General Data Protection Regulation (GDPR)

We are pretty sure you might have heard a thing or two about the GDPR by now and must be considering how to prepare for it once it comes into effect. In this article, we will share everything you need to know about it and also its impact on EasySendy and its users.

Please also note that we do not aim to give any legal advice on this blog post. On the contrary, we only wish to offer information and some resource that can act as a guide for you to refer to when the GDPR comes into effect. If you wish to learn more about how your organization might change due to the GDPR, you must consult a legal practitioner in your area.

What and Who?

The General Data Protection Regulation is a privacy law enforced in the European Union to all businesses based in the EU. It will have a significant impact on the business organizations when it comes into effect on 25th May 2018. The GDPR is a law that will be responsible for regulating the personal data of the citizens of the EU and will impact how organizations or businesses use or treat this personal data. This will also include the organizations/business located outside the European Union.

When we talk about personal data, we refer to any data that can be used to identify an individual either alone or with the help of additional data. The compliance of the GDPR will have to take place if you erase, collect, transmit or change any of the personal data of the citizens of EU or store or use them according to your whims.

The GDPR will be upgradation of the older directive 95/46/EC on data privacy that will also introduce several crucial changes that might affect the users of EasySendy.

About the Consent

To process the personal data of a citizen of the European Union, you must possess a legal basis for it. Under the policies stated in the GDPR, the users of EasySendy Pro must rely on consent even though they can use another legal basis to process the personal data. In this regard, the consent must be verifiable and explicit.

Verifiable consent consists of a written record that would reflect how and when someone authorized you to process or use their personal data. The EasySendy Pro forms are authorized to collect and store the IP address, the email address and the timestamp of all the people who submit the EasySendy Pro form.

Explicit content needs each contact consent so that the opt-in is not able to use an opt-in box that is pre-checked. Also, an opt-in message that you utilize needs to state all the possible ways in which you can utilize the personal data of the contacts that you collect.

This means that for all of your Subscribers inside EasySendy Pro ensure the following is done:

1. Obtain permission / consent

You have to insert a checkbox in the subscription forms, which is evidently unchecked by default. It is important to ask permission from your subscribers for sending them emails occasionally. Add them to your email list only if they agree. You can facilitate double opt-in for your email lists to be extra sure. All these settings are available inside EasySendy Pro account.

2. Right to be Forgotten

EasySendy Pro make it convenient for your subscribers to unsubscribe anytime by clicking on the UNSUBSCRIBE link in the footer of the email footers. You need to use [UNSUBSCRIBE_URL] tag inside all of your email campaigns. Follow this guide.

3. Right to access / rectify

Your subscribers can update their profile information anytime by following the link you include in the email footers. You need to use [UPDATE_PROFILE_URL] tag inside all of your email campaigns.

Subscribers can also contact you to have their data modified / deleted, and you should act upon their request immediately. You can check this guide on maintaining email footer.

4. Privacy Protection

You need to ensure that you store your subscriber’s data safely. GDPR is all about data protection!

5. Portability of Data

You can move or export all of your subscriber’s information from your EasySendy Pro account.

6. Provide Breach Notification

You should inform all your subscribers immediately if there is a data breach on your site. You can send mass email notification immediately from your EasySendy Pro account to your subscriber base.

7. Masking of IPs

The IP masking for last octet done automatically for the customers those are from European region or the customer whose deployment in European region. EasySendy make sure the IP information not directly associated with natural person to identify them or to create a profile.

About Individual Rights

The rights of people in regards to their personal data are also outlined in the GDPR. According to the provisions of the GDPR, the citizens of the European Union will have the right to request for information or details on how to use their personal data. They can likewise request you to use that data in specific ways.

You should also prepare yourself to entertain the requests that come to you for the correction, completion, and transfer to some business, etc. of some personal data. The requests can also include the prohibition of data for certain uses or complete removal of the same.

In addition to all this, you must also entertain queries on how you are storing their personal data and exactly what you are going to use it for. You must also give them access to the personal data or share it if they ask for it.

What Can You Do?

We recommend the build and use a signup form from EasySendy in regards to marketing so that you can grow your list. This is because we always have copies of the permission data in the event where you might need it sometime in the future. You can also turn on the double opt-in if you require added permission evidence.

However, regardless of the method of opt-in you select, the export files contain all the permission data.

EasySendy’s Preparation for the GDPR

We have been in the process of researching and investigating everything about the GDPR. In this respect, we have also modified many internal policies and practices in 2017. This precisely because we are 100% committed to complying with the GDPR this year. We have also assessed the impact that GDPR will have on the tools of EasySendy Pro to gauge if there is a way to make these tools efficient and more practical for the usage of the EasySendy Pro users by the advent of the GDPR.

UPDATED: 02-Feb-2023.