Рекомендация: Run a quick baseline audit of data flows, then disable hotjar-basierte tracking on non-critical pages to protect end-users. Implement a calendar-driven rollout in four 14-day sprints and publish a concise datum of changes for all stakeholders.
Key changes for transparency: The policy expands consent prompts, tightens data minimization, and updates contractual terms with anbieter. Data relating to end-users, userscustomers, and performance now travels only to approved endpoints; an 18% decrease in third-party data transfers is expected in the first quarter. The update introduces prüfung checkpoints and requires the datum of approvals. Hotjar-basierte tracking is limited to explicit consent contexts, and all relating data is reviewed in the calendar milestones.
Implementation tips: Align with a four-stage deployment, verify privacy settings in staging, and monitor site performance. For each anträge submitted, require a privacy impact assessment and a prüfung label; ensure the datum of approval is recorded in your change log; coordinate with the Anbieter to update data sharing agreements; track progress in the calendar and report learnings to the team.
Impact on end-users and providers: End-users gain clearer control with page-level consent options; dritte-party providers (dritte) must align to the new data handling terms. All data relating to learning (learn) and operations is restricted to approved purposes; wurden logs show reduced data exposure. Regular reviews track performance and compliance against the calendar milestones.
Следующие шаги: Review the full policy, confirm the datum of changes on your teams’ dashboards, and submit any anträge for data processing with the new requirements. This v4 update aims to improve performance and transparency for end-users while staying clear for userscustomers and durch Anbieter partners.
What's new in Privacy Policy v4: Updated practices at a glance
Enable the new visitor controls today to deactivate data processing for selected interactions and avoid unnecessary disclosure. Review the updated data categories and decide which datum you want to preserve for quality service while keeping identifiable data protected.
Key updates at a glance
- Which interactions are processed and for which purpose, with clear labels tying datum types to each processing stream.
- Disclose and vergleichen: the policy shows which data is disclosed to partners and lets visitors vergleichen privacy settings across devices and channels.
- proteção standards: encrypted storage, secure transmission, and quick alerts for suspected breaches (proteção).
- ausüben audits: teams ausüben quarterly checks to verify processing aligns with authorized purposes and limits data access to approved staff.
- Visitor data management: visitors can view and manage their data, including identifiable information, with clear prompts to limit exposure.
- Deactivate controls and access: visitors can deactivate data collection for selected interactions; authorized personnel require two-factor verification to access datum.
- brazil compliance: Brazil-specific obligations include local storage requirements and consent workflows.
- e-mails and verkauf: marketing emails now require explicit opt-in; visitors can easily opt out, and records of consent are maintained.
- Fragen handling: respond to fragen with direct links to the privacy page and options to export related datum.
- Anwendungsfehlern handling: detect and fix anwendungsfehlern in data collection within 48 hours, with a dedicated remediation playbook and ongoing quality checks.
- Controls and deletion: a unified controls dashboard enables requests to remove or anonymize datum and to set retention limits.
Practical steps for visitors and staff
- Visitors review profile settings, deactivate processing for noncritical interactions, and update consent preferences using the new controls.
- Staff perform quarterly reviews to verify which datum is processed for each purpose and to compare settings across platforms (vergleichen).
- If data is identifiable, request disclosure of which categories are stored and how they are used, with options for data export.
- If questions arise, respond promptly with clear links to the privacy page and contact options via e-mails.
How to request your data: a clear, repeatable process
Submit your request via the secure data access form in your account. Select Data access, then specify your country, the customers involved, and a concise description of the records you want. The information you provided during signup helps us locate the relevant files quickly, reducing back-and-forth. If you have multiple customers, list their IDs to simplify handling. For anderen markets, we adapt steps to local regulations.
We follow a repeatable workflow to keep responses predictable: identity verification using legitimate methods; data discovery across the providers you designated; redaction of sensitive items in line with übereinstimmung and abschnitt 3; and final delivery in a machine-readable format. You can choose export formats oder JSON, CSV, or a structured PDF, and we may provide a calendar-ready delivery schedule.
Step-by-step flow
Verification: we confirm identity using approved methods, with no guesswork. Discovery: we search the data sources assigned to your account, including transactional records (verkauf) and communications from the provided data. Redaction: we apply limited masking to non-essential fields to protect privacy, following our policies and betriebliche controls. Delivery: you erhalten a secure download link and a confirmation email; status is recorded on the floor for accountability, having a clear trail for kunden across regions.
Delivery, timelines and compliance
Timeline: we aim to deliver most requests within thirty days of receipt. Without delaying, in complex cases, we may extend up to thirty additional days, and we provide periodic updates. Data is shared only with authorized providers and limited to the provided scope; it is not used for marketingzwecke unless you opt in. All handling follows country-specific rules and the relevant abschnitt of our policy, with a transparent log kept for auditing and accountability.
How to access your data anytime: self-serve portal features
Sign in to the built self-serve portal on our sites to access their data anytime. Preview erhobene data, choose a geeignete export format, and initiate the request in a few taps. The dashboard shows a clear timeline and status updates as each step folgt dem verfahren (erfolgt). Make sure your choices are saved for the next time.
When you submit a request, input is recognized and logged. You can set preferences, accept terms with a single click, and view the exact time and date for the next action above the request history. The calendar view helps you plan exports in advance.
proteção is built into the process, with encryption in transit and at rest, plus strict access controls and a durable audit trail to support diligence. If you need to revoke access, kontaktiert the provider to adjust permissions quickly; LGPD guidelines guide every step.
Control who can view data by adjusting permissions in the portal. You can accept or modify access for additional sites; the system uses intended settings and records every action for accountability.
Export your erhobene data using geeignete formats such as CSV or JSON. If you need to schedule recurring exports, use the calendar feature to set dates; data exports appear above once ready. keine exposure beyond your defined scope is possible.
If you encounter anwendungsfehlern, use the built-in diagnostics or contact supporthotjarcom for guidance. Recognized issues are prioritized, and you’ll get status updates as the system proceeds (erfolgt) through the verfahren. wann you need to review results, you can re-run the export after confirming that data is accurate.
Data retention, deletion rights, and lifecycle under v4
Retention periods and deletion rights
Set explicit retention windows: keep system logs and performance data for 30 days; anonymize aggregated material after 12 months; store e-mails and angaben provided by users for 60 days unless a legal requirement extends the period. The system collects visitors data and uses it across parts of the service. möglicherweise, we adjust durations after audits or regulatory changes. For deletion requests (bitten), we respond within 30 days and erase data across active components; automatically purge backups within the retention cycle. In übereinstimmung with applicable laws and our policy, deletion applies to all data stores, including material, angaben, and data used for analytics. helphotjarcom guidance informs hotjar-basierten data handling and retention expectations.
In addition, we reference einer vereinbarung with data subjects and outline export rights and deletion granularity. We specify which parts of data are kept longer for operational needs and which are anonymized for reporting, ensuring that visitors angaben remain protected while supporting performance measurement.
Lifecycle controls and user-initiated actions
Lifecycle controls map collection, storage, use, archiving, and deletion. The system collects data from visitors and uses it to power features across addition parts of the product; data types are labeled by material and purpose and moved to archived storage when not actively used. When a user requests deletion (bitten), we respond via e-mails within 30 days and complete erasure across all parts of the data store, including backups where allowed. We maintain an audit trail for übereinstimmung and provide data exports before deletion when feasible. This approach follows helphotjarcom guidance for hotjar-basierten components and ensures privacy-conscious operation without compromising core functionality.
What data is collected and how it is shared under Privacy Policy v4
Audit your data inventory today: identify every item that is collected, its purpose, and how it is shared.
Данные, которые мы собираем
- personenbezogener data: identifiers such as name, email, account ID, and device IDs.
- Contact data: telephone numbers, addresses, and preferences you express.
- Usage data: actions within our services, timestamps, timeframes, and navigation paths.
- Technical data: IP address, browser type, device information, language, and system logs.
- Geolocation and country information: approximate location derived from device or network data.
- Communications: messages, feedback, and attachments you submit to support channels.
- associated data: data that relates to your activity, often collected in forms or via integrations.
- For each category, we identify the explicit purpose of processing to prevent unintended uses.
- We may collect like data you provide through preferences or requests, which you can update at any time.
How data is shared
- Service providers who perform functions on our behalf may access data to operate features, deliver services, and support investigations; sind bound by contracts and follow general safeguards.
- Affiliates and other group entities may access data to support the purposes described in the agreement; these shares are limited to what is needed and are monitored.
- Law enforcement, regulators, or other authorities may access data when obliged by law or to investigate suspected violations.
- We may share data with andere partner organizations for research or product improvements; such transfers occur under an agreement and with appropriate protections.
- We track and monitor data flows to detect anomalies and protect data integrity across our systems.
- We express the limitations on data sharing to users and provide options to opt out where feasible.
- We protect ihren privacy and data rights alongside those of other users.
- kann automatisch erfolgen to improve accuracy and responsiveness.
- Data may be shared with anderer partner organizations under confidentiality terms.
Retention, protection, and user controls
- Timeframes: data is retained for the period necessary to fulfill the stated purposes and to comply with legal obligations; after that, data is anonymized or deleted.
- umfang: the processing scope is limited to the necessary Umfang for the stated purposes.
- Protection: we implement technical and organizational measures to protect data from loss, unauthorized access, or disclosure, including encryption, access controls, and audit trails.
- General safeguards: we apply a general diligence approach across processing activities and regularly review security practices.
- Country considerations: transfers may occur to other country jurisdictions; we assess laws to ensure protection for our users.
- einzelheiten: we provide einzelheiten about processed data upon request, including data types and purposes.
- Express rights: you may review, access, delete, or export data via self-service tools or by contacting us; responses follow timeframes in the policy and express requests are prioritized.
- obliged: we are obliged to inform you about changes affecting your data and to honor your requests promptly.
- möchten: customers möchten adjust consent or data preferences at any time.
Timelines and status tracking for data requests: what to expect
Submit your anträge via the official contact form (kontaktieren) to start tracking immediately; this constitutes a formal data request and triggers our compliance-ensuring workflow. We erhalten a unique request ID within 1 day and provide an initial acknowledgement within 2 days. The review examines the verwendeten datenquellen and the extent of data requested, and datenverarbeitung proceeds with least-privilege access to protect your information.
Indem you supply any requested documentation, you help speed the process. We inform you at each milestone, and status updates are shown in your dashboard. If more data is required, we contact you promptly; delays may occur auf Grund of complexity or external constraints. Delivery uses the requested format, and you can download a secure link that may be stored permanently. The data's origin ist der источник; delivery supports any Gerät (device), enabling seamless access across devices and screens.
Timeline and status indicators
| Status | |||
|---|---|---|---|
| Submitted | Request received; intake and scope checks begin. | 1–2 | Keep the request ID safe; ensure anträge details are complete. |
| Under review | Scope validated; identity and permissions verified; additional data may be required. | 3–7 | Besuchen the dashboard for updates; respond to any information requests. Kontaktieren us if you need to adjust scope. |
| In processing | datenverarbeitung and data compilation according to the extent of the request; cross-checks with источник and related systems. | 5–15 | Provide any missing documentation; indem you confirm details, you speed the extraction. |
| Завершено | Data delivered in the chosen format; verification and final checks completed. | 0–2 | Review delivery; speichern permanently if required; use the secure link to obtain the data. |
| Частичный / ограниченный | Только часть данных доступна в связи с действующими правами или aufgrund ограничений. | 3–10 | Обратитесь к прилагающимся заметкам; свяжитесь с нами, чтобы обсудить альтернативы или апелляции. |
Практические советы по соблюдению требований изменений v4 и защите вашей конфиденциальности
Немедленно проверьте и обновите ваше соглашение об обработке данных, чтобы оно отражало изменения v4. Установите законные основания для каждой деятельности по обработке и установите фиксированную дату завершения перехода в рамках, если это определено. Это согласование уточняет обязанности и снижает вопросы со стороны регулирующих органов.
Инвентаризация собранных типов данных сквозным образом: сопоставьте источники, категории, дату хранения и получателей; пометьте каждый элемент его назначением. Опубликуйте краткое резюме о конфиденциальности и убедитесь, что контакт для запросов актуален. Подготовьтесь к аудитам, поддерживая каталогизированные данные с указанием времени создания, доступные заинтересованным сторонам и рецензентам.
Назначьте уполномоченного и завершите заключение соглашения с каждым процессором. Примените контроль доступа на основе сеанса и поддерживайте аудируемые журналы, чтобы действия любого пользователя были отслеживаемыми. Поддерживайте стандартный путь эскалации в процессе обработки жалоб для оптимизации ответов.
Ограничьте обработку необходимостью и указанными целями. Разделите маркетинг от основной обработки и аннотируйте каждую деятельность в рамках. Используйте четкий процесс получения согласия и отслеживайте дату получения согласия, обеспечивая действия четкими критериями и задокументированными утверждениями.
Установите процесс рассмотрения жалоб: подтвердите получение в течение 24 часов, предоставьте прямой канал связи и разрешите случаи в установленные сроки. Поддерживайте стандартный путь эскалации жалоб. Документируйте шаги для аудитов и поддерживайте выделенный канал связи для запросов о конфиденциальности.
Обеспечьте защиту данных в программном обеспечении и на устройствах; ограничивайте сбор только необходимым объемом для законных целей. Предоставляйте варианты отзыва согласия, когда это применимо. Маршрутизируйте запросы о конфиденциальности через helphotjarcom и назначайте их соответствующей команде для своевременных ответов, с четкими отметками дат и ответственностью.
Определите ограниченные окна хранения и установленный график удаления. Используйте автоматизированные скрипты для удаления erhobenen данных после истечения срока и отслеживайте целостность устройств на gerät конечных точках. Ведите учет даты и метода удаления для аудитов и проверки, обеспечивая строгий контроль жизненного цикла данных.
Поддерживайте всеобъемлющий договорённость со всеми процессорами, включая чёткое соглашение, канал связи и структуру для постоянных обновлений. Подготовьтесь к периодическим проверкам и будьте готовы отозвать согласие при необходимости, сохраняя прозрачность в отношении потоков данных и обязанностей во всей экосистеме.
