To use GDPR compliant you have to follow these instructions:
Services & integrations
Due to the fact that the integration of ActiveCampaign is not necessary for the operation of the website, the integration requires consent.
A data processing agreement must be concluded with the processor (see https://www.activecampaign.com/legal/dpa). It must be checked whether all the criteria of Art. 28 GDPR are met and whether the technical and organizational measures specified by the service provider represent adequate protection for the risk.
The documents must be archived so that they can be proven to the supervisory authority if necessary.
Privacy Statement for the Service ActiveCampaign
When you register for our newsletter, we process personal data. Processed data categories: data for creating usage statisticsdata about the use of the website and the logging of clicks on individual elementscontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Sending information and content optimization. The legal basis for processing:[cfg_dse_newsletter]. Data is transmitted: to the data processor ActiveCampaign, LLC, 150 North Michigan Avenue, Suite 1230, Chicago, IL 60601, USArepresented by EU-REP.Global GmbH, Attn: ActiveCampaign, Hopfenstr. 1d, 24114 Kiel, Germany, [email protected]. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). Information about DPF membership of ActiveCampaign, LLC
In addition to the above information, the data protection information must also contain the mandatory information from Art. 13 or 14 GDPR: Name and contact details of the controller, if necessary the contact details of the data protection officer, the purposes for which the personal data are to be processed, the legitimate interests, if the processing is based on Article 6 (1) f GDPR, the duration of the processing, information on the rights of the data subjects including the right to lodge a complaint with a supervisory authority, the possibility of simply revoking consent given, and information as to whether the Provision of the data is required by law or contract or what the possible consequences of non-provision would be. In the event that the data is used for automated decision-making, including profiling, meaningful information about the logic involved and the scope and impact on the data subject must be provided. The processing of the data must also be documented in the list of processing activities in accordance with Art. 30 GDPR. The information required for this can already be found in the privacy statement, which can be created from the previous information.
Preconfigured services & integrations