Commercial call to validate email and Opt-in (GDPR)

[ALalut]

Hi all,

One of my client wants me to add a call task for the owner of a contact if the contact has still not clicked on the GDPR CTA after every planned email in my GDPR workflow.
The goal of this call for the sale is to validate the email adress and the contact agreement to marketing emails.

I'm not so much knowledgable in GDPR but i doubt a "yes" by phone is legit for the sale to manually set the Opt-in.

Can anyone enlight me on this topic ?

Thanks in advance and bonne journée

[ALalut]

Thank you for your answer !

[karstenkoehler · Accepted solution]

Hi @ALalut,

Happy to help here. Please keep in mind my reply does not constitute legal advice.

First of all, there is no such thing as a GDPR CTA. Contacts can confirm their email address, contacts can consent into receiving marketing emails, contacts can consent into their data being processed according to the privacy policy of the company. But typically, there isn't a does-it-all GDPR CTA.

Whether a sales person can call a contact and document these three points mentioned above is a question that only your legal team or an internal or external data privacy consultant can decide. Typically, yes, phone calls are treated differently and typically, if the sales rep follows an exact script and documents their call outcome, most data privacy officers would say that this would be GDPR compliant.

The details, as mentioned above, should be confirmed by a legal professional (exact script, exact requirements for documentation).

Let me know if you have any follow-up questions!