4 ms·

I think it's more easy. When they subscribe to your blog, you should include the aspect that the data processor (handling the email) do some additional tracking

by adulau 8y ago

I think it's more easy. When they subscribe to your blog, you should include the aspect that the data processor (handling the email) do some additional tracking in order to pursue a specific service. Regarding the consent (article 7 of the GDPR), provide a clear description why you do tracking and the objective. The transparency aspect is very important. PS: It's usually better to have a look at the GDPR on the official website of EUR-Lex. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...

deleted 8y ago
[deleted]
hadrien01 8y ago
You would still need to ask specifically for opt-in for that tracking, because it is not essential to the "service" (the newsletter).
- hispanic 8y ago
  And yet, amongst all of the privacy policy update emails I've received of late, I haven't been explicitly asked to consent to email tracking.
hispanic 8y ago
MailChimp wants to embed GDPR-compliance language akin to the following: "You acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy (https://mailchimp.com/legal/privacy/ https://mailchimp.com/legal/privacy/) and Terms (https://mailchimp.com/legal/terms/ https://mailchimp.com/legal/terms/).” But, MailChimp allows open-tracking to be disabled. So, that wouldn’t seem to be a required element of their processing. Which means it’s for the controller to decide. I don’t understand how article 7 of the GDPR allows for email tracking to be immune from explicit consent.
- adulau 8y ago
  It's not immune to explicit consent. You have to clearly state it why you (or your data processor) does email tracking. This can be included and described when the user subscribe to your blog post.
  - hispanic 8y ago
    Oh - OK. Then we’re of the same understanding. And yet I don’t see anyone do this. But I seriously doubt everyone is disabling their email tracking en masse. Which is why I asked my original question. :)

by adulau 8y ago

deleted 8y ago

[deleted]

hadrien01 8y ago

You would still need to ask specifically for opt-in for that tracking, because it is not essential to the "service" (the newsletter).

hispanic 8y ago
And yet, amongst all of the privacy policy update emails I've received of late, I haven't been explicitly asked to consent to email tracking.

hispanic 8y ago

MailChimp wants to embed GDPR-compliance language akin to the following: "You acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy (https://mailchimp.com/legal/privacy/ https://mailchimp.com/legal/privacy/) and Terms (https://mailchimp.com/legal/terms/ https://mailchimp.com/legal/terms/).” But, MailChimp allows open-tracking to be disabled. So, that wouldn’t seem to be a required element of their processing. Which means it’s for the controller to decide. I don’t understand how article 7 of the GDPR allows for email tracking to be immune from explicit consent.

adulau 8y ago
It's not immune to explicit consent. You have to clearly state it why you (or your data processor) does email tracking. This can be included and described when the user subscribe to your blog post.
- hispanic 8y ago
  Oh - OK. Then we’re of the same understanding. And yet I don’t see anyone do this. But I seriously doubt everyone is disabling their email tracking en masse. Which is why I asked my original question. :)