RPA-006 — Email Marketing Campaigns

Sending promotional emails, newsletters, and targeted marketing communications to opted-in customers.

Data Details

Data Subjects

Data Volume

25,000 - 75,000 subscribers

Data Categories

Processing Type

Analysis

Automated Decision-Making

Yes

Legal Basis

Consent

Consent Mechanism

Double opt-in email confirmation

Purpose

Promoting products and services to consenting customers and maintaining brand engagement.

Legal Basis Detail

Explicit opt-in consent obtained during registration or campaign sign-up.

Recipients & Transfers

Cross-Border

Internal Recipients

External Recipients

Transfer Countries

Transfer Safeguards

Data Processing Agreement with Mailchimp/Intuit. SCCs in place.

Retention & Security

Retention Period

3 years or until consent withdrawal

Retention Justification

—

Security Measures

PDPL Compliance Assessment

Update →

D1 Data Subject Rights & Consent

95%

Compliant

All requirements for Data Subject Rights & Consent are met. Documentation is complete and up to date.

D2 Processing Principles & Lawful Basis

88%

Compliant

All requirements for Processing Principles & Lawful Basis are met. Documentation is complete and up to date.

D3 Data Protection & Security

80%

Compliant

All requirements for Data Protection & Security are met. Documentation is complete and up to date.

D4 Organizational Requirements & Governance

72%

Partial

Most requirements for Organizational Requirements & Governance are addressed. Some gaps identified in documentation or p…

D5 Cross-Border Data Transfer

60%

Partial

Most requirements for Cross-Border Data Transfer are addressed. Some gaps identified in documentation or process.

D6 Compliance & Accountability

85%

Compliant

All requirements for Compliance & Accountability are met. Documentation is complete and up to date.

Associated Risks

1

Medium Cross-border transfer to US without adequate safeguards review… Mitigated