Text for in a privacy statement

Transparency regarding the processing of personal data is one of the key elements of the GDPR. This transparency can be provided by drawing up a privacy statement.

The statement must be written in clear, understandable language, and the GDPR requires that it contains at least the following: identity of the organisation, legal grounds for processing personal data, purpose of processing, duration of storage, right to access/correct/erase personal data, rights regarding complaints.

What can I include about sending newsletters?

Your privacy statement must include information about all ways in which you process personal data, including the collection of data for newsletters. Below is an example.

Newsletters

Through our website you can sign up for our newsletter. The personal data you provide (email address and any other fields) will be used by us exclusively to send you our newsletters. This data is never provided to third parties.

If you receive a newsletter, our newsletter program may record when it is opened, and which links, if any, are clicked.

Viewing, modifying or deleting details

There is a link under each newsletter that allows you to unsubscribe immediately. You will then no longer receive newsletters. Each newsletter also contains a link with which you can change your details.

When unsubscribing, your data might not be permanently deleted yet. If you would like to see this happen, you can request us to do this.