8 ARTICLES · GDPR, privacy & security
GDPR and recipient permissions
Step-by-step guides and clear answers for the details that matter.
- GDPR and Elite Mail Suite
Elite provides permission, suppression, recipient-rights, and retention controls that support your compliance work. Review the DPA and policies; your use case still needs an appropriate purpose, notice, and lawful basis.
2 min read - Using Elite under your country's privacy rules
Applicable requirements depend on your audience, location, purpose, and data processing. The product's technical controls do not establish blanket compliance with every country's rules; review the current policies and your own obligations.
2 min read - Your role as a data controller
The sender/customer generally decides why recipients are contacted and tracked. Document that purpose, choose the lawful basis, provide the required notice, and handle rights requests; Elite does not make those decisions for you.
2 min read - Recipient data: purpose, permission, and deletion
Maintain the appropriate permission/evidence reference, honor withdrawals, and use verified rights and retention controls. A contact record or email open is not itself proof of consent.
2 min read - Handle a recipient's data deletion request
Identify and verify the recipient's request through the privacy process, review your controller responsibilities and retention duties, and communicate the result accurately. Suppression and permanent deletion serve different purposes.
2 min read - Manage tracking consent status
Use the recipient permission register and contact suppression controls for the relevant account/team. Strict consent mode requires active permission for every recipient before creating a tracker.
2 min read - Ask a recipient for tracking permission
Use a clear, appropriate consent channel and record the resulting evidence reference. An open or click on a normal email must not be treated as explicit consent; no new tracker is allowed by Strict consent without active permission.
2 min read - Unsubscribe links and consent withdrawal
Provide the opt-out path appropriate to the message, record withdrawn permission, and keep the contact out of ineligible outreach. A commercial unsubscribe and tracking permission may need separate records.
2 min read
