Skip to main content

Handle a GDPR request

When a person asks to see or delete their data, export their information and anonymise it. It takes about 10 minutes.

Before you start
  • Permissions: Member GDPR Export and Member GDPR Erase.
  • You need your password to confirm the deletion.
  • Identify the person securely before acting. Note the reference of their request, without personal data.
Deletion can't be undone

The person will have to register again as a new user.

1. Find the person​

Go to Campaigns › All campaigns, open the campaign they took part in and go to the Participants tab. Find their row.

If the person is a member and not a landing-page participant, the row doesn't offer these actions. Follow the section If it's a member.

2. Export their data​

On their row, click Actions › Export data. Hand the file to the person through a secure channel.

3. Anonymise​

  1. Click Actions › Anonymize (GDPR).
  2. In the Anonymize participant (GDPR) dialog, enter the Request reason / reference.
  3. Enter your password.
  4. Click Anonymize (GDPR).

Anonymisation dialog with the request reason and password field

The final notice shows how many rows were anonymised and the certificate number. Keep it: it is your proof of deletion. It covers all rows with the same email or phone in your account.

If there are pending prizes​

The deletion is blocked and you see the list. Deliver, cancel or settle what is pending first. Or click Erase anyway after entering the Reason for erasing despite the pending obligation.

If it's a member​

The member page has no GDPR button today. A member's export and deletion are launched through the API, with the same permissions. Ask whoever integrates your account, or support, for help.

Check that it works​

  • The person no longer appears when you search by name or email.
  • You have the certificate number saved with the request.

Next steps​