CINXE.COM

<!doctype html> <html lang="en-US"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="icon" type="image/png" sizes="32x32" href="https://www.brevo.com/wp-content/themes/sendinblue2019/assets/favicon/brevo-favicon.svg"> <meta name="msapplication-TileColor" content="#ffffff"> <link rel="mask-icon" href="https://www.brevo.com/wp-content/themes/sendinblue2019/assets/favicon/brevo-favicon.svg" color="#5bbad5"> <meta name="msapplication-TileImage" content="https://www.sendinblue.com/wp-content/themes/sendinblue2019/assets/favicon/mstile-144x144.png"> <meta name="msapplication-config" content="https://www.sendinblue.com/wp-content/themes/sendinblue2019/assets/favicon/browserconfig.xml"> <meta name="referrer" content="no-referrer-when-downgrade" /> <meta name="theme-color" content="#ffffff"> <link rel="preconnect" href="https://player.vimeo.com"> <link rel="preconnect" href="https://i.vimeocdn.com"> <link rel="preconnect" href="https://f.vimeocdn.com"> <link rel="preconnect" href="https://api-iam.intercom.io"> <link rel="preconnect" href="https://in-automate.sendinblue.com"> <link rel="preconnect" href="https://widget.intercom.io"> <link rel="preconnect" href="https://js.intercomcdn.com"> <link rel="preconnect" href="https://fullstory.com"> <link rel="preconnect" href="https://edge.fullstory.com"> <link rel="preconnect" href="https://rs.fullstory.com"> <link rel="preconnect" href="https://sibautomation.com"> <link rel="preconnect" href="https://bat.bing.com"> <link rel="preconnect" href="https://cdn.jsdelivr.net"> <link rel="preconnect" href="https://cdn.cookielaw.org">   <title>GDPR: All Your Questions Answered - Brevo</title> <meta name='robots' content='max-image-preview:large' />  <meta name="description" content="Everything you need to know about the GDPR: learn all about the changes resulting from the new data protection regulation, their impact on email marketing and marketing automation, the measures Brevo is taking to be compliant, and what you can do to prepare."/> <meta name="robots" content="max-snippet:-1, max-image-preview:large, max-video-preview:-1"/> <link rel="canonical" href="https://www.brevo.com/gdpr/" /> <meta property="og:locale" content="en_US" /> <meta property="og:type" content="article" /> <meta property="og:title" content="GDPR: All Your Questions Answered - Brevo" /> <meta property="og:description" content="Everything you need to know about the GDPR: learn all about the changes resulting from the new data protection regulation, their impact on email marketing and marketing automation, the measures Brevo is taking to be compliant, and what you can do to prepare." /> <meta property="og:url" content="https://brevo.com/gdpr/" /> <meta property="og:site_name" content="Brevo" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:description" content="Everything you need to know about the GDPR: learn all about the changes resulting from the new data protection regulation, their impact on email marketing and marketing automation, the measures Brevo is taking to be compliant, and what you can do to prepare." /> <meta name="twitter:title" content="GDPR: All Your Questions Answered - Brevo" /> <script type='application/ld+json' class='yoast-schema-graph yoast-schema-graph--main'>{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://www.sendinblue.com/#website","url":"https://www.sendinblue.com/","name":"Brevo","potentialAction":{"@type":"SearchAction","target":"https://www.sendinblue.com/?s={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"WebPage","@id":"https://www.sendinblue.com/gdpr/#webpage","url":"https://www.sendinblue.com/gdpr/","inLanguage":"en-US","name":"GDPR: All Your Questions Answered - Brevo","isPartOf":{"@id":"https://www.sendinblue.com/#website"},"datePublished":"2019-11-13T01:17:33+01:00","dateModified":"2023-06-01T12:20:58+02:00","description":"Everything you need to know about the GDPR: learn all about the changes resulting from the new data protection regulation, their impact on email marketing and marketing automation, the measures Brevo is taking to be compliant, and what you can do to prepare."}]}</script>  <link rel='dns-prefetch' href="//www.brevo.com" /> <link rel='dns-prefetch' href='//a.omappapi.com' /> <link rel='dns-prefetch' href='//s.w.org' /> <link rel="alternate" type="application/rss+xml" title="Brevo » Feed" href="https://www.brevo.com/feed/" /> <link rel="alternate" type="application/rss+xml" title="Brevo » Comments Feed" href="https://www.brevo.com/comments/feed/" /> <script type="text/javascript"> window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/13.1.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/www.sendinblue.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=5.8.10"}}; !function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([10084,65039,8205,55357,56613],[10084,65039,8203,55357,56613])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings); </script> <style type="text/css"> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 .07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; } </style> <link rel='stylesheet' id='builder-css' href="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/brevo-style/css/pages/builder.css?ver=1744184979" type='text/css' media='all' /> <link rel='stylesheet' id='wp-block-library-css' href="https://marketing-assets.brevo.com/en/wp-includes/css/dist/block-library/style.min.css?ver=5.8.10" type='text/css' media='all' /> <link rel='stylesheet' id='mpp_gutenberg-css' href="https://marketing-assets.brevo.com/en/wp-content/plugins/metronet-profile-picture/dist/blocks.style.build.css?ver=2.6.0" type='text/css' media='all' /> <link rel='stylesheet' id='bcct_style-css' href="https://marketing-assets.brevo.com/en/wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=3.0" type='text/css' media='all' /> <link rel='stylesheet' id='contact-form-7-css' href="https://marketing-assets.brevo.com/en/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.6.1" type='text/css' media='all' /> <link rel='stylesheet' id='grid-system-css' href="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/brevo-style/css/grid.min.css?ver=1.0" type='text/css' media='all' /> <link rel='stylesheet' id='sib2019-common-css-css' href="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/brevo-style/css/common.css?ver=1744184979" type='text/css' media='all' /> <link rel='stylesheet' id='brevo-style-css' href="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/build/index.css?ver=e40f723a2f6c5e300b8d" type='text/css' media='all' /> <link rel='stylesheet' id='tablepress-default-css' href="https://marketing-assets.brevo.com/en/wp-content/plugins/tablepress/css/default.min.css?ver=1.14" type='text/css' media='all' /> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/jquery/jquery.min.js?ver=3.6.0" id='jquery-core-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2" id='jquery-migrate-js'></script> <link rel="https://api.w.org/" href="https://www.brevo.com/wp-json/" /><link rel="alternate" type="application/json" href="https://www.brevo.com/wp-json/wp/v2/pages/26397" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.brevo.com/xmlrpc.php?rsd" /> <link rel="wlwmanifest" type="application/wlwmanifest+xml" href="https://www.brevo.com/wp-includes/wlwmanifest.xml" /> <meta name="generator" content="WordPress 5.8.10" /> <link rel='shortlink' href="https://www.brevo.com/?p=26397" /> <link rel="alternate" type="application/json+oembed" href="https://www.brevo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sendinblue.com%2Fgdpr%2F" /> <link rel="alternate" type="text/xml+oembed" href="https://www.brevo.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sendinblue.com%2Fgdpr%2F&format=xml" /> <link rel="alternate" hreflang="en" href="https://www.brevo.com/gdpr/" title="English" /><link rel="icon" href="https://www.brevo.com/wp-content/uploads/2023/05/cropped-Brevo-icon-round-32x32.png" sizes="32x32" /> <link rel="icon" href="https://www.brevo.com/wp-content/uploads/2023/05/cropped-Brevo-icon-round-192x192.png" sizes="192x192" /> <link rel="apple-touch-icon" href="https://www.brevo.com/wp-content/uploads/2023/05/cropped-Brevo-icon-round-180x180.png" /> <meta name="msapplication-TileImage" content="https://www.sendinblue.com/wp-content/uploads/2023/05/cropped-Brevo-icon-round-270x270.png" />  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://metrics.brevo.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-MKMDTST'); </script>  <script> function getCookie(e){var o=document.cookie.match("(^|;) ?"+e+"=([^;]*)(;|$)");return o?o[2]:null}function setCookie(e,o,n){var t=new Date;t.setTime(t.getTime()+864e5*n),document.cookie=e+"="+o+";domain=.sendinblue.com;path=/;expires="+t.toGMTString()}function deleteCookie(e){setCookie(e,"",-1)}function getSubDomain(){return window.location.host.split(".")[0]}function redirectToSubDomain(e){var o=window.location.host,n=location.pathname+location.search,t=o.split("."),i=(t[0],"https://"+e+"."+t[1]+"."+t[2]+n);window.location=i}function isExternal(){if(""===document.referrer)return!0;var e=window.location.host.split("."),o=e[1]+e[2],n=document.referrer.split("/")[2].split(".");return n[1]+n[2]!==o}function inArray(e,o){for(var n=o.length,t=0;t<n;t++)if(o[t]==e)return!0;return!1}function getCountryCode(){return"www.sendinblue.com"===location.hostname?"US":"fr.sendinblue.com"===location.hostname?"FR":"es.sendinblue.com"===location.hostname?"ES":"it.sendinblue.com"===location.hostname?"IT":"pt.sendinblue.com"===location.hostname?"BR":"de.sendinblue.com"===location.hostname?"DE":"US"}var languageString=navigator.languages||[""],language=languageString[0].split(/[_-]/)[0].toLowerCase(),allowedLangues=["fr","es","it","pt","de"];null===getCookie("tmpl_lang")&&(inArray(language,allowedLangues)?(setCookie("tmpl_lang",language,30),"pt"===language&&(language="BR"),setCookie("country",language.toUpperCase(),30)):(setCookie("tmpl_lang","en",30),setCookie("country","US",30))),"www.sendinblue.com"===location.hostname?null===getCookie("tmpl_lang")?(setCookie("tmpl_lang","en",30),setCookie("country","US",30)):!0===isExternal()&&"/"===location.pathname&&"en"!==getCookie("tmpl_lang")?redirectToSubDomain(getCookie("tmpl_lang")):"en"!==getCookie("tmpl_lang")&&(setCookie("tmpl_lang","en",30),setCookie("country","US",30)):(setCookie("tmpl_lang",getSubDomain().toLowerCase(),30),setCookie("country",getCountryCode(),30)); </script> <script type='text/javascript' id='vwoCode'> window._vwo_code=window._vwo_code || (function() { var account_id=717619, version = 1.5, settings_tolerance=2000, library_tolerance=2500, use_existing_jquery=false, is_spa=1, hide_element='body', hide_element_style = 'opacity:0 !important;filter:alpha(opacity=0) !important;background:none !important', /* DO NOT EDIT BELOW THIS LINE */ f=false,d=document,vwoCodeEl=d.querySelector('#vwoCode'),code={use_existing_jquery:function(){return use_existing_jquery},library_tolerance:function(){return library_tolerance},hide_element_style:function(){return'{'+hide_element_style+'}'},finish:function(){if(!f){f=true;var e=d.getElementById('_vis_opt_path_hides');if(e)e.parentNode.removeChild(e)}},finished:function(){return f},load:function(e){var t=d.createElement('script');t.fetchPriority='high';t.src=e;t.type='text/javascript';t.onerror=function(){_vwo_code.finish()};d.getElementsByTagName('head')[0].appendChild(t)},getVersion:function(){return version},getMatchedCookies:function(e){var t=[];if(document.cookie){t=document.cookie.match(e)||[]}return t},getCombinationCookie:function(){var e=code.getMatchedCookies(/(?:^|;)\s?(_vis_opt_exp_\d+_combi=[^;$])/gi);e=e.map(function(e){try{var t=decodeURIComponent(e);if(!/_vis_opt_exp_\d+_combi=(?:\d+,?)+\s$/.test(t)){return''}return t}catch(e){return''}});var i=[];e.forEach(function(e){var t=e.match(/([\d,]+)/g);t&&i.push(t.join('-'))});return i.join('|')},init:function(){if(d.URL.indexOf('__vwo_disable__')>-1)return;window.settings_timer=setTimeout(function(){_vwo_code.finish()},settings_tolerance);var e=d.createElement('style'),t=hide_element?hide_element+'{'+hide_element_style+'}':'',i=d.getElementsByTagName('head')[0];e.setAttribute('id','_vis_opt_path_hides');vwoCodeEl&&e.setAttribute('nonce',vwoCodeEl.nonce);e.setAttribute('type','text/css');if(e.styleSheet)e.styleSheet.cssText=t;else e.appendChild(d.createTextNode(t));i.appendChild(e);var n=this.getCombinationCookie();this.load('https://dev.visualwebsiteoptimizer.com/j.php?a='+account_id+'&u='+encodeURIComponent(d.URL)+'&f='+ +is_spa+'&vn='+version+(n?'&c='+n:''));return settings_timer}};window._vwo_settings_timer = code.init();return code;}()); </script> <script id='FingerprintJS' src="https://assets.brevo.com/js/fingerprint.js" strategy='beforeInteractive' type='text/javascript' ></script> </head> <body class="page-template page-template-tpl-page-builder page-template-tpl-page-builder-php page page-id-26397 no-sidebar">  <noscript> <iframe src="https://metrics.brevo.com/ns.html?id=MKMDTST" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>  <div id="header-brevo" data="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"> </div>   <script> var SIB_LANGUAGE = "en"; </script> <main class="banner-spacing">  <section id="section-cover-3"> <div class="wrapper"> <div class="container-text"> <h1>Stay GDPR-compliant with Brevo</h1> </div> </div> </section>   <section id="col-text-photo-2" class="white "> <div class="wrapper row"> <div class="col-12 col-md-6 container-img order-2"> <img class="cover" src="https://marketing-assets.brevo.com/en/wp-content/uploads/2020/04/shield.png" alt="" /> </div> <div class="col-12 col-md-6 container-text order-1"> <h2>Find all the answers to your GDPR questions here:<br /> </h2> <p> </p> <ul> <li>What is the GDPR?</li> <li>How does it impact email marketing and marketing automation?</li> <li>How does Brevo enable users to comply with this regulation?</li> <li>What measures do I need to take in order to be in compliance with the GDPR?</li> </ul> <p><strong>Please note:</strong> <em>this page explains the impact of GDPR on the use of Brevo only and is not applicable for any other aspects of your business. It should not be considered as legal advice.</em></p> </div> </div> </section> <section id="section-accordion"> <div class="wrapper"> <div class="container-text"> <h2>Frequently Asked Questions:</h2> </div> <div class="container-ac"> <div class="sib-builder-col"> <div class="container-el"> <div class="el close"> <div class="head"> <h4>What is the GDPR?</h4> <div class="action"> <div class="line"></div> <div class="line"></div> </div> </div> <div class="content"> <p>The GDPR is the new European legislation meant to replace the <a href="https://en.wikipedia.org/wiki/Data_Protection_Directive" target="_blank" rel="noopener">1995 Data Protection Directive</a></p> <p>This regulation, which can be read in full <a href="https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32016R0679" target="_blank" rel="noopener">on the CNIL website</a>, is the new European law governing the use and handling of individuals’ personal data.</p> <p>It has 3 primary objectives:</p> <ul> <li>To standardize European data protection regulations.</li> <li>To give citizens control over how their personal data is used.</li> <li>To make sure that companies are aware of their responsibilities regarding personal data.</li> </ul> </div> </div> </div> </div> <div class="sib-builder-col"> <div class="container-el"> <div class="el close"> <div class="head"> <h4>To whom does the GDPR apply?</h4> <div class="action"> <div class="line"></div> <div class="line"></div> </div> </div> <div class="content"> <p>If you collect or process the personal data of any European citizen, regardless of the country in which your company is based, the GDPR affects your business.</p> <p>The GDPR has also eliminated the distinctions between various types of businesses — including B2B, B2C, for-profit, and nonprofit — meaning the law applies equally to all organizations that process the personal data of European citizens.</p> </div> </div> </div> </div> <div class="sib-builder-col"> <div class="container-el"> <div class="el close"> <div class="head"> <h4>When should you be ready for the GDPR?</h4> <div class="action"> <div class="line"></div> <div class="line"></div> </div> </div> <div class="content"> <p>All relevant actors are required to be in compliance with the GDPR as of May 25th, 2018.</p> </div> </div> </div> </div> <div class="sib-builder-col"> <div class="container-el"> <div class="el close"> <div class="head"> <h4>What penalties will be applied within the new regulations?</h4> <div class="action"> <div class="line"></div> <div class="line"></div> </div> </div> <div class="content"> <p>Companies that are found to be in violation of the GDPR may be <b>fined anywhere from 2-4% of annual revenue, or up to 20 million dollars, </b>whichever is the larger amount.</p> </div> </div> </div> </div> <div class="sib-builder-col"> <div class="container-el"> <div class="el close"> <div class="head"> <h4>How is the GDPR different from the current regulations?</h4> <div class="action"> <div class="line"></div> <div class="line"></div> </div> </div> <div class="content"> <p>One of the main goals of the GDPR is to extend the rights of European residents in regards to the handling of their personal data. This can be summarized as follows:</p> <ul> <li>More access and control over the storage and processing of personal data for consumers</li> <li>A tighter definition of consent and personal data</li> <li>More transparency into the use of their personal data once it has been collected</li> </ul> <h4>New rights for users</h4> <p>The GDPR has created new rights of access and data protection for “data subjects”:</p> <ul> <li><b>Right to rectification:</b> The data subject may request that their personal data be updated or corrected.</li> <li><b>Right to be forgotten:</b> The data subject may request that their personal data be permanently deleted.</li> <li><b>Right to portability:</b> The data subject may request that their personal data be sent to another organization or competitor.</li> <li><b>Right to object:</b> The data subject may object to specific types of processing or uses of their personal data.</li> <li><b>Right of access:</b> The data subject has the right to be informed of any and all of their personal data that has been collected, as well as its intended use.</li> </ul> <h4>A new definition for consent</h4> <p>One of the big changes in the GDPR is the new definition of consent, which should now be “given freely” and provided in the form of a “positive action” for each planned use case involving the subject’s personal data.</p> <p><b>Opt-out</b> practices (whereby subjects are automatically subscribed to a list, leaving it up to them to unsubscribe) and <b>passive opt-in</b> practices (pre-checked boxes in subscription forms) <b>are now prohibited</b> under the new regulation.</p> <p><strong>Opt-in</strong> is now the only way to get explicit consent, and therefore the only legal means by which organizations can obtain and use customer contact information.</p> <p>This means that from now on you must:</p> <ul> <li>Provide additional opt-in forms for each of the different ways you plan to use personal data from your customers (e.g. newsletter, automated emails, profiling, etc.)</li> <li>Ask your users for permission each time you want to use their personal data in a new way.</li> </ul> <p>It is important to note that this new definition of consent also applies retroactively to the personal data of European residents collected before May 28th, 2018.</p> <p>If you have already received consent for the use of this data, you do not need to ask for it again. However, if your current lists do not comply with the GDPR, you must ask for explicit permission from your contacts with the use of an opt-in form.</p> <h4>More transparency, new requirements for risk control…</h4> <p>This page is mostly concerned with summarizing the implications of your email marketing and marketing automation practices, but the GDPR also includes numerous other requirements: record keeping, nominating a Data Protection Officer, implementing a management risk process, etc.</p> <p>Depending on your business and the nature of the personal data you process, the implications of the GDPR can be extremely far-reaching.</p> <p>To better understand the requirements and legal ramifications for your organization, we recommend you consult a legal advisor specializing in personal data regulations.</p> </div> </div> </div> </div> </div> </div> </section>  <script type="application/ld+json"> { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{"@type":"Question","name":"What is the GDPR?","acceptedAnswer":{"@type":"Answer","text":"<p>The GDPR is the new European legislation meant to replace the\u00a0<a href=\"https:\/\/en.wikipedia.org\/wiki\/Data_Protection_Directive\" target=\"_blank\" rel=\"noopener\">1995 Data Protection Directive<\/a><\/p><br \/><p>This regulation, which can be read in full\u00a0<a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/en\/TXT\/?uri=CELEX%3A32016R0679\" target=\"_blank\" rel=\"noopener\">on the CNIL website<\/a>, is the new European law governing the use and handling of individuals\u2019 personal data.<\/p><br \/><p>It has 3 primary objectives:<\/p><br \/><ul><br \/><li>To standardize European data protection regulations.<\/li><br \/><li>To give citizens control over how their personal data is used.<\/li><br \/><li>To make sure that companies are aware of their responsibilities regarding personal data.<\/li><br \/><\/ul><br \/>"}},{"@type":"Question","name":"To whom does the GDPR apply?","acceptedAnswer":{"@type":"Answer","text":"<p>If you collect or process the personal data of any European citizen, regardless of the country in which your company is based, the GDPR affects your business.<\/p><br \/><p>The GDPR has also eliminated the distinctions between various types of businesses \u2014 including B2B, B2C, for-profit, and nonprofit \u2014 meaning the law applies equally to all organizations that process the personal data of European citizens.<\/p><br \/>"}},{"@type":"Question","name":"When should you be ready for the GDPR?","acceptedAnswer":{"@type":"Answer","text":"<p>All relevant actors are required to be in compliance with the GDPR as of May 25th, 2018.<\/p><br \/>"}},{"@type":"Question","name":"What penalties will be applied within the new regulations?","acceptedAnswer":{"@type":"Answer","text":"<p>Companies that are found to be in violation of the GDPR may be\u00a0<b>fined anywhere from 2-4% of annual revenue, or up to 20 million dollars,\u00a0<\/b>whichever is the larger amount.<\/p><br \/>"}},{"@type":"Question","name":"How is the GDPR different from the current regulations?","acceptedAnswer":{"@type":"Answer","text":"<p>One of the main goals of the GDPR is to extend the rights of European residents in regards to the handling of their personal data. This can be summarized as follows:<\/p><br \/><ul><br \/><li>More access and control over the storage and processing of personal data for consumers<\/li><br \/><li>A tighter definition of consent and personal data<\/li><br \/><li>More transparency into the use of their personal data once it has been collected<\/li><br \/><\/ul><br \/><h4>New rights for users<\/h4><br \/><p>The GDPR has created new rights of access and data protection for \u201cdata subjects\u201d:<\/p><br \/><ul><br \/><li><b>Right to rectification:<\/b>\u00a0The data subject may request that their personal data be updated or corrected.<\/li><br \/><li><b>Right to be forgotten:<\/b>\u00a0The data subject may request that their personal data be permanently deleted.<\/li><br \/><li><b>Right to portability:<\/b>\u00a0The data subject may request that their personal data be sent to another organization or competitor.<\/li><br \/><li><b>Right to object:<\/b>\u00a0The data subject may object to specific types of processing or uses of their personal data.<\/li><br \/><li><b>Right of access:<\/b>\u00a0The data subject has the right to be informed of any and all of their personal data that has been collected, as well as its intended use.<\/li><br \/><\/ul><br \/><h4>A new definition for consent<\/h4><br \/><p>One of the big changes in the GDPR is the new definition of consent, which should now be \u201cgiven freely\u201d and provided in the form of a \u201cpositive action\u201d for each planned use case involving the subject\u2019s personal data.<\/p><br \/><p><b>Opt-out<\/b>\u00a0practices (whereby subjects are automatically subscribed to a list, leaving it up to them to unsubscribe) and\u00a0<b>passive opt-in<\/b>\u00a0practices (pre-checked boxes in subscription forms)\u00a0<b>are now prohibited<\/b>\u00a0under the new regulation.<\/p><br \/><p><strong>Opt-in<\/strong>\u00a0is now the only way to get explicit consent, and therefore the only legal means by which organizations can obtain and use customer contact information.<\/p><br \/><p>This means that from now on you must:<\/p><br \/><ul><br \/><li>Provide additional opt-in forms for each of the different ways you plan to use personal data from your customers (e.g. newsletter, automated emails, profiling, etc.)<\/li><br \/><li>Ask your users for permission each time you want to use their personal data in a new way.<\/li><br \/><\/ul><br \/><p>It is important to note that this new definition of consent also applies retroactively to the personal data of European residents collected before May 28th, 2018.<\/p><br \/><p>If you have already received consent for the use of this data, you do not need to ask for it again. However, if your current lists do not comply with the GDPR, you must ask for explicit permission from your contacts with the use of an opt-in form.<\/p><br \/><h4>More transparency, new requirements for risk control\u2026<\/h4><br \/><p>This page is mostly concerned with summarizing the implications of your email marketing and marketing automation practices, but the GDPR also includes numerous other requirements: record keeping, nominating a Data Protection Officer, implementing a management risk process, etc.<\/p><br \/><p>Depending on your business and the nature of the personal data you process, the implications of the GDPR can be extremely far-reaching.<\/p><br \/><p>To better understand the requirements and legal ramifications for your organization, we recommend you consult a legal advisor specializing in personal data regulations.<\/p><br \/>"}}]} </script> <section id="col-text-1"> <div class="wrapper full"> <div class="left"> <h3>What measures has Brevo taken to be in compliance with the GDPR?</h3> <h4>Leading up to the implementation of the GDPR on 25 May 2018, Brevo took many necessary steps in order to ensure users’ rights in accordance with the new laws.</h4> <p>As a Brevo customer, the GDPR gives you new protection rights and assures better access to your personal data.</p> <p><strong>Right to rectification:</strong> Rectify your personal information at any time from your account settings. You can also contact us directly to edit or rectify your information.</p> <p><strong>Right to be forgotten:</strong> Cancel your Brevo subscription and close your account at any time. You can send us a request to erase all your data, which we will complete within 30 days.</p> <p><strong>Right to portability:</strong> Upon request, we will export your data so that it can be transferred to a third party or competitor.</p> <p><strong>Right to object:</strong> Unsubscribe at any time to any specific use of your information (newsletter, automatic emails, etc.).</p> <p><strong>Right of access:</strong> We are transparent about the data that we collect and what we do with it. To familiarize yourself with this, please refer to our privacy policy. You can contact us at any time to access and modify any of your personal data.</p> </div> </div> </section> <section id="col-text-1"> <div class="wrapper full"> <div class="left"> <h3>How can Brevo help you answer requests related to your customers’ data?</h3> <p>The GDPR provides new rights for your users and customers as well. Thanks to the measures that Brevo has taken to be compliant with the new regulations, you will be able to answer any requests from users who are looking to exercise their new rights regarding their personal data stored in your database.</p> <p><strong>Right to rectification:</strong> You can rectify your contacts’ information at any time. You can also contact us directly to ask us to rectify or delete your data.</p> <p><strong>Right to be forgotten:</strong> If one of your contacts wishes to exercise their right to be forgotten, you can simply delete them from your lists in Brevo. This will also erase all their personal data. If one of your contacts sends a valid request directly to us, we will inform you and remove their personal data from your account, as well as from any other Brevo accounts who have personal data on this contact, when applicable.</p> <p><strong>Right to portability:</strong> You can already export your contacts information as a csv file.</p> <p><strong>Right of access:</strong> Make sure that you explain in your privacy policy how you plan to use the personal data that you collect. If your customers make a request to exercise their right of access, you can export their personal data to a csv file <em>(see right to portability)</em>.</p> </div> </div> </section> <section id="col-text-1"> <div class="wrapper full"> <div class="left"> <h3>How can you ensure that you’re in compliance with the GDPR?</h3> <p><strong>1. Learn how to rectify and delete your contacts’ information</strong><br /> The right to access, modify and delete data is one of the key points of the GDPR. Find out how to delete contacts or modify their information.</p> <p><strong>2. Update your subscription forms</strong><br /> We recommend that you study and update the wording of your<br /> subscription forms so that they are as explicit as possible regarding how requested information will be used. Include affirmative language that clearly states the user agrees to the stated terms.</p> <p>We also recommend using a different opt-in for each of the different ways you plan to use personal data from users. For example, you should use two separate opt-in forms when gathering subscribers for a newsletter and subscribers to receive automated emails triggered by specific user actions (i.e. marketing automation).</p> <p><strong>3. Delete the contacts and lists you no longer need</strong><br /> One of the main objectives of the GDPR is to minimize the risks of data breaches or leaks and prevent the misuse of European residents’ personal data.</p> <p>This is why it is better to delete all of your contacts who are inactive or those who have unsubscribed to your communications already. If you are not using this information, then it is more advisable to discard it.</p> <p><strong>4. Consult with your legal counsel</strong><br /> The information on this page is designed to help prepare Brevo users for the GDPR in the context of our services and should not be taken as legal advice. Additionally, there may be parts of the legislation that affect other aspects of your business as well.</p> <p>We recommend you seek qualified legal counsel to determine what compliance measures you need to carry out to be fully compliant with the GDPR.</p> </div> </div> </section> <section id="colored-col-text-photo-2"> <div class="wrapper row regal-blue image-left"> <div class="col-12 col-lg-6 container-img order-1"> <img src="https://marketing-assets.brevo.com/en/wp-content/uploads/2020/04/shield.png" /> </div> <div class="col-12 col-lg-6 container-text order-2"> <h2>Learn More</h2> <p>Recommended reading from our blog for more information about the GDPR:</p> <a class="link" onclick="sibMain.pushOnClickDataLayer()" href="https://www.brevo.com/blog/gdpr-email-marketing/" target=""> <svg class="link-arrow" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 6 10"> <use xlink:href="https://www.brevo.com/wp-content/themes/sendinblue2019/assets/images/common/arrow-1.svg#arrow-1"></use> </svg> <span class="link-text">How does the GDPR affect your email marketing?</span> </a> </div> </div> </section>  </main> <div id="brevo-footer" data="eyJ0eXBlIjoiZm9vdGVyIiwidGhlbWUiOiJsaWdodCIsImRpc3BsYXkiOnRydWUsImxvY2FsZSI6ImVuX1VTIn0="> </div> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/libs/classlist-polyfill.min.js?ver=1744184979" id='sib2019-index-polifill-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/plugins/metronet-profile-picture/js/mpp-frontend.js?ver=2.6.0" id='mpp_gutenberg_tabs-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.7" id='regenerator-runtime-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id='wp-polyfill-js'></script> <script type='text/javascript' id='contact-form-7-js-extra'> /* <![CDATA[ */ var wpcf7 = {"api":{"root":"https:\/\/www.sendinblue.com\/wp-json\/","namespace":"contact-form-7\/v1"}}; /* ]]> */ </script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.6.1" id='contact-form-7-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/main-min.js?ver=1744184979" id='sib2019-main-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/common-min.js?ver=1744184979" id='sib2019-common-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/header-min.js?ver=1744184979" id='sib2019-header-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/index-min.js?ver=1744184979" id='sib2019-index-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/vendor/react.min.js?ver=16.13.1" id='react-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/vendor/react-dom.min.js?ver=16.13.1" id='react-dom-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/vendor/lodash.min.js?ver=4.17.19" id='lodash-js'></script> <script type='text/javascript' id='lodash-js-after'> window.lodash = _.noConflict(); </script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/escape-html.min.js?ver=dcba9e40e8782c7d5883426934834b3e" id='wp-escape-html-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/dist/element.min.js?ver=43a121e875f299c637e1115581bee905" id='wp-element-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/build/index.js?ver=e40f723a2f6c5e300b8d" id='brevo-scripts-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/linkedin-tracker-min.js?ver=1744184979" id='sib2019-linkedin-tracker-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/wpcf7-ebook-utm-link-min.js?ver=1744184979" id='sib2019-utm-tracker-js'></script> <script>(function(d){var s=d.createElement("script");s.type="text/javascript";s.src="https://a.omappapi.com/app/js/api.min.js";s.async=true;s.id="omapi-script";d.getElementsByTagName("head")[0].appendChild(s);})(document);</script><script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-includes/js/wp-embed.min.js?ver=5.8.10" id='wp-embed-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/rellax-min.js?ver=1744184979" id='sib2019-rellax-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/assets/javascript/minify/builder-min.js?ver=1744184979" id='sib2019-builder-js'></script> <script type='text/javascript' src="https://marketing-assets.brevo.com/en/wp-content/themes/sendinblue2019/build/home-react.js?ver=1744184979" id='builder-react-js-build-js'></script> <script type="text/javascript">var omapi_data = {"wc_cart":[],"object_id":26397,"object_key":"page","object_type":"post","term_ids":[]};</script> <script type="text/javascript" id="GTM-signup"> var signupLinks = document.querySelectorAll( 'a[href*="https://onboarding.sendinblue.com/account/register"], a[href*="sendinblue.com/users/signup"]'); for (var i = 0; i < signupLinks.length; i++) { if (null == signupLinks[i].getAttribute('onclick')) { signupLinks[i].addEventListener("click", function () { dataLayer.push({ 'event': 'analyticsEvent', 'eventCategory': 'Account', 'eventAction': 'Signup', 'eventLabel': 'Click', 'eventValue': 'generic' }); }); } } </script> </body> </html>