What is GDPR?
EU General Data Protection Regulation (GDPR) is the new data safety regulations that came into effect on May 25, 2018. This new set of regulations directly affects all organizations processing and storing EU Personal Data regardless of the organization's location. The new regulation is aimed to protect any personal data that an organization holds to assure data is being appropriately managed.
Is Nimble GDPR compliant?
Yes! Nimble is compliant with GDPR. As our customer, you can continue using Nimble without GDPR concerns (as it pertains to Nimble, as a tool).
Our customers can do the following:
Access their data anytime by logging into their account
Update and/or delete their data anytime by logging into their account
Our data storage approach complies with GDPR requirements. We use Azure servers for our data storage.
Does GDPR apply to me?
If you are doing business with an EU citizen you must comply with GDPR.
What is Nimble's role? What's my role?
Nimble is the Processor of the personal data you maintain within our system. We store and process the data for you per the actions you take within our app.
A list of our sub-processors can be found at the bottom of our Data Processing Addendum here.
You are the Controller as you control and manage the data that you have entered into Nimble. As the controller, you determine how the data is used, how long to keep the data, how often to update it and so on.
What can I use to inform my customers?
Although Nimble is not intended to be the "main" tool to manage "unsubscribes" and/or "consents" for your contacts, we have enhanced our Group Messaging functionality to provide the ability to include an unsubscribe link within a group message / template that will append that recipient's record with a tag or custom field indicating that action.
However, we advise that you use your email marketing utility, such as MailChimp, Constant Contact, etc., to collect active consent from contacts, as these tools are better suited for this purpose.
Learn how to collect consent using MailChimp
You may also download the PDF version of the Data Processing Addendum
Here are a few helpful links to articles regarding GDPR: