How to Manage and Delete Personal Data for Guest Wi-Fi Visitors

How to Manage and Delete Personal Data for Guest Wi-Fi Visitors

In compliance with data privacy regulations such as GDPR, it is essential to provide a clear process for guest Wi-Fi visitors to access or delete their personal data. This article outlines the two methods available for managing visitor data: a self-serve option for the visitor and an administrative option for venue managers or resellers.

Option 1: For Visitors - Self-Serve via the Profile Portal

Visitors have direct control over their own data through the Profile Portal. This self-serve tool empowers them to view, update, and request the deletion of their personal information at any time.

This is the recommended first step for any visitor inquiring about their data.

For complete, step-by-step instructions on how visitors can access and use this feature, please direct them to our comprehensive guide:

• How to use the Profile Portal to manage your data

Option 2: For Administrators - Managing Visitor Data in the Portal

As a customer or reseller, you can manage a visitor's data on their behalf if they submit a request directly to you. This includes exporting a copy of their data (Right of Access) or permanently removing it (Right to Erasure).

Follow these steps to manage a user's profile:

1. Sign in to your Purple portal and navigate to Marketing > WiFi Visitors.
2. Use the Search visitors bar to look for the user, typically by their email address.
   • If a record is found, it will appear in the list.
   • If no record is found, it means we do not hold any personal data for that identifier.
     
     
3. Click on the user's profile from the results to open their record.
4. On the user's profile page, you will see two options to manage their data:
   • Download profile: Select this to export a complete record of the visitor's data. This action is used to fulfill a "Right of Access" request.
   • Anonymise profile: Select this to permanently and irreversibly remove the visitor's personal identifiable information (PII) from the platform. This action is used to fulfill a "Right to be Forgotten" or erasure request.
     
     

By following these procedures, you can ensure all data privacy requests are handled efficiently and in compliance with regulations.