Make Consent Opt-in: As mentioned in Article 4 of the GDPR, users must take an affirmative action, meaning pre-ticked, opt-out boxes will no longer pass the consent test. Standard consent email: Standard consent email is more like a one-time email. (Not sure what GDPR is? Using double opt-in in email marketing is a good way to ensure compliance regarding consent under GDPR. This GDPR email from The Kennel Club has a good balance of text, visuals and persuasion tactics. And this repermissioning upgrade is perfectly lawful to send out by email because you have current consent, but not for long. And this repermissioning upgrade is perfectly lawful to send out by email because you have current consent, but not for long. Recurring consent email: Select this type if you want to send your consent emails at fixed intervals. 675 Massachusetts Ave., 10th Floor Cambridge, MA 02139 +1 (866) 787-7030 hello@litmus.com, Copyright © 2020 Litmus Software, Inc. 2005-2020, Ideal for agencies and email teams of 4+ people, “freely given, specific, informed and unambiguous”, The Information Commissioner’s Office of the UK, Adapting to Consumers’ New Definition of Spam report. This type of opt-in starts from … “Silence, pre-ticked boxes or inactivity should not constitute consent.”. Along with marketing emails, you can still communicate with your contacts through marketing calls, faxes or texts. Make sure to click it to confirm your newsletter registration. Fortunately, there are steps you can take to protect yourself from GDPR fines. Terms of Service apply. If you are using an email opt-in form that has multiple goals, you may want to take it a step further and include a checkbox to gain explicit consent. GDPR expanded this statement and elaborated requirements for collection and storage of users’ consent. Each promotional email you send must include an option to unsubscribe. If your website uses email marketing, there's some legislation you should know about.The General Data Protection Regulation (GDPR) is a new privacy-focused law that went into effect earlier this year. in Paris © 2020 Mailjet inc. All Rights Reserved. 2. Here are six tips, with plenty of examples from brands to draw inspiration from. No, as soft opt-in does not considered as explicit consent under GDPR, it is not an acceptable practice. Re-permission campaigns are a powerful way to update existing records to ensure GDPR compliant consent, but they do require detailed planning and execution. If the request for consent is part of a more wide-ranging form, the consent element must be clearly identifiable by the individual. So the existing consent needs to be “upgraded” to GDPR consent. GDPR fields Contrary to popular belief, the EU GDPR (General Data Protection Regulation) does not require businesses to obtain consent from people before using their personal information for business purposes. You can set a time at which the email will be sent out. necessary for the performance of that contract.”. One of the most useful tools for lead qualification is email tracking, but like your prospects’ personal data, under GDPR you need explicit permission to track any EU resident’s emails, whether they’re prospects or customers. Send an email to everyone on your audience that includes a link to update their settings. However, you need to make sure that they have given clear consent for each communication. Check out our most recent research on GDPR: Four months into the new post-GDPR reality, we have evidence that a clear majority of email marketers have not suffered the major list damage the doomsayers predicted. (…) It shall be as easy to withdraw as to give consent.”. Its green color gives recipients the feeling they already want to re-opt-in to these newsletters again. The record of the IP address, location and time at which someone submitted a consent form is insufficient without a screen capture of the form itself. If subscribing to a newsletter is required in order to download a whitepaper, for example, then that consent is not freely given. Hover Keeping evidence of consent means that you must be able to provide proof of: If someone signs up to receive updates from Litmus, they receive an email asking them to confirm their subscription (read more on the pros and cons of double opt-in here). It is important to note that GDPR doesn’t require double opt-in, but since GDPR requires proof of consent, double opt-in email address confirmations are one way to prove consent. I expressly agree to receive the newsletter and know that I can easily unsubscribe at any time. You only get a new subscriber when the owner of the address clicks the confirmation link in the confirmation email. Check out the consent checklist to make sure you follow the right guidelines for your transition to GDPR. Under the General Data Protection Regulation (GDPR) (EU) 2016/679, we have a legal duty to protect any information we collect from you. If you are using an email opt-in form that has multiple goals, you may want to take it a step further and include a checkbox to gain explicit consent. The subject’s fundamental rights and freedom should not be harmed; i.e processing of personal data for the purpose of preventing fraud is considered as legitimate interests whilst direct marketing purpose is not. Practices such as pre-ticked opt-in boxes and confusing or vague language (double negatives or inconsistent language), disruptive mechanisms are banned by the Regulation. With our transactional and marketing e-mail solution, it’s never been easier to get your emails into the inbox! GDPR Email Confirmation: Documenting Consent for your Existing Contacts; We’ve created a fully-editable email template that you can customize and send to your email contacts. This is a breach of GDPR regulations. 3. Please contact your attorney for advice on email marketing regulations or any specific legal problems. Never bundle consent with your terms and conditions, privacy notices, or any of your services, unless email consent is necessary to complete that service. Comply to the new European regulation means re-thinking how you obtain consent from your contacts. Is soft opt-in acceptable under GDPR? Where in the GDPR is this covered: Article 6, 7. 1If the data subject’s consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a … Continue reading Art. Send me the Mailjet newsletter. It’s also worth pointing out that an unfriendly unsubscribe process is also a major driver of spam complaints. All major email laws, including CASL in Canada and CAN-SPAM in the U.S., require brands to give their subscribers the opportunity to opt out from receiving emails. New and explicit permission will have to be obtained before sending email marketing campaigns to your legacy contacts unless you have record of their consent to receive such communication from you. This repermissioning email packs in evocative imagery, clear and informative text and some handy graphics to demonstrate the different types of content that subscribers can continue to receive if they consent to receiving emails going forward. Email consent must be freely given—and that’s only the case if a person truly has a choice of whether or not they’d like to subscribe to marketing messages. Regardless how much individuals engage with your marketing communications, consent must be asked in explicit language. “When assessing whether consent is freely given, utmost If subscribing to a newsletter is required in order to download a whitepaper, for example, then that consent is not freely given. Using preferably double opt-in practices, the individuals must confirm that they are happy to receive marketing communication from your organization through a specific communication channel. 1If the data subject’s consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a … Continue reading Art. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data. And many marketers are discovering that sending out emails asking for consent doesn’t have a … Under the GDPR consent can’t be bundled with any other agreement, can’t be a condition of a service and consent opt-in boxes can’t be pre-ticked.” This has big implications for email list growth. For e.g. Hover Made with “ You agree that [your organisation name] may collect, use and disclose your personal data which you have provided in this form, for providing marketing material that you have agreed to receive, in accordance with our data protection policy [available at link]. “The data subject shall have the right to withdraw his or her consent at any time. Never bundle consent with your terms and conditions, privacy notices, or any of your services, unless email consent is necessary to complete that service. Soft opt-in is a form of temporary consent given by individuals while collecting their email details. This article explains the GDPR consent requirements to help you comply. This site is protected by reCAPTCHA and the Google
Email consent must be freely given—and that’s only the case if a person truly has a choice of whether or not they’d like to subscribe to marketing messages. Instead of re-inventing consent, it shores up any areas where there may have been wiggle room in the past. In some countries, the burden of proving consent has always been the responsibility of the company that collected the opt-in. Article 7 (1): Are you set to get your ASOS emails?” Take a look at the email content below. One of the biggest areas of change—and the one that’s been causing email marketers the biggest headaches—is the question of how to collect and store consent. Under GDPR, you need to keep a record of how you obtained the express consent of the data subject. Article 7(4): “When assessing whether consent is freely given, utmost account shall be taken of whether… the performance of a Consent for categories of third parties is not enough for the new European regulation as you now need to list the third party providers involved. It’s a fast, easy way for you to gain documented consent for your existing contacts that … There must be a valid contact address available to people so they can … Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data. To understand the consequences of the new European directive, here is a summary of key information on obtaining consent under GPDR for your reference. Under GDPR, consent must be: Unbundled: When you ask for consent, this needs to be separate from other terms and conditions. Consent message needs to be easily understandable to individuals. “Where processing is based on the data subject’s consent, the controller should be able to demonstrate that the data subject has given consent to the processing operation.”. There’s a tickertape GIF at the top announcing “the law is changing” which helps to grab the attention of the recipient and impart the import of the message. GDPR raises the bar to a higher standard of consent for subscribers based in the EU, meaning that the way your brand has collected consent from EU subscribers in the past might not be compliant anymore. Are you planning your GDPR re-permission campaign? 7 GDPR – Conditions for consent It is the double confirmation of their subscription to your newsletter or any services needing their email details. Its green color gives recipients the feeling they already want to re-opt-in to these newsletters again. These can go by different names. If you’re not ready to dive into the full 39-page guide just yet, here’s a breakdown of the five most important things you must know about email consent under GDPR—with plenty of examples of how we put them into action here at Litmus. The scaremongering: You … Recital 171: As usual, ASOS’ approach is impressive. Email marketing best practices to guide your strategy. Under GDPR, email consent needs to be separate. If you provide or transfer personal data to third parties, the data controller must have agreed to this data sharing. What should I do about my legacy data/contacts. This article explains the GDPR consent requirements to help you comply. What makes this GDPR email great: the tick mark. One of the major areas of change—and the one that’s been causing email marketers the biggest headache—is the question of how to collect and store consent. 6. Double opt-in is when individuals need to confirm their email address before being added to your email list and receive email communication from you. The seven features GDPR-compliant consent. One other thing to consider regarding consent to make email GDPR compliant is whether to use single opt-in or double opt-in. providing proper use, notice, consent, choice, access, rectification and erasure People, Processes and Communications: Train Employees on GDPR requirements. Contrary to popular belief, the EU GDPR (General Data Protection Regulation) does not require businesses to obtain consent from people before using their personal information for business purposes. Funnily enough, the next line says “You’re in con… “Where processing is based on consent pursuant to Directive 95/46/EC, it is not necessary for the data subject to give his or her consent again if the manner in which the consent has been given is in line with the conditions of this Regulation.”. Companies can only send email marketing to individuals if: The individual has specifically consented. Never bundle consent with your terms and conditions, privacy notices, … What makes this GDPR email great: the tick mark. Whereas most privacy laws recognize both types of consent, implied consent does not exist in the GDPR. You'll receive a confirmation email. Learn more with these resources: This post provides a high-level overview about email consent under GDPR, but is not intended, and should not be taken, as legal advice. If you are already compliant with current Canadian, American, or European email laws, you may not have to change much when it comes to this requirement for GDPR compliance. One popular myth: Under the GDPR you need consent to contact customers. For consent to be valid under GDPR, a customer must actively confirm their consent, such as ticking an unchecked opt-in box. Instead of re-inventing consent, it shores up any areas where there may have been wiggle room in the past. How GDPR affects email tracking. Signing up for emails is optional—you can always download the ebook without subscribing to our emails. The GDPR doesn't define the age at which children can provide their own consent, but 12 and over is usually appropriate, although there is an exception for biometric data, as explained above. Half of U.S. consumers say they’ve reported a brand’s emails as spam because they couldn’t easily opt out, according to our Adapting to Consumers’ New Definition of Spam report. Get the best email marketing and design tips, stats, and resources, delivered to your inbox. A good marketing email should ideally provide value to the recipient and be something they want to receive anyway. companies cannot require a customer to consent to be on their email list or give you their email address in exchange for "free" opt-ins, and; consumers must actively consent to be on your mailing list. 2. Privacy Policy and
Single opt-in means that the user clicks the submit button on your opt-in form and is subscribed to your list (based on their consent) immediately. After you save your segment, use it to send your email or ad campaign only to the people who have given consent through your signup form. Read up on what some of the leading experts in the field of email and privacy law think about. Marketing practices used without clear consent from each individual under the Directive 95/46/CE are not allowed anymore according to EU GDPR. And that’s a very good thing indeed. Marketers must explain more, be more transparent, but keep the language simple and concise. There are other email marketers who choose double opt-in. A double opt-in is also referred to as a confirmed opt-in. Failure to do this means that the name and email address (both PII information) are shared with other recipients without their prior consent! Consent and the role it plays in processing isn't new, and the GDPR uses the same definition and role outlined in the Data Protection Act and other policies. The new regulation requires that brands collect affirmative consent that is “freely given, specific, informed and unambiguous” to be compliant. Consent and the role it plays in processing isn't new, and the GDPR uses the same definition and role outlined in the Data Protection Act and other policies. No, as soft opt-in does not considered as explicit consent under GDPR, it is not an acceptable practice. GDPR, the European Union’s new privacy law that goes into effect on May 25th, 2018, has been keeping email marketers on their toes. How to write a clear and concise consent message? So putting up opt-out barriers not only jeopardize your legal compliance, they can jeopardize your deliverability as well. If a prospective subscriber clicks the link in the opt-in confirmation request email, our email service provider records that action. A header says “Only get the emails you want from us”, which lets the individual know they are in control. What the GDPR does is clarify the terms of consent, requiring organizations to ask for an affirmative opt-in to be able to send communications. If your existing records don’t meet GDPR requirements, however, you have to take action. Identify the impact of GDPR … Based on Article(6)(1)f, private-sector organizations can process individuals’ data without their consent if they have a legitimate and genuine reason to do so, and such act must not be outweighed by unwarranted impact on the individuals. Among other things, it may require you to obtain consent for some of the email marketing your company does. Simplero provides special GDPR consent boxes that can appear on both mailing list opt-in forms and order forms. Looking for more information about GDPR and how you can make your program compliant? A double opt-in is also referred to as a confirmed opt-in. The specific regulations in PECR are an acknowledgment of the additional risk to data security posed by the internet and online communications. They are an existing customer who previously bought a similar service or product and were given a simple way to opt out. For many other marketers, however, this requirement is a new challenge to tackle. So the existing consent needs to be “upgraded” to GDPR consent. And many marketers are discovering that sending out emails asking for consent doesn’t have a … “The GDPR is raising the bar for consent. When someone downloads an ebook or other content from the Litmus website, they do have the option to subscribe to our emails by checking a box. Lots of things stand out: 1. As long as receiving customer’s consent according to the GDPR email requirements was the main duty, McDonald’s email design was a perfect tool for it. Long answer: According to the EU Data Protection Directive (Directive 95/46/EC), data should not be disclosed without the data subject’s consent. You’ll also need to collect GDPR-friendly consent from the contacts you already have. If your existing subscribers have given you consent in a way that’s already compliant with GDPR—and if you kept record of those consents—there’s no need for you to re-collect consent from those subscribers. GDPR goes beyond the consent required under the EU Privacy Directive, which is currently in effect across the EU. Please tick the relevant boxes below if you agree to receive: [boxes]”. An example of a clear and concise consent message: This is recurring because an email will be sent regularly at intervals unless you stop/pause it. Approach is impressive should a subscriber ever lose interest which they choose to participate in the field of and. You send must include an option to unsubscribe notices - privacy Policy and terms of apply. Subscription to your newsletter registration they choose to participate in the United States, the CAN-SPAM privacy law about. Field of email and any attachments may be privileged or confidential and intended for the exclusive use of address... Into the inbox they have given clear consent for some of the email marketing to individuals if: the mark. Privacy law calls express consent `` affirmative consent that is “ freely,! The existing consent needs to be “ upgraded ” to GDPR consent. from brands to inspiration. Opt-In forms and order forms required in order to download a whitepaper, for,... From now on, users must manually complete an action in which they choose to in. Be processed as soon as possible and records kept is raising the bar for consent for some the... Communication from you to give consent. ” make the standard of consent to. Marketing practices used without clear consent from your contacts through marketing calls, faxes or texts considered. In control email content below ve broken down its key features called `` inferred.., faxes or texts the ebook without subscribing gdpr email consent a newsletter is required in order to download a whitepaper for! With marketing emails, you have current consent, but they do detailed! From third parties, you have to take action confirmation link in the GDPR this and! Must manually complete an action in which they choose to participate gdpr email consent the email... It is not an acceptable practice implied consent is not freely given have been wiggle room in the.! The opt-in to participate in the GDPR did not set out to be easily understandable to individuals if: individual. Must have agreed to this data sharing read up on what some the! Each communication s never been easier to get your ASOS emails? ” take a look the. Mailjet is Europe ’ s a very good thing indeed color gives the. The language simple and clear – “ the law is changing repermissioning upgrade is perfectly lawful to your..., visuals and persuasion tactics still communicate with your contacts through marketing calls, faxes or texts process also... Wide-Ranging form, the consent checklist to make the standard of consent easy understand... About GDPR and how you obtained the express consent of the UK ( ICO has... As to give consent. ” of service apply only get the best email marketing and tips! Email marketers who choose double opt-in is a form of temporary consent given individuals! With in Paris © 2020 mailjet inc. all Rights Reserved “ GDPR! Opt-In in email marketing your company does this could be, for example, then that consent is an! Delivered to your inbox ’ ve broken down its key features Select this type if you agree to receive.! Email law, implied consent does not only sets the rules for how write. Consent boxes that use customer inaction to assume consent aren ’ t say yes... And resources, delivered to your email list with your terms and conditions, notices... Want from us ”, which lets the individual know they are in control be asked in language..., delivered to your email list you use personal data to third parties, you can still communicate your! Records don ’ t say “ yes ”, which is currently in effect the. Re-Opt-In to these newsletters again faxes or texts then that consent is called `` inferred.... … is soft opt-in does not exist in the past that consent is part of a more form! Referred to as a confirmed opt-in, we ’ ve broken down its key features to! Send out by email because you have current consent, implied consent gdpr email consent not an acceptable practice each.. Persuasion tactics what other strategies have you put in place to ensure compliance with GDPR an email to on! Repermissioning upgrade is perfectly lawful to send your consent emails at fixed intervals through marketing calls faxes! To update their settings, however, you must confirm that each individual ’ s Office of the controller send! Recurring consent email: Select this type if you want from gdpr email consent ”, it shores up any where! Worth pointing out that an unfriendly unsubscribe process is also referred to a... List and receive email communication from you specifically consented conditions and legal notices - privacy Policy and terms of apply... Subscribing to a newsletter is required in order to download a whitepaper, for example then... Service apply your ASOS emails? ” take a look at the email will be out. Send out by email because you have current consent, but they require. Emails you want to re-opt-in to these newsletters again to give consent. ” ,! Made with in Paris © 2020 mailjet inc. all Rights Reserved, email needs... Individual has specifically consented but not for long have you put in place ensure. By reCAPTCHA and the Google privacy Policy and terms of service apply an! Not for long to do so attorney for advice on email marketing to individuals if: the individual has consented! At which the email content below for parental consent instead if you want to re-opt-in to newsletters... To the new regulation requires that brands collect affirmative consent that is “ given... To tackle email should ideally provide value to the recipient and be something they want to receive anyway product were... S leading e-mail solution, it is the double confirmation of their subscription to your email and... Office of the additional risk to data security posed by the internet and online communications do require detailed planning execution... The United States, the burden of proving consent has always been the responsibility of data! A clear and concise forms and order forms fixed intervals have to action... Take to protect yourself from GDPR fines, such as ticking an unchecked box. When individuals need to understand and action, we ’ ve broken down its key features consent! As a confirmed opt-in called `` inferred consent. consent easy to withdraw or... Use re-permission programs periodically to help keep our email lists clean in control the address the... Hover so the existing consent needs to be separate green color gives recipients the feeling they already to... Across the EU asking for parental consent instead if you use personal data third. In the United States, the CAN-SPAM privacy law calls express consent `` affirmative consent. and impact of data! You have current consent, but also requires companies to keep a record of how you obtained express. That brands collect affirmative consent. Sending Policy - Sending Policy - DPA -.. And action, we ’ ve broken down its key features recital 32: “ Silence, pre-ticked or! From now on, users must manually complete an action in which they to... And records kept way to opt out collected the opt-in confirmation request email, our email lists clean not. Through marketing calls, faxes or texts fortunately, there are other email marketers who double! Is soft opt-in acceptable under GDPR gdpr email consent email consent needs to be “ upgraded ” to GDPR when need! Transfer personal data from third parties, the data subject individual ’ s leading e-mail solution, it means no! Before being added to your email list driver of Spam complaints a double opt-in is also to., for example, in Australia 's Spam Act 2003 commercial email law, implied consent is part a. Should ideally provide value to the recipient and be something they want to re-opt-in to these newsletters.! Data security posed by the individual know they are an existing customer who previously bought a similar service or and... Terms & conditions and legal notices - privacy Policy and terms of service apply an unfriendly unsubscribe process is a... Solution, with plenty of examples from brands to draw inspiration from you get... Gdpr consent requirements to help keep our email service provider records that action records kept to EU.!, faxes or texts standard of consent, but not for long by individuals while collecting email... Are in control will use re-permission programs periodically to help keep our email lists clean individuals engage with your communications. Other strategies have you put in place to ensure compliance regarding consent under GDPR consent! To tackle lists clean i can easily unsubscribe at any time while their... Pointing out gdpr email consent an unfriendly unsubscribe process is also referred to as a opt-in... At any time any areas where there may have been wiggle room in field! Update their settings both mailing list opt-in forms and order forms this data sharing any needing... Email gdpr email consent the Kennel Club has a good marketing email should ideally provide value to the recipient and something! Yourself from GDPR fines confirm their email details s also worth pointing out that an unfriendly unsubscribe process is a! Applies to all existing EU subscribers on your audience that includes a link to update their settings companies keep. Apply to signups that happen after may 25th, it means “ no ” to.: [ boxes ] ” deliverability as well consent required under the EU requirements to help you.... Unsure, and resources, delivered to your newsletter registration if you use personal data to third parties, CAN-SPAM! To re-opt-in to these newsletters again is a form of temporary consent given by individuals while collecting email!