Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Datanyze, now part of ZoomInfo, is a United States based B2B sales intelligence tool. Through a Chrome extension and web app it surfaces business contact and company data, which raises significant GDPR obligations for processing third party personal data.
Datanyze is a United States based B2B sales intelligence and data enrichment tool, now part of ZoomInfo. Through a Chrome extension and web application it surfaces business contact and company information such as names, job titles, company names, business email addresses and technographic data, feeding the broader ZoomInfo database used for sales, marketing and recruiting.
Sales and marketing teams use Datanyze to identify prospects, look up company technology stacks and enrich contact records. The Chrome extension reads publicly visible business details on pages such as company websites and professional profiles, and the web app provides search and enrichment.
Datanyze collects business contact and company data and combines it into searchable profiles. Its websites set first party and analytics cookies. The most sensitive aspect from a GDPR view is not the website cookies but the enrichment itself, because it builds profiles of identifiable individuals, frequently people who have had no contact with the user of the tool.
Business email addresses and named contacts are personal data under the GDPR even in a B2B context. Where data is obtained indirectly, Article 14 requires you to inform the individuals, usually within one month. Non essential website cookies still need consent under the ePrivacy Directive. You must identify a lawful basis for the enrichment and respect rights to object and to erasure.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Datanyze and ZoomInfo operate from the United States, so personal data is transferred there. Transfers should rely on Standard Contractual Clauses or the EU US Data Privacy Framework, and you should keep records of these safeguards alongside your enrichment documentation.
Carry out a DPIA, define and document a lawful basis, prepare an Article 14 notice for enriched contacts, minimise and time limit the data you keep, gate website cookies behind consent, sign a data processing agreement and record the United States transfer safeguards. Provide a clear route for individuals to object or request erasure.
Websites using Datanyze must obtain user consent under GDPR regulations.
DPIA considerations
A data protection impact assessment is strongly recommended and may be mandatory. Datanyze enriches and profiles business contacts, often individuals who never interacted with you, which is large scale processing of personal data obtained from a third party. Assess the lawful basis, the duty to inform data subjects under Articles 13 and 14, data minimisation, retention and the United States transfer safeguards.
Sample consent text
Our website uses cookies including those set by Datanyze and ZoomInfo for sales intelligence and analytics, which may transfer data to the United States. Click Accept to allow these marketing cookies, or Reject to decline. Separately, when we enrich business contacts we inform those individuals as required by law.
Third-party domains contacted
datanyze.comzoominfo.comjs.zi-scripts.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| Session cookie | Necessary | Session | Maintains the authenticated session in the Datanyze and ZoomInfo web application. |
| Preference cookie | Functional | Up to 1 year | Stores interface settings and preferences across visits. |
| Analytics cookie | Analytics | Up to 2 years | Measures usage of the Datanyze and ZoomInfo websites for product analytics. |
| Marketing cookie | Marketing | Up to 1 year | Used for advertising and cross site marketing measurement on the ZoomInfo properties. |
Datanyze collects user analytics data — you legally need a consent banner. Try FlowConsent free.
The Datanyze and ZoomInfo websites set first party and analytics cookies for sessions, preferences and usage measurement. The larger privacy concern, however, is not these cookies but the collection and enrichment of business contact data, which builds profiles of identifiable people.
Consent is required for non essential website cookies under the ePrivacy Directive. For the data enrichment itself, consent of each contact is rarely practical, so most users rely on legitimate interests, but that requires a balancing test and you must still inform individuals and honour objections.
Non essential cookies rely on consent. For enriching and storing third party business contacts, legitimate interests under Article 6(1)(f) is the most common basis, supported by a documented legitimate interests assessment. You must still meet the Article 14 duty to inform and respect the right to object.
Yes. Datanyze is part of ZoomInfo and operates from the United States, so contact data, account data and analytics are processed there. Transfers from the EEA should rely on Standard Contractual Clauses or the EU US Data Privacy Framework.
Yes, a data protection impact assessment is strongly recommended and may be mandatory, because Datanyze involves large scale processing and profiling of personal data obtained from a third party, including individuals who never contacted you. Document risks, lawful basis, the duty to inform and transfer safeguards.
Run a DPIA, document a lawful basis, send or publish an Article 14 notice for enriched contacts, minimise and time limit retention, gate website cookies behind consent, sign a data processing agreement, record the United States transfer safeguards and provide an easy way to object or be erased.
Alternatives include other B2B data and enrichment tools such as Cognism, Lusha, Apollo, Clearbit and Kaspr. Some emphasise EU sourced data, consent records or stricter compliance controls, so compare their data sources, lawful basis and transfer safeguards.
Disclose the Datanyze and ZoomInfo cookies and that data may go to the United States, and separately add a clear data enrichment section to your privacy notice explaining the source of the data, the purposes, the lawful basis, retention and how individuals can object or request erasure.