Zendesk
Zendesk is a US-based customer service and support platform providing ticketing, live chat (Zendesk Web Widget), email support, help centres, and AI-powered service automation. For European businesses, Zendesk offers an EU data region (Frankfurt) on certain plans. The Web Widget tracking cookies require consent, while ticket-based support may rely on legitimate interest or contract performance. Zendesk provides comprehensive GDPR documentation and a DPA.
What does Zendesk do?
What is Zendesk?
Zendesk is a customer service and support platform providing a unified suite of tools including ticket management, live chat (Zendesk Web Widget and Messaging), email support, phone support, a self-service help centre, and AI-powered automation. It is used by businesses of all sizes to manage customer support interactions across multiple channels. Zendesk also provides Zendesk Sell (CRM) and Sunshine (customer data platform) products.
Personal data processed by Zendesk
Zendesk processes customer names, email addresses, phone numbers, ticket content, conversation history, device information, IP addresses, agent interactions, and any attachments or files submitted via tickets. Contact centre deployments may include call recordings. Help centre usage analytics track which articles are viewed and searched. The breadth of data depends on which Zendesk products are deployed.
Legal basis across Zendesk products
Different Zendesk features require different legal bases. Ticket-based customer support: contract performance or legitimate interest for the support function. Web Widget tracking cookies: consent under the ePrivacy Directive before the widget loads. Proactive chat initiated by Zendesk: legitimate interest for existing customers. Email marketing via Zendesk: separate consent required. Zendesk Sell CRM contacts: legitimate interest or contract performance depending on relationship.
EU data region
Zendesk offers an EU data region (Frankfurt) for customers on eligible plans. When configured, ticket data, user profiles, and conversation content are stored within the EU, eliminating SCCs for primary data flows. Request EU data region from your Zendesk account manager. Standard deployments use US infrastructure requiring SCCs.
Practical compliance steps
Sign the Zendesk DPA and request EU data region if required. Block the Zendesk Web Widget via CMP until cookie consent is obtained. Configure cookie consent settings in Zendesk Web Widget. Add Zendesk to your privacy policy. Define data retention periods in Zendesk and configure auto-deletion. Implement the Zendesk Users API for data subject access and erasure requests. For contact centre deployments, configure call recording notifications.
Zendesk and the GDPR
Zendesk is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) required for Zendesk Web Widget tracking cookies under the ePrivacy Directive. Legitimate interest (Art. 6(1)(f)) may apply for ticket-based customer support conversations. Contract performance (Art. 6(1)(b)) for support as part of a service relationship. Different legal bases apply to different Zendesk products.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, SCCs for US deployments
Impact assessment (DPIA)
A DPIA is recommended for large-scale Zendesk deployments processing significant volumes of customer support data, particularly for contact centres, healthcare support, or financial services where sensitive personal information is regularly processed in tickets.
Sample text for your banner
We use Zendesk to provide customer support. Zendesk stores our support communications and may use cookies to recognise you across sessions. Data is processed in accordance with our privacy policy. You can contact us directly if you prefer not to use the chat widget.
What Zendesk sets and contacts
- Tracking method
- JavaScript live chat widget (Zendesk Web Widget), email ticketing, help centre, first-party cookies, session tracking, user identification, conversation history
- Server location
- United States with EU data region option (Frankfurt)
- Data transferred outside the EU
- Zendesk is a US-based customer service platform. An EU data region (Frankfurt) is available for customers who require EU data residency. Standard deployments process data on US infrastructure requiring Standard Contractual Clauses. Zendesk provides a GDPR-compliant DPA.
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| __zlcmid | persistent | 1 year | Zendesk live chat visitor identifier for maintaining chat session continuity across pages |
| ZD-buid | persistent | 1 year | Zendesk browser identifier for session management and visitor recognition in the Web Widget |
Third-party domains contacted (3)
zendesk.comstatic.zdassets.comekr.zdassets.com
Frequently asked questions about Zendesk
Can't find your question? Write to us, we answer fast.
Does Zendesk require GDPR consent?
Zendesk Web Widget tracking cookies require consent under the ePrivacy Directive. Ticket-based support may rely on legitimate interest or contract performance without cookie consent. Load the Web Widget only after functional/analytics consent is obtained.
Does Zendesk offer EU data residency?
Yes. Zendesk offers an EU data region (Frankfurt) on eligible plans. Contact your Zendesk account manager to enable it. This keeps ticket data, user profiles, and conversations within the EU, eliminating SCCs for primary data flows.
What legal basis applies to Zendesk support tickets?
Contract performance (Art. 6(1)(b)) for support that is part of the service relationship. Legitimate interest (Art. 6(1)(f)) for managing customer support operations. Consent is not required for processing tickets submitted by customers seeking help.
What cookies does Zendesk Web Widget set?
Zendesk sets __zlcmid (visitor ID, 1 year) for the live chat widget and ZD-buid (browser ID) for session continuity. These require consent under the ePrivacy Directive before the widget loads.
Do I need a DPA with Zendesk?
Yes. Sign the Zendesk Data Processing Agreement (available at zendesk.com/company/privacy-and-data-protection). For EU data region customers, verify the DPA covers your specific residency configuration.
How do I handle data subject requests in Zendesk?
For access requests: use the Zendesk Users API to export user data and associated tickets. For erasure requests: use the Zendesk GDPR compliance features to delete user data. Zendesk provides a bulk deletion tool for contacts. Respond within 30 days and document all actions.
How long should I retain Zendesk ticket data?
Retention should be limited to what is necessary. For customer support: typically retain for the duration of the customer relationship plus a reasonable dispute resolution period (12-24 months). Configure automatic deletion in Zendesk or use scheduled cleanup via API.
Are there EU-based alternatives to Zendesk?
Freshdesk (EU data centre option), HelpScout (EU option), and Zammad (self-hostable, German origin) provide customer support functionality with EU data residency options.
Robin
Robin is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Robin supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Robin ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Status.io
Status.io is a website monitoring and uptime tracking solution that ensures your digital properties remain available and performant around the clock. It provides real-time alerts, status page hosting, and detailed performance reports. Status.io monitors websites, APIs, and servers from multiple global locations, detecting downtime and degradation before they impact users. With incident management and SLA tracking, Status.io helps maintain reliability and trust.
BotPenguin
BotPenguin is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BotPenguin supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BotPenguin ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Premio Chaty
Premio Chaty is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Premio Chaty offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Premio Chaty empowers organizations to optimize strategy and maximize return on investment.
Glassix
Glassix is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Glassix supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Glassix ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
ChatWING
ChatWING is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ChatWING supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ChatWING ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.