GDPR Compliance

As per our GDPR FAQ article Permutive is considered a processor in the context of the GDPR regulations, the publisher is the controller.

GDPR Right of Erasure requests

Catalog your list of users that need their data erased by the user ID in a list or spreadsheet and email it to datarequest@permutive.com. The user ids can be either permutive user ids or aliases.  Please let us know what identifier you are sending in the email. We will respond specifying the date the request will be actioned, that is 14 days maximum from the date we received the email.  Specifically, that means that if we receive a request on the 1st of a month, we will process it by the end of 15th of that same month.

We will send the confirmation email when the request is successfully processed.

For efficiency, we might batch the erasure requests that come between the request and the processing date. If the first request came on the 1st and then there are further requests before 15th (when the batch is due) we will process them together.  Any request that comes after that date would start a new batch that will be processed, latest, 14 days later. 

We will send an email confirmation for each request received separately.

GDPR Right of Access requests

Catalog your list of SAR users by user ID in a list or spreadsheet and email it to datarequest@permutive.com. 

The user id(s) can be either permutive ids or aliases.  Please specify which type of alias is being sent in the request.  We will action this within 14 days of receipt and confirm when the request is complete.