# Marketing Analytics DPIA Report

## Reference: DPIA-QLH-2026-0011

| Field | Value |
|-------|-------|
| Organisation | QuantumLeap Health Technologies |
| Subject | Marketing Analytics Processing Programme |
| Date | 2026-03-14 |
| DPO | Dr. Elena Vasquez, CIPP/E, CIPM |

---

## 1. Marketing Processing Inventory

| Activity | Lawful Basis | Consent Required | Data Subjects | Risk Level |
|----------|-------------|-----------------|---------------|-----------|
| Email marketing to existing B2B customers | Art. 6(1)(f) legitimate interest (Recital 47 soft opt-in) | PECR soft opt-in conditions met | 4,200 corporate contacts | Low |
| Customer profiling for product recommendation | Art. 6(1)(f) legitimate interest with LIA | No (LIA balancing test passed) | 4,200 customers | Medium |
| Website analytics (server-side, no cookies) | Art. 6(1)(f) legitimate interest | No (no device access under ePrivacy) | ~15,000 monthly visitors | Low |

**Note**: QuantumLeap Health Technologies does not engage in behavioural advertising, cross-device tracking, or programmatic advertising. Marketing is limited to B2B direct marketing to existing customers and first-party analytics.

---

## 2. Risk Assessment

| Risk | Level | Mitigation | Residual |
|------|-------|------------|---------|
| Customer profiling exceeding expectations | Medium | Transparent privacy notice; profiling limited to product interest categories; opt-out in every communication | Low |
| Email marketing to disengaged contacts | Low | Automatic suppression after 6 months without engagement; immediate unsubscribe processing | Low |
| Third-party processor data breach | Low | DPA with Mailchimp and HubSpot; both SOC 2 certified; EU data residency selected | Low |

---

## 3. Conclusion

Marketing processing is limited in scope (B2B only, existing customers, no behavioural advertising) and all identified risks are mitigated to Low. DPIA review scheduled for March 2027 or upon introduction of new marketing technology.

| Role | Name | Date |
|------|------|------|
| DPO | Dr. Elena Vasquez | 2026-03-14 |
| Head of Marketing | Sarah Kim | 2026-03-14 |