{"id":16667,"date":"2021-05-25T10:11:56","date_gmt":"2021-05-25T09:11:56","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=16667"},"modified":"2022-03-02T12:21:40","modified_gmt":"2022-03-02T11:21:40","slug":"withdrawal-in-email-marketing-and-gdpr","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/withdrawal-in-email-marketing-and-gdpr\/","title":{"rendered":"Withdrawal in email marketing and GDPR"},"content":{"rendered":"\n

The process to withdrawal in email marketing campaigns and how to implement it following the GDPR is one of the common questions asked by people in the sector and one most often discussed in the recent edition of the Email Marketing Bootcamp<\/a>, in which I had the privilege of giving the legal session once again this year.<\/p>\n\n\n\n

Which regulations apply in the withdrawal from email marketing?<\/strong><\/h2>\n\n\n\n

If you consider email as personal data (it will be, as long as email marketing campaigns are B2C), the GDPR should undoubtedly be entirely applied. This well-known regulation applies to any processing of personal data, regardless of the sector. Therefore, it governs all email marketing campaigns.<\/p>\n\n\n\n

Thus, if the sending of emails with advertising or promotional content is based on the consent of the recipient because this has been accepted at some point, he\/she must be entitled to withdraw that consent (Art. 7.3) and, therefore, this recipient’s right, becomes an obligation for the company or agency managing the campaign.<\/p>\n\n\n\n

The “cancellation” also finds its justification in the right of any person to erase or suppress their personal data (Art. 17 GDPR). Therefore, if someone asks for their personal data to be deleted (including the email where the transmissions are made), this should lead to the cancellation of all commercial communications they were receiving until that time.<\/p>\n\n\n\n

Finally, and still within the GDPR, its Article 21.2 provides for the so-called right of opposition, which is nothing more than everyone\u2019s possibility to refuse the processing of their data for commercial purposes.<\/p>\n\n\n\n

It must not be forgotten that the right to oppose or to not receive any more electronic commercial communications is also regulated by the 2001 LSSICE, in which it also indicates that the procedure must be simple and free of charge.<\/p>\n\n\n\n

In case of cancellation, should I delete the data immediately?<\/strong><\/h2>\n\n\n\n

Currently, most email marketing campaigns are automated through platforms available in the market (Mailchimp, Active Campaign, Send in Blue, etc.). In this same way, the management of cancellations following the requests from recipients is also an automatic procedure. <\/p>\n\n\n\n

Therefore, the company responsible for the campaign, does not normally even know that a cancellation has been requested because, as said, this is an automatic process facilitated by the platform.<\/p>\n\n\n\n

Regardless of this, bear in mind that when requesting withdrawal from an email marketing campaign, the data blocking rule included in Art. 32 of the current LOPD applies.<\/p>\n\n\n\n

This article sets forth sets forth two important provisions that affect unsubscribe requests in email marketing campaigns:<\/p>\n\n\n\n

  1. When a withdrawal is requested, the applicant’s data must not be deleted immediately, but must be blocked. In this state, the data will remain under the control of the company that managed the campaign, but it must take the appropriate measures to ensure this data cannot be altered. Only after the statute of limitations for infringements should the data be deleted. In the world of email marketing, the most serious common infractions prescribe after 2 years, so this is a good time criterion when deciding when data should be deleted.<\/li><\/ol>\n\n\n\n
    1. Where the data processing system or the campaign delivery platform does not allow for this blocking and deletion system, the cancellation requests must be extracted and saved independently before deleting the data after the two-year period has elapsed.<\/li><\/ol>\n\n\n\n

      Conclusions:<\/strong><\/p>\n\n\n\n