No public evidenceDatafy and GDPR
CertReports found no public GDPR evidence for Datafy as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 3 Sep 2025
- Expires or valid through
- 26 Aug 2027
- Scope
- The Datafy pixel is designed to help Destination Marketing Organizations (DMOs) measure the impact of their advertising efforts by enabling measurement of in-market attribution. This allows our clients to understand more about their advertising-impacted visitation such as where their visitors are coming from, how long they are staying, which of their vendors and tactics are converting at the highest rates, what their campaign’s ROAS is, whether their media provided incremental lift, and other details that can help them measure success and strategize for the future. The pixel captures device information that is matched against Datafy’s universe of anonymized devices. This panel of mobile devices has opted into 3rd party location sharing. Datafy follows all regulations and industry best practices including GDPR and CCPA compliance for user data control. Datafy leverages this dataset to determine the likelihood and/or rate of campaign exposed devices making a trip to the DMO. All analysis is conducted in aggregate and each device remains anonymous and it is impossible to leverage Datafy’s services to isolate individual devices or small groups of users. Data Points Datafy Collects: Timestamp User-agent URL parameters Referer Headers IP address Cookie/Device ID (if available, applicable) This data is encrypted in flight and at-rest. The majority of processing and analysis is conducted internally at Datafy by employees that have been trained on the importance of data protection and privacy. In some circumstances portions of the data may be shared with third parties that have entered into agreements with Datafy that are at least as strict as the policies that Datafy employees regarding data protection and privacy. The third parties are only utilized to enable additional cross-device matching for Datafy and the data cannot be utilized for any other purpose.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Datafy LLC: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 5e69aa3e74 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Datafy GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Marketing vendor has GDPR evidence in the index yet.