Next, you need to make sure the unsubscribe mechanism is clear and easy for both subscribers and customers.
Whatever you are asking for data for, you should also make it easy for the user or customer to object.
One of the new changes suggested by the law is that the user or customer's consent must be verified later, so you must ensure that both you, the user and the regulatory agency can easily verify each consent.
When drafting the privacy policies of your online business, you must make known who will be responsible for processing the data , the period during which the data is being processed, the information of the recipients, that is, those who will have access to the information collected, for example: the company in charge of making the newsletter, the hosting that houses the information, etc.
Remember that creating CTAs and pop-ups to create a subscriber list is not the same as creating a segmentation process to be able to carry out other types of commercial actions (sending promotions, discounts, creating a database by tastes, age, sex, etc.). In both cases, it is necessary to clarify what the data will be processed for.
In short, privacy policies should be drafted as clearly as forex email list possible because the new law will be demanding in this regard. Users have the right to know everything about the processing of their personal data.
Look at this example:
This screenshot was taken from the check box of the pop-up on Marina Brocca's blog, who also attended a very good webinar on this very topic.
If you want to know in detail what the new law covers, watch the video:
What are the penalties you could face if you fail to comply with some of the provisions of the Data Protection Act?
Penalties may vary according to severity, and are classified into three levels: minor, serious, and very serious.
Mild
Minor sanctions are penalized with fines ranging from 900 to 40,000 euros. In general, the action refers to the user, consumer or client having requested that their data be deleted from the database and the action they requested not being carried out.