GDPR Compliance

As per our GDPR FAQ article Permutive is considered a processor in the context of the GDPR regulations, the publisher is the controller.

GDPR Right of Erasure requests

Catalog your list of users that need their data erased by the user ID in a list or spreadsheet and email it to datarequest@permutive.com. The user ids can be either permutive user ids or aliases. We will respond via email specifying the date the request will be actioned, that is 21 days from the date we received the email. Specifically, that means that if we receive the request on a Wednesday the 5th of the month we will process it by the end of Wednesday the 26th of that month.

We will send the confirmation email when the request is successfully processed.

For efficiency, we might batch the erasure requests that come between the request and the processing date. If the first request came on the 5th and then there are further requests before 26th (when the batch is due) we will process them together. Any request that comes after that date would start a new batch that will be processed in 21 days. We will send an email confirmation for each request received separately.

GDPR Right of Access requests

Catalog your list of SAR users by the user ID in a list or spreadsheet and email it to datarequest@permutive.com. The user ids can be either permutive user ids or aliases. We will action this within 21 days of receipt and confirm when the request is complete.