Data Export Register – Dataset, Formats, Standards, Jurisdiction

On this page, you can find information about which data from the products you use can be exported, in which formats, as well as known restrictions, technical limitations, and details on international governmental access and jurisdiction.

• Dataset: team admin details, activated and installed products, timestamp of the user’s takeout request, email addresses of team members and their roles, payment history and subscription plan details for each website, owner information, site business and service preferences, metadata about Cookie Banner installation (color, positioning, etc.), CS analytics (page views, consent percentage, etc.), custom clauses, CPL, metadata about widget installation, export of Whistleblowing Management Tool requests and related data (text, email, phone number, etc.), export of Data Subject Rights Management Tool data (user consents, etc.), and export of Newsletter Opt-in Booster subscriptions (creation date, subject, source).
• Formats: JSON
• Standards/specs: UTF-8
• Notes: clauses protected by intellectual property rights are non-exportable; the dataset above includes data relating to all products, therefore some of the listed data may apply only to specific products.

Jurisdiction to which the ICT infrastructure deployed for data processing of services is subject: Italy.

To ensure the lawful and secure handling of EU-held non-personal data, we have established the following technical, organisational, and legal safeguards to prevent international governmental access or transfers that would conflict with EU or Member State law:

• Technical measures: cryptography; EU Cloud; EU-only key management; access management with admin access from EEA only; yearly audits; ISO 27001 certification.
• Organisational and legal measures: business continuity and incident management procedures; cloud security procedures; designated legal team to assess any government requests; employees' training; suppliers' qualification and monitoring procedure; data deletion policy; records of requests maintained; notice to customers.

If you would like to know more about the measures in place, please refer to Annex I of the DPA at this link.