Implementation Summary

Ethyca uses the following endpoint in TurnTo to retrieve Personally Identifiable Information (PII) when a user submits a data subject request. Ethyca also automates the erasure request by sending an email to Turnto directly (more detail can be found in the Erase Me section). See below for a summary of what Ethyca does with each endpoint:

Endpoints Download My Data (SAR) Erase Me (Right to Forget)
Users Yes No

Because TurnTo is a user generated ratings and reviews platform, it stores PII about your customers. Keep this in mind when you are creating your PII mapping as it will impact what is returned in your subject’s DSR package.

If this aligns with your use of TurnTo, please proceed to the next section to begin setting up your integration in the Control Panel.

For any questions, please reach out to your dedicated Privacy Success Manager.

Set Up Download My Data (SAR)

To locate the Client ID and Client Secret to connect your instance of TurnTo to Ethyca, follow the steps below:

1. Log in to TurnTo at turnto.com/managesite.

2. Click “settings” in the left navigation.

3. The settings page will show you values called “Site Key” and “Auth Key.” Paste the Site Key value into the field labeled Client ID in Ethyca. Paste the Auth Key value into the field labeled Client Secret in Ethyca.

Set Up Erase Me (Right to Forget)

Ethyca has an integration with TurnTo that allows us to submit erasure requests, known in the GDPR as the Right to Forget (RTF) and in the CCPA as the RTD (Request to Delete) via an automated email.

This integration sends an automated email from your Ethyca Control Panel to the TurnTo partner deletion email address where your TurnTo integrations manager will handle the deletion of your customers’ individual subject data.

To set up this integration through Ethyca, please send your TurnTo Account Manager or Implementation Manager the following email, CCing your Ethyca Privacy Success Manager, to notify them of the process:

Hi <insert name here>,

We have partnered with Ethyca to automate our data privacy requests for downloading and erasing subject data. Since TurnTo is our trusted user generated ratings and reviews partner, we wanted to let you know that when you receive a subject erasure request from us, it will come from Ethyca and read as follows:

Hi there,

This is an automated email from Ethyca, an automated data privacy
compliance system working on behalf of <OUR COMPANY>. We have received
a request from a customer of <OUR COMPANY> wanting to exercise their
data privacy right to be deleted. Please delete all PII data for the
data subject with email address of <DATA SUBJECT EMAIL ADDRESS>. We
appreciate your help and for any questions pertaining to this request,
please reply to this email directly.

The Ethyca Team

We appreciate your partnership as we continue to work together through these data compliance use cases.

Thank you,

<Your Name>