In privacy, two aspects are relevant from a company point of view. Firstly, the legal framework requirements for handling sensitive data (especially personal data) need to be implemented through suitable technical and organisational processes. This means, e.g. collecting personal data in digital dialogue marketing only with explicit customer consent. Secondly, the customer’s “perceived data protection” needs to be addressed. Users who trust companies to sensibly handle their data are more willing to provide this data.