This checklist is intended to help you review the common implications of the GDPR regulation for your email marketing activities.

Note: The GDPR rules affect the way your company processes personal data in every area of ​​your business, while marketing communications are the least affected by this new regulation (since e-privacy in the EU or regulations national data protection regulations were already in force), we recommend that your company obtain legal advice on specific implications for your company. Please note that this guide does not constitute legal advice.

Update your privacy policy and terms and conditions as per GDPR requirements. The most common necessary additions are:

Step 1-. Including the rights of data subjects to access and modify their personal data.

Step 2-. Clear information about the use of personal data by your company for its commercial and marketing activities.

Step 3-. Information About Your Digital User Tracking Technologies.

See an example of an updated privacy policy here. Note: You may need legal advice to adequately cover the specific implications for your company, under the GDPR.

Step 4-. Make sure your website forms include updated URLs to your privacy terms and conditions.

Step 5-. Check that the forms on your website do not have the consent/permission box checked.

Step 6-. Include the Opt Out / Unsubscribe link in all your communications.

Step 7-. Register and store the consent of your contacts to receive your marketing communications.

Step 8-. Create a data protection email, for example dataprotection@yourcompany.com

Step 9-. Configure your email Preference Center to allow the Right of Access, as well as allowing them to ask the Data Controller (you) for their Right to Rectification, Deletion of Data or Right to be Forgotten.