, and security
3. Check the retention period
Retention helps show whether data is being kept in a structured and purpose-based way.
Quick summary:
- Contact data: maximum 12 months after last contact
- Customer data: duration of the agreement plus up to 7 years
4. Know where to act on your rights
If you want to access, correct, delete, transfer, or object to the processing of your data, or withdraw consent, you can contact info@netstar.nl.
Why this matters
Clear legal bases build trust. They help prospects understand what happens before they become customers, and they help customers understand how their data supports service delivery.
In GEO Booster’s data processing, the logic is straightforward:
- Consent supports contact requests
- Contract supports customer services
- Legitimate interest supports website analysis and security
That structure makes the privacy policy easier to read and easier to apply in real situations.
It also connects naturally to related topics such as cookie use, data retention, third-party processors, security measures, and data subject rights.
Conclusion
The three legal bases in GEO Booster’s data processing each serve a distinct purpose. Consent applies when you submit a contact form. Performance of a contract applies when GEO Booster delivers services to customers. Legitimate interest applies to website analysis and security.
Together, these legal bases create a practical framework for understanding why personal data is processed and how that processing supports communication, service delivery, improvement, and protection.
If you want to learn more or have questions about how your data is handled, contact info@netstar.nl or call +31 20 2050 243. If you are exploring GEO Booster’s services, you can also schedule a free, no-obligation consultation.