Right to Restriction of Processing

The Data Subject shall have the right to obtain from the controller restriction of processing (art. 18) where the accuracy of the personal data is contested, the processing is unlawful, or the Data Controller no longer needs personal data for the purposes of the processing.


The right in the Contactlab Marketing Cloud

When the Data Subject exercises the right to restriction of processing, data is not deleted but its use is limited.
The request can be completed by carrying out a normal profile update using the API , or manually in the UI.

If the Hub UI is used, the appropriately authorized platform users should do the following:

  1. Sign in to Hub, click Customers, followed by the appropriate Data Subject profile.
    The Customer details page displays.
  2. Click the Edit icon  , positioned under the contact name.
  3. Select the Consent tab, and make the changes according to the Data Subject’s request.

  1. When you are finished, click Save, followed by the X icon, positioned in the top right-hand corner of the page.
    You are returned to the Customer details page. Click the Consents tab to view the consent changes.

What happens in the platform when the Data Subject exercises the right?

The changes made to a profile are propagated throughout all platform modules in real-time.
An event is automatically generated each time a consent is modified, enabling all consent changes to be tracked in the Registry timeline. These events are stored for the entire duration of the contract between Contactlab and the Data Controller.

The details for each module are as follows:

In SendPlan or Flow:

  • Depending on the module, the Data Controller must check the deliveries, plans or automations that include the Data Subject, and decide whether to remove them or not.

In Data:

  • If the Data Subject exercises the right to restriction of processing, the Data Subject’s data is not propagated to Data, and no KPIs are produced.

In One:

  • If the Data Subject exercises the right to restriction of email or Instant Messaging marketing, the Data Subject is flagged as not contactable by the Sales Associate.