Double opt-in
Double opt-in is a sign-up that only becomes valid once the person clicks the link in a confirmation email sent to the address they gave.
Updated:
What does Double opt-in mean?
Double opt-in filters out mistyped addresses and addresses entered on someone else's behalf, and it is evidence that the owner of the address really asked for the emails.
Under the GDPR the controller must be able to demonstrate that the person consented (Article 7(1)). Double opt-in is not required as such, but it is a common way to show it.
Why does it matter to a small business?
A small business's newsletter list is valuable when the addresses are real and the subscribers really asked for the emails. Double opt-in filters out mistyped addresses, and if someone later asks where you got their address, you can show when and next to what wording they signed up. What exactly your case requires is a question for a data protection specialist.
What does it look like in practice?
Details
Suppose a florist in Veszprém offers a newsletter sign-up on its website. Someone enters their address and receives an email with a confirmation link. Until they click, they do not count as a subscriber. When they click, the consent is stored on their record with the time of the click and the wording they saw, where it can be looked up later.
How does HelloCRM handle it?
Details
HelloCRM forms can switch double opt-in on: consent is recorded only at the click, together with the consent wording shown, the time and the IP address.
Module: Forms (paid module, price coming soon).
A CRM for small businesses in Hungary
HelloCRM is an online CRM made in Hungary for small and mid-sized businesses there, in Hungarian and English: the core CRM is free for good, with no time limit and no card, and it can be tried without signing up in a demo company full of example data.
Questions
What is Double opt-in, in one sentence?
Double opt-in is a sign-up that only becomes valid once the person clicks the link in a confirmation email sent to the address they gave.
Sources
This is general information, not legal or tax advice. The rules come from: Az (EU) 2016/679 rendelet (GDPR), EUR-Lex (checked )