TurnTo

Implementation Summary

Ethyca uses the following endpoint in TurnTo to retrieve Personally Identifiable Information (PII) when a user submits a data subject request. Ethyca also automates the erasure request by sending an email to Turnto directly (more detail can be found in the Delete Your Data section). See below for a summary of what Ethyca does with each endpoint:

Because TurnTo is a user generated ratings and reviews platform, it stores PII about your customers. Keep this in mind when you are setting the DSR Customization as it will impact what is returned in your subject’s DSR package.

If this aligns with your use of TurnTo, please proceed to the next section to begin setting up your integration in the Control Panel.

For any questions, please reach out to your dedicated Customer Success Manager.

Connection Settings

To locate the Client ID and Client Secret to connect your instance of TurnTo to Ethyca, follow the steps below:

1. Log in to TurnTo at turnto.com/managesite.

2. Click "settings" in the left navigation.

3. The settings page will show you values called "Site Key" and "Auth Key." Paste the Site Key value into the field labeled Client ID in Ethyca. Paste the Auth Key value into the field labeled Client Secret in Ethyca.

Finished adding your Connection Details? Move on to the next two tabs to configure your DSR Customization settings and complete your Data Mapping.

Erasure Requests
Ethyca has an integration with TurnTo that allows us to submit erasure requests, known in the GDPR as the Right to Forget (RTF) and in the CCPA as the RTD (Request to Delete) via an automated email.

This integration sends an automated email from your Ethyca Control Panel to our TurnTo privacy contact in a weekly batch on Wednesday morning. Your TurnTo privacy team will then handle the deletion of your customers’ individual subject data.

To set up this integration through Ethyca, please send your TurnTo Account Manager or Implementation Manager the following email, CCing your Ethyca Customer Success Manager, to notify them of the process:

Hi <insert name here>,

We have partnered with Ethyca to automate our data privacy requests for downloading and erasing subject data. Since TurnTo is our collaborative commerce network, we wanted to let you know that when you receive any subject erasure requests from us, they will come from Ethyca and read as follows:

Hi there,  
  
This is an automated email from Ethyca an automated data privacy  
compliance system working on behalf of <ORGANIZATION NAME>. We have  
received requests from customers of <ORGANIZATION NAME> wanting to  
exercise their data privacy right to be deleted.  
  
Please delete all PII data for all data subject(s) with email  
address(es) listed below. We appreciate your help and for any  
questions pertaining to this request, please reply to this  
email directly.  
  
Sincerely,  
The Ethyca Team  
<COMMA SEPARATED LIST OF SUBJECT EMAIL ADDRESSES>

We appreciate your partnership as we continue to work together through these data compliance use cases.

Thank you,

<Your Name>