Be GDPR compliant on Dot.vu
We care a lot about data. Because we process a lot of data, we need to make it easy for you to comply with the GDPR rules. Therefore, we will do our best to assist and guide you in meeting the demands of the GDPR.
Be GDPR compliant on Dot
We care a lot about data. Because we process a lot of data, we need to make it easy for you to comply with the GDPR rules. Therefore, we will do our best to assist and guide you in meeting the demands of the GDPR.
Consent
GDPR sets a high standard for consent. Companies can no longer use long illegible and unreadable terms of conditions. Consent must be clear and distinguishable from other matters and provided in an intelligible and easily accessible form, using clear and plain language. It must also be as easy to withdraw consent as it is to give it.
It is therefore important to explain in plain language what the data will be used for, that people can withdraw their consent at any time (and how), and which organizations and any third-party controllers will be relying on this consent.
For future contacts
To make sure your content is GDPR compliant, you need to ensure future contacts provide you with an ‘unambiguous’ consent through a ‘clear affirmative action’. This means people need to opt-in by clicking a checkbox (not a pre-clicked box) and it should be very clear what people are opting in to. Many companies have resulted in offering multiple opt-in options so people can choose what type of content they will receive.
On Dot.vu, you can set up lead forms with as many options as you like for opt-ins - and include check boxes that are not pre-clicked. The lead form consent will be attached to your contact and always available to review.
For current contacts
You need to review how you obtained your current email contacts on Dot.vu along with their information in-store to ensure they were obtained according to the GDPR legislation. If you obtained contacts through pre-clicked opt-in forms, did not specify explicitly the purpose of the data collection or the data processing, you need to refresh the consent.
On Dot.vu, you can look at the history of each contact and see when and how it was obtained (through which campaign or which content piece), and review whether it was done according to GDPR compliant methods.
Disclaimer: This website does not include legal advice for your company to use in complying with EU data privacy laws like General Data Protection Regulation. Instead, it provides information to help you better understand what can be done on the Dot.vu platform to comply with the law. This information isn't legal advice and we encourage you to seek a professional lawyer's opinion when referring to this. To be clear, this information is in no way a recommendation or any expression of legal understanding. This page does neither enlist all the regulation within the GDPR, and its important that you make sure your company meets all the legal requirements of the GPDR.
Access Request
The GDPR includes the right for contacts to receive confirmation as to whether or not a company is processing personal data concerning them, including information on where and for what purpose. The company should also provide a digital copy of the personal data, free of charge. The request should be processed within 30-days.
On Dot.vu, you can look up all your contacts, view their personal data and export the data digitally.
Right to data portability
Data portability is the right for a contact to receive the personal data, which they have previously provided to a company, in a digital format, and the right to forward that data to another company.
On Dot.vu, you can easily look up a contact to review all the personal information you have obtained on. This includes contact information, dates of interaction, and information gained through interactive content (such as their favourite colour from a quiz). You can export all the information in a digital format.
Right to data portability
Data portability is the right for a contact to receive the personal data, which they have previously provided to a company, in a digital format, and the right to forward that data to another company.
On Dot.vu, you can easily look up a contact to review all the personal information you have obtained on. This includes contact information, dates of interaction, and information gained through interactive content (such as their favourite colour from a quiz). You can export all the information in a digital format.
Right to be forgotten
The right to be forgotten is also known as Data Erasure and entitles the contact to have the company holding their data erase their personal data, cease further dissemination of the data, and potentially have third parties halt processing of the data.
On Dot.vu, you can look up any of your contacts and quickly erase all their personal data.
Cookies
When cookies can identify an individual, it is considered to be personal data in the GDPR. The GDPR requires prior, informed consent of your site users, and you must document every consent.
This means it must be clear for the user, what the consent is given to, in a plain and understandable language, as well as why, how, and where the personal data is used, and it must be possible to opt-out as easily as it was to opt-in. The consent must be given through means of affirmative action, and given before the processing of the initial data. The user also has the right to be forgotten; where all of his or her personal data from cookies are deleted. The user should also have access to the website and its functions, even though all but the necessary cookies have been rejected.
On Dot.vu, you can add a fixed header or a footer to ask for consent with as many opt-in boxes as you wish. You can offer opt-in boxes for the four general categories used: ‘preferences’ ‘statistics’ ‘marketing’, and ‘necessary’, which may be pre-clicked because it includes functions that are necessary for the website to operate. Once the consent is given, it is attached to your viewer's profile and available for review at any time.
Dot.vu and GDPR
On Dot.vu, we have made every effort to comply with the new GDPR regulation. Below you can read about some of the requirements Dot.vu has prepared for, for the regulation that takes effect 25. May 2018.
Reporting Breaches
The GDPR includes a requirement that controllers (companies holding data) must notify their country’s supervisory authority and customers of a personal data breach ‘without undue delay’ and within 72 hours of learning of it.
At Dot.vu, we are prepared to inform our clients, partners, authorities, vendors, and suppliers about any security breach within 72 hours.
Privacy by Design
Privacy by design demands for the inclusion of data protection from the start of the designing of systems, rather than acting as an addition. This means that companies need to implement appropriate technical and organisational measures to meet the requirements of this regulation to protect the rights of their contacts. Companies processing privacy data should, therefore, consider the potential impact a project or initiative might have on the privacy of individuals so that potential privacy issues can be identified before they occur, and dealt with before a project launches.
At Dot.vu, we've cared about data privacy from day one. We've always kept data privacy in mind when designing our systems, and our platform. Therefore it's easy to navigate around the platform, find contacts and their data history, easily delete it or export it. We also include easy-to-use lead forms asking for consent, which is attached to each contact.
You on Dot.vu
If you want to know what information we have about you, you can write to info@dot.vu and we will provide you with the information.
For further questions, we refer to our legal section.
Need more information?
