No public evidenceGhostMonitor and GDPR
CertReports found no public GDPR evidence for GhostMonitor as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 3 Dec 2019
- Scope
- Description of the activities of the organization with respect to personal information received from the European Union and Switzerland: The Company is the provider of the Recart marketing software, which provides services for online retailers (usually web shops) by sending online massages through Facebook Messenger to the customer in case the customer abandons its purchase procedure and leaves product items in its virtual shopping cart (hereinafter: “Services”). Regarding the Service the Company processes information to provide, personalize and improve its Services and to allow its users to use and integrate the Recart software into their online retailer systems. The Company’s Services are available for registered users (hereinafter: “Registered User”), but the Company’s website can be visited by non-registered users (hereinafter: “Visitor”) (Registered User and Visitor hereinafter separately: “User” and together: “Users”). Certain data is only collected from Registered Users; however, data may be collected from the Visitors as well. To provide its Services the Company collects personal data from third parties (customers of the Registered Users; hereinafter: “Customer”); these personal data are obtained from third parties and not directly from the Customer (data subject). For the performance of the Services fulfillment the Company collects data provided by the Registered User which includes the Registered User’s full name, e-mail address, mailing address, phone number and financial data (account holder name, bank name, account number, currency of account). For marketing purposes, to deliver coupons, mobile coupons, newsletters, receipt messages, e-mails and mobile messages the Company collects – based on the consent of the User - full name, e-mail address, mailing address and phone number (optional). For the purpose and on the legal basis of the legitimate interests of the Company, to improve the effectiveness of the website, the Services, and marketing efforts, to conduct research and analysis, including focus groups and surveys and to perform other business activities the Company processes the following personal data when User visit the website: IP address, browser information, password, contact information, content consumed on the website, unique device identifier, browser characteristics, operating system type, language preferences, referring URLs, actions taken on the website, page requested, content consumed (e.g. viewed, uploaded ad shared), date and times of website visits, other information associated with other files stored on the device. The Company may use automatically collected information and cookies information to: (a) remember the User information so that the User will not have to re-enter it during his/her visit or the next time the User visits the Website; (b) provide custom, personalized advertisements, content, and information; (c) monitor the effectiveness of the Company’s marketing campaigns; and (d) monitor aggregate usage metrics such as total number of visitors and pages viewed. The Company may share the collected data with its affiliated entities. Besides the affiliated entities, the Company may share collected data with third party service providers who supply software applications, web hosting and other technologies for the Company’s Services and website. Aggregated or de-identified information, which cannot reasonably be used to identify the User may also be shared. Data process services, of certain companies which requires to share data with the providing company, may also be used by the Company. In each case any information shall only be transferred with the prior consent of the User.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | GhostMonitor, Inc.: Inactive | Live pagesha256 5dc918d0b8 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is GhostMonitor GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.