About General Data Protection Regulation

We are pretty sure you might have heard a thing or two about the GDPR by now and must be considering how to prepare for it once it comes into effect. In this article, we will share everything you need to know about it and also its impact on Aritic and its users.

Please also note that we do not aim to give any legal advice on this blog post. On the contrary, we only wish to offer information and some resource that can act as a guide for you to refer to when the GDPR comes into effect. If you wish to learn more about how your organization might change due to the GDPR, you must consult a legal practitioner in your area.

What and Who?

The General Data Protection Regulation is a privacy law enforced in the European Union to all businesses based in the EU. It will have a significant impact on the business organizations when it comes into effect on 25th May 2018. The GDPR is a law that will be responsible for regulating the personal data of the citizens of the EU and will impact how organizations or businesses use or treat this personal data. This will also include the organizations/business located outside the European Union.

When we talk about personal data, we refer to any data that can be used to identify an individual either alone or with the help of additional data. The compliance of the GDPR will have to take place if you erase, collect, transmit or change any of the personal data of the citizens of EU or store or use them according to your whims.

The GDPR will be upgradation of the older directive 95/46/EC on data privacy that will also introduce several crucial changes that might affect the users of Aritic.

About the Consent

To process the personal data of a citizen of the European Union, you must possess a legal basis for it. Under the policies stated in the GDPR, the users of Aritic must rely on consent even though they can use another legal basis to process the personal data. In this regard, the consent must be verifiable and explicit.

Verifiable consent consists of a written record that would reflect how and when someone authorized you to process or use their personal data. The Aritic forms are authorized to collect and store the IP address, the email address and the timestamp of all the people who submit the Aritic form.

Explicit content needs each contact consent so that the opt-in is not able to use an opt-in box that is pre-checked. Also, an opt-in message that you utilize needs to state all the possible ways in which you can utilize the personal data of the contacts that you collect.

This means that for all the users of Aritic, a contact is allowing you to do the following:

• Transmit all their personal contact details to Aritic
• Store their personal contact details in the account of Aritic
• Send marketing emails, SMS, push notification to them from your account of Aritic
• Track all the interactions for the purposes of ad placement, website targeting and marketing.

About Individual Rights

The rights of people in regards to their personal data are also outlined in the GDPR. According to the provisions of the GDPR, the citizens of the European Union will have the right to request for information or details on how to use their personal data. They can likewise request you to use that data in specific ways.

You should also prepare yourself to entertain the requests that come to you for the correction, completion, and transfer to some business, etc. of some personal data. The requests can also include the prohibition of data for certain uses or complete removal of the same.

In addition to all this, you must also entertain queries on how you are storing their personal data and exactly what you are going to use it for. You must also give them access to the personal data or share it if they ask for it.

What Can You Do?

We recommend the build and use a signup form from Aritic PinPoint in regards to marketing so that you can grow your list. This is because we always have copies of the permission data in the event where you might need it sometime in the future. You can also turn on the double opt-in if you require added permission evidence.

However, regardless of the method of opt-in you select, the export files contain all the permission data.

Aritic’s Preparation for the GDPR

We have been in the process of researching and investigating everything about the GDPR. In this respect, we have also modified many internal policies and practices in 2017. This precisely because we are 100% committed to complying with the GDPR this year. We have also assessed the impact that GDPR will have on the tools of Aritic to gauge if there is a way to make these tools efficient and more practical for the usage of the Aritic users by the advent of the GDPR.