What is GDPR?
The General Data Protection Regulation (GDPR) is a European Union law that governs how personal data is collected, processed, and stored. To understand your rights and responsibilities under GDPR, please expand this FAQ for detailed information.
The General Data Protection Regulation (GDPR), officially known as Regulation (EU) 2016/679, is a comprehensive data protection law enacted by the European Union. It came into effect on May 25, 2018, replacing the Data Protection Directive 95/46/EC. The GDPR aims to harmonize data privacy laws across Europe, protect and empower all EU citizens' data privacy, and reshape the way organizations across the region approach data privacy. Wikipedia
Under the GDPR, individuals have enhanced rights, including the right to access their personal data, the right to rectify inaccuracies, the right to erasure (also known as the "right to be forgotten"), and the right to data portability. Organizations are required to obtain clear and affirmative consent to process personal data, ensure data protection by design and by default, and report data breaches within 72 hours. Non-compliance can result in significant fines, up to €20 million or 4% of the annual global turnover, whichever is higher.
For a detailed understanding of the GDPR, you can refer to the official text of the regulation available on EUR-Lex: Regulation (EU) 2016/679 - General Data Protection Regulation
Gleam's GDPR Compliance: Gleam has taken proactive steps to ensure compliance with the GDPR. As a platform that facilitates marketing campaigns, Gleam acts as a data processor on behalf of its customers, who are the data controllers. Key measures implemented by Gleam include:
- Appointment of a Data Protection Officer (DPO) to oversee GDPR compliance efforts.
- Implementation of a GDPR-compliant privacy policy that outlines data handling practices in clear terms.
- Provision of tools for users to exercise their rights, such as data access and deletion requests.
- Enhancements to consent mechanisms, ensuring that users provide explicit consent for data processing activities.
- Introduction of features that allow campaign owners to manage and delete user data upon request.
For more details on how Gleam handles GDPR compliance, please visit their official update: How Gleam is Handling GDPR
See Next Article
Are Online Sweepstakes Legitimate?
Yes — online sweepstakes are legal and legitimate when run by reputable companies that follow giveaway regulations. Click to learn how to tell the difference between safe sweepstakes and potential scams.