GDPR - FAQ¶

Here you will find Q&A for the most common questions concerning GDPR and the Hello Retail DPA

What is the GDPR and the DPA that I need?¶

The EU General Data Protection Regulation (GDPR) unifies data protection rules across EU member states. It protects EU residents by regulating how organizations collect, process, and share personal data.

Hello Retail acts as a data processor. To provide our services and remain GDPR compliant, we enter into a Data Processing Agreement (DPA) with you as the data controller. Our standard DPA can be found here.

When you sign up for Hello Retail, you must accept our DPA and our general terms.

Who is Hello Retail using as sub-processors?¶

We maintain an up-to-date list of our sub-processors, and it can be found here.

Why doesn't the DPA say anything about how long time you store the data?¶

Under GDPR, the data controller defines data retention. As a data processor, we process personal data on your behalf and according to your instructions, so the DPA does not specify a fixed retention period.

If I have a customer that wants to delete or receive their tracked data, what do I do?¶

Contact our support team at support@helloretail.com. Include the relevant identifiers for the individual, such as email address, customer ID, or cookie ID, and specify whether it is a deletion or access request. We will assist you with the request.

Does the Hello Retail service change after the implementation of the GDPR is in effect from 25th of May 2018?¶

No. Hello Retail has consistently maintained a high level of security and transparency, as described in our privacy policy. Changes related to GDPR are primarily in documentation and disclosures about data, including which sub-processors we use and what data we collect.

According to the GDPR we would like to offer our individual visitors to be able to opt-out of any data tracking, how do we do that?¶

We provide a JavaScript endpoint you can call to disable Hello Retail tracking for a specific user. Your Hello Retail services will still function, but events for that user will no longer be tracked. We recommend placing a link in your support section that calls this method. You can read more about this method in our API docs.