FAQs on GDPR

Is contact syncing with Autocapture GDPR compliant?

We understand that the idea of bringing contacts into Salesforce based off of who your reps are meeting with can be concerning those who need to maintain GDPR compliance.

A pre-existing business relationship is one of the main criteria of GDPR. So, one of the more conservative ways to ensure that there is a pre-existing business relationship is to only leverage meetings that reps are having with prospects to generate contacts. If they're not meeting with a contact (i.e. if the contact is only found on outbound or even inbound emails), Autocapture won't generate contacts from other types of activities. If there are meeting activities with a contact, we define that as a pre-existing business relationship, and Autocapture adds that contact to Salesforce

Additionally, if you want Autocapture to sync contacts from email activities too, then Autocapture can be set to only sync contacts from inbound email activities. So, a contact would have to respond to an email in order for Autocapture to leverage their information to create a contact.

There is a chance that the inbound email response is something like, "please take me off your mailing list." If this is the case, then you can remove the contact from Salesforce, and Autocapture will never rewrite the same contact again. Once Autocapture processes and syncs a contact to Salesforce, they will never be added again by Autocapture — even if you remove the contact from Salesforce.

 

How can we keep contacts from syncing to marketing lists until we're sure there's a pre-existing business relationship?

In Salesforce, you have the ability to opt contacts out of marketing data until further confirmation of a pre-existing business relationship occurs, and we recommend that you do this if reaching out to contacts with marketing campaigns "too soon" is a concern. You can set up rules in Salesforce so that when a contact is added by Autocapture, that contact is opted out of marketing temporarily.


Alternatively, you can set up rules to include/exclude contacts created by Autocapture from marketing lists based off of the country of origin. With Clearbit for Clari's contact enrichment, you can leverage location data. So, based off of the location of the contacts (i.e. if they're located in specific countries) you can set Salesforce to automatically opt them out of marketing lists. 

 

Is Clari's activity logging (i.e. Insights Panel) compliant with the worker's council?

By default, Clari only captures the metadata for activities (i.e. the body of an email is not captured or displayed). Additionally, users have the right to opt out of email, meeting, and file activity by controlling Show/Hide My Activity at the individual user level.

Is Clari GDPR compliant/how does Clari enforce GDPR?

Clari has been deemed GDPR compliant by. a 3rd party assessment, which your Clari AM or CSM would be happy to share with you. For Clari customers, GDPR is enforced by a standard Data Processing Addendum (DPA) between Clari and the customer — this DPA also enforces our compliance with California's Consumer Privacy Act (CPA).