How to use GDPR Manager and get approval for personal data processing

This feature lets you manage consents to keep your lists GDPR compliant.

As soon as you upload a database to Prowly or add a contact individually, personal data protection is activated on your account. This is related to GDPR regulations and the rule of privacy by default. So each of your contacts:

  • falls under GDPR regulation
  • doesn't have consent for their personal data processing


How to change default data protection settings

Contact card

In your contacts database (Contacts > My Contacts), each contact has a contact detail card. You can enter it by clicking the contact's name. On the card, in the top left corner, you will find GDPR settings.

gdpr settings gear icon

This space holds all of the information regarding personal data protection, and by default, there is no consent for processing data. You can find two switches in the pop-up menu:

gdpr settings popup

The first one tells Prowly if the contact falls under GDPR legal regulations. The second one indicates if you have consent for processing the personal data of this contact. Of course, in order to distribute a pitch compliant with GDPR regulations, you need to check that you have consent from journalists by turning on the second switch.

My contacts view

You can also mark the contacts in bulk by using mass actions in your My contacts main view. Mark the appropriate journalists, click More actions, and choose Turn on in the GDPR consent by default section:

my contacts more actions


How to get approval for personal data processing

If you'd like to start collecting consent, you can use our GDPR Manager tool to build a form that can be then distributed via email to your contacts. In order to build the form, follow the steps below:

1. Go to My Contacts, find the Settings button at the top and choose the View GDPR option from the dropdown menu:

my contacts gdpr

2. Press Create a scope at the bottom of the menu

3. Fill the form with content that will give you a way to ask contacts for consent to personal data processing. The purposes and activities related to data processing should be highlighted here:


gdpr create scope purposes


The scope name field determines the form name visible on the domain. It also has an organizational function, as, by the scope name, you can easily understand which PR activity you were gathering consent for. It's not visible in the GDPR email sent to your recipients, you set the subject line separately.

Then, if you want to receive approval for data processing in relation to an organized contest, you can name your activity scope as e.g. Contest with prizes. Your purposes can include:

  • Collection of consents
  • Information distribution
  • Results in an announcement

If you want to process data in accordance with other activities, you are obliged to list them in the form. This is how your target will be able to approve your request. Once set, purposes cannot be changed. 

Define the content and appearance of the consent form

The form will be hosted on a landing page. The link to it will be distributed via email:


gdpr consent form design


  • Webform domain - choose the URL for the domain where the form will be displayed
  • Logo / Color - add logo and color matching with your visual identification
  • Default greeting - set greeting displayed in the form for all contacts without defined individual greeting
  • Lead - write a title indicating that the email relates to a personal data processing form
  • Description - include all data required by GDPR information obligations; you can also link to your website with all details about your privacy policies 
  • Thank you message - add text which will be displayed to the journalist after giving permission
  • Language - choose Polish or English interface


Default confirmation (opt-in) email 


gdpr default confirmation email


The content of the message related to personal data processing can be configured in a very similar way to all typical emails in Prowly. Just remember to add a dynamic field with a Webform Link, as well as a signature indicating who is exempted from distribution. After finishing the configuration, a set with the form name will occur on the left menu of the GDPR tool. There you will be able to verify the number of journalists who have confirmed and rejected requests related to data processing.

List of scopes


gdpr list of scopes

After clicking a particular set, you can also:

  • Check the form and edit its structure
  • Verify default email content
  • Check purposes (but without modification option)
  • Verify the author and person responsible for the last update of the form

Form distribution

  1. Enter a set of purposes that you want to send to the contacts
  2. Click the three dots icon
    gdpr scope menu
  3. Select Ask for data processing consent
  4. Press Submit in order to add contacts that haven't received this form in the past
  5. Choose target: single contacts, lists, and segments, or all contacts from your database:
gdpr send consent email search

6. Verify the form and content of the email for the last time and provide changes if needed. If you don't need to modify anything, press Skip

7. The Send button will distribute the email with a link to your virtual form