Privacy FAQ privacy-faq
Here are some of the Frequently Asked Questions about Privacy and Consent when using ÃÛ¶¹ÊÓƵ Campaign.
Key terms key-terms
What are the key terms about Privacy?
The items listed below link to the key terms and concepts related to Privacy and Consent in ÃÛ¶¹ÊÓƵ Campaign:
Privacy regulations readiness privacy-regulations-readiness
What is ÃÛ¶¹ÊÓƵ Campaign’s suggestion to comply with the most recent Privacy regulations?
ÃÛ¶¹ÊÓƵ does not provide legal advice. You should work with your own legal counsel to ensure they are taking all steps necessary towards GDPR, CCPA, PDPA, LGPD or any other applicable regulation readiness.
Prepare for data Access and Delete requests
-
Identify a process to receive/respond to Data Subject requests, including appointing a Privacy point of contact.
-
Review the various customer data stored in ÃÛ¶¹ÊÓƵ Campaign and determine unique identifiers (there will likely be more than one).
-
Determine a validation/authentication policy and process for Data Subject identity confirmation.
-
Make sure that the Data Subject response is easy to understand.
Consider Consent
-
List and update as necessary all touch points for data capture for GDPR (i.e. consider language, mechanism for consent, and consent logs).
-
Make sure all marketing emails include the unsubscribe links.
-
Assess global strategy for email marketing to determine geo-specific implementations.
Understand your data
-
Review all data import and capture sources where data is flowing into ÃÛ¶¹ÊÓƵ Campaign, and document which fields are being used for your marketing efforts.
-
Remove any unused data attributes from your ÃÛ¶¹ÊÓƵ Campaign database.
-
Use data available in ÃÛ¶¹ÊÓƵ Campaign for the intent it was captured and give your recipients better personalized experiences.
-
Review and update data access permissions to help ensure users of ÃÛ¶¹ÊÓƵ Campaign can fully leverage only the data needed to run their campaigns, but not access any data beyond this.
-
Ensure each user of ÃÛ¶¹ÊÓƵ Campaign has the appropriate access rights to perform their required tasks, but does not have any other rights to perform additional tasks.
Preserve user engagement preserve-user-engagement
How could Data Controllers obtain consent with minimal impact on user engagement?
In those instances where consent will be needed for certain marketing activities, consumer consent will need to be active (i.e. no silence as assent or pre-checked boxes), unbundled, and it may not be conditional upon offering the services.
There may even be instances where certain consents need to be refreshed to be able to continue using data going forward.
Rather than thinking of these enhanced consent requirements as a risk to the marketable universe, marketers could embrace them as a true indicator of brand engagement and loyalty, as well as customer satisfaction and trust.
Manage consent manage-consent
How can Data Controllers manage consent in ÃÛ¶¹ÊÓƵ Campaign?
ÃÛ¶¹ÊÓƵ Campaign already provides capabilities to manage consent at more levels than most marketers leverage via customized data fields or through one or more services.
Marketers should check with their legal counsel for guidance on how to proceed, and then take advantage of capabilities already built-in to ÃÛ¶¹ÊÓƵ Campaign.
For example, extending the data model in ÃÛ¶¹ÊÓƵ Campaign to track not only if people have opted-in, but also the timestamp of the opt-in, and some type of indicator that captures the precise scope of consent.
Data deletion data-deletion
What data can Data Controllers delete in ÃÛ¶¹ÊÓƵ Campaign in response to a customer request by a Data Subject?
All data associated to the Data Subject will be deleted including out-of-the-box and custom tables.
Technically, all data linked to the Data Subject with integrity="own" will be deleted.
As the Data Controller, you have the option of customizing this by changing the integrity of links defined in the data schemas (for example, in case you have a business justification to not delete certain data).
How are reports affected when delivery and tracking logs are deleted?
Reports in ÃÛ¶¹ÊÓƵ Campaign are based on indicators computed on aggregated data from delivery and tracking logs. As a result, removing the individual logs should not impact the metrics displayed on the reports.
Re-import data re-import-data
Often in ÃÛ¶¹ÊÓƵ Campaign, record is uploaded from an external data source. Do I need to be mindful of possibly re-importing data at a later date?
As the Data Controller you will need to ensure that when you receive a deletion request, you delete all necessary data about the Data Subject from all of your systems.
Opt in again opt-in-again
Can a Data Subject, whose data has been erased from ÃÛ¶¹ÊÓƵ Campaign, opt-in again later?
It is possible for a Data Subject to opt-in again or to be added as a new recipient after their data has been erased from ÃÛ¶¹ÊÓƵ Campaign.
You can use the audit trail which details when the previous deletion was performed and when the new recipient has been created.