Skip to content
Legal

GDPR

The General Data Protection Regulation is a landmark privacy set of rules in force in the European Union since 2018. We’re here to help you comply with the GDPR through our robust privacy and security failsafes.

Please note: this page explains the impact of GDPR on the use of Overloop only and isn’t applicable for any other aspects of your business. It should not be considered as legal advice.

UE icon
judge's scale
eye

GDPR

The General Data Protection Regulation is a landmark privacy set of rules in force in the European Union since 2018. We’re here to help you comply with the GDPR through our robust privacy and security failsafes.

What is the GDPR?

The General Data Protection Regulation (GDPR) is a regulation by which the European Parliament, the Council of the European Union, and the European Commission intend to improve data protection for all individuals within the European Union (EU).

The GDPR replaces the 1995 Data Protection Directive. It is the new Europe-wide set of rules governing the use and handling of individuals’ personal data. You can read the full regulation here.

It has 3 goals:

  • Standardizing European data protection regulations;
  • Giving citizens control over how their personal data is used;
  • Making sure that companies are aware of their responsibilities regarding personal data.

Overloop maintains technical and organisational measures designed to support customers with GDPR obligations. Each controller’s compliance depends on its data sources, lawful basis, configuration, and use.

Does the GDPR apply to you?

The GDPR’s territorial scope is based on the criteria in Article 3, not on a person’s citizenship. It generally applies to processing carried out in the context of the activities of an establishment in the European Union.

It can also apply to an organization outside the European Union when it offers goods or services to people in the Union or monitors their behavior there. Applicability depends on the circumstances and the processing activity. This is general information, not legal advice.

How does the GDPR affect privacy law?

One of the main goals of the GDPR is to extend the rights of European residents in regards to the handling of their personal data. This can be summarized as follows:

  • More access and control over the storage and processing of personal data for consumers;
  • A tighter definition of consent and personal data;
  • More transparency regarding the use of their personal data once it has been collected.

The GDPR has also created new rights of access and data protection for “data subjects”:

  • Right to rectification: The data subject may request that their personal data be updated or corrected;
  • Right to be forgotten: The data subject may request that their personal data be permanently deleted;
  • Right to portability: The data subject may request that their personal data be sent to another organization or competitor;
  • Right to object: The data subject may object to specific types of processing or uses of their personal data;
  • Right of access: The data subject has the right to be informed of any and all of their personal data that has been collected, as well as its intended use.
Where can I learn more about the GDPR?

Everything you might want to know about GDPR is available on the EU GDPR Information Portal.

How can I sign your DPA?

We have added a Data Processing Agreement (DPA) to our Terms of Use. You can download the last version of our DPA here.

Please review, countersign, and return it to us.

Does GDPR affect cold emailing?

Cold email is not lawful merely because its content may be useful. Before sending, identify and document an applicable lawful basis; ensure contact data was collected and shared lawfully; provide the required information no later than the first contact; honour objections and opt-outs; and comply with the ePrivacy Directive and applicable national marketing rules. The assessment depends on context and is not legal advice. See European Commission guidance.

The topic of the email must be clearly identified
There must be a clear way to opt out from future emails
A genuine physical address must be included in the email
The sender must be clearly identified

How did we get ready for the GDPR?

At Overloop, trust is our #1 value and nothing is more important than the success of our customers and the protection of their data.

Familiarize ourselves with the regulation and attend legal training sessions
The whole team has attended a training session regarding GDPR.
Nominate a Data Protection Officer
We have nominated our Founder & CEO: Vincenzo Ruggiero.
Adapt our Terms of Use and Privacy Policy
We have updated our terms and conditions in order to ensure GDPR compliance.
Review our app and identify the functionalities that need to be included, adapted or removed
We worked on Overloop to make it GDPR-friendly (e.g. better export of data, exclusion lists with minimum amount of data, …)
Review all suppliers and ensure their compliance with GDPR
We contacted all our suppliers who process personal data on our behalf in order to ensure they are GDPR compliant.

How can you comply with the GDPR?

As an Overloop customer, there are a few things you should do. Consider these tips:

Learn how to rectify and delete your contacts’ information
The right to access, modify and delete data is one of the key points of the GDPR. Find out how to delete contacts or modify their information.
Delete the contacts and lists you no longer need
Another main objective of the GDPR is to minimize the risks of data breaches or leaks and prevent the misuse of European residents’ personal data.This is why it is better to delete all of your contacts who are inactive or those who have unsubscribed from your communications already. If you are not using this information, then it is more advisable to discard it altogether.
Consult with your legal counsel
The information on this page is designed to help you prepare for the GDPR in the context of our services and should not be taken as legal advice. Additionally, there may be parts of the legislation that affect other aspects of your business as well.We recommend you seek qualified legal counsel to determine what compliance measures you need to carry out to meet the GDPR obligations that apply to your situation.

Have further questions about GDPR?

Contact Us
Open chat