How will Remind1 help me be GDPR compliant?
Do I need to obtain explicit consent from my clients to send appointment reminders?
When sending text messages to clients, a distinction must first be made between transactional and marketing messages. Appointment reminders are transactional messages, because they are directly related to an order (or appointment). It is therefore your legitimate interest to send these messages in this context and you do not need the explicit consent of your clients.
Important: Depending on the industry, it is recommended to inform your clients in advance and/or ask for permission.
We use the following service provider to send appointment reminder messages:
To send the text message reminders, the service provider needs your mobile number. The data collected is used exclusively for the provision of the service (appointment reminders). The service provider will only process and use this data to the extent necessary to provide the service you have requested. The data will be transmitted to the service provider in encrypted form and deleted from the online servers after processing.
Is Remind1 GDPR compliant?
Remind1 is fully committed to compliance with the General Data Protection Regulation (GDPR). We understand the importance of incorporating standards put forth by GDPR into our data practices and making sure our customers, whether citizens of the EU or businesses that use Remind1 with European clients, feel secure and confident to continue using Remind1.
However, since GDPR is a new and broad regulation with no certification process, we have no process of verifying our compliance. Nonetheless, through our good-faith efforts, we believe we are in compliance, both now and as future developments come along.
Does Remind1 have a Data Processing Addendum (DPA)?
Can I get a signed version of Remind1’s Data Processing Addendum (DPA)?
As a Remind1 user, how should I think about Remind1 with respect to the GDPR?
As a Remind1 user (i.e., someone who has signed up for a Remind1 account), Remind1 is a processor of your clients’ data. In technical terms, you are the controller. When a client schedules an appointment with you, you retain ownership and responsibility of that data.
How does Remind1 help you uphold the data rights of your invitees?
The right to be informed
The right of access
If requested by an EU citizen, you have an obligation as a data controller under GDPR to inform your client (often referred to as "data subjects") what personal data is being held and for what purposes. For requests by your clients regarding the access of personal data you may contact us at [email protected].
The right to rectification ('right to correction')
If a client contacts you regarding an inaccuracy in their mobile number for an upcoming event, you can delete the calendar event and create a new one with the correct number or correct your contact data.
The right of erasure (the 'right to be forgotten')
Please notify us if you have been contacted by one of your clients with a deletion request. Unless we have reasonable grounds to refuse the erasure, we will work to remove the personal data in question securely. We will also communicate the erasure to our third-party subprocessors.
The right to restrict processing
If a client doesn't want you to process personal data, you can simply choose not to send reminders with Remind1 to this client.
The right to data portability
Please notify us if you have been contacted by one of your clients with a data portability request and we will help you to fulfill this request.
The right to object
For Remind1 clients (who are not also Remind1 users), please be assured that we do not use the mobile number that they provide when scheduling an appointment for any marketing or promotional purposes.
Automated decision-making and profiling
Remind1 does not make decisions that have a legal (or similar effect) on you or your clients via automatic processing.
This document is for informational purposes only and does not constitute legal advice. Remind1 users should always seek legal advice before taking any action with respect to these matters.