How does tracking individual user behaviour affect GDPR?
Most web analytics are anonymous and aggregated. But tracking a user's actions in HubSpot allows you to build up a history of pages viewed, buttons clicked etc for a named individual (as soon as they fill in any form).
Is it recommended to highlight this in privacy policies?
Has anyone got experience or advice whether this is considered by consumers as more permission than simple anonymous/aggregated analytics? If yes it would imply a separate opt-in.
Can action/interaction data be provided easily to individuals on request (as is now their legal right)?