Marketing

GetResponse

GetResponse is a Polish marketing platform combining email newsletters, marketing automation, landing pages, webinars and web push. It can install a website tracking script that drops the gr_recover, mtuid and ga_visitor cookies on your domain to attribute newsletter clicks and trigger automation flows. As a marketing tool, the website tracking and the web push opt in require prior consent under the GDPR and ePrivacy Directive.

Overview

What does GetResponse do?

What is GetResponse?

GetResponse is a marketing platform headquartered in Gdansk, Poland. It combines email newsletters, marketing automation, landing pages, sign up forms, webinars, web push, paid ads and an AI website builder. SMBs across Europe use it as an all in one tool, often integrated with Shopify, WooCommerce, Magento or PrestaShop.

Cookies and identifiers

When the website tracking script is installed, GetResponse writes the gr_recover, mtuid (visitor identifier) and ga_visitor first party cookies on the publisher domain. Email opens use a 1x1 pixel, and link clicks go through getresponse.com redirects. The web push subscription stores a service worker registration in the browser.

GDPR and ePrivacy implications

The site tracking cookies are not strictly necessary, so Article 5(3) ePrivacy requires prior consent. Web push notifications need a separate explicit opt in. Marketing emails follow national ePrivacy laws: consent for prospects, possible soft opt in for existing customers under PECR or LCEN provided the opt out is offered at the point of collection.

Consent management

Block the GetResponse site tracking script through your CMP until consent. Configure the GetResponse popup forms to fire only after acceptance and to respect the consent state. Use double opt in for email subscriptions and capture the timestamp, source and consent text in GetResponse to satisfy the proof of consent requirement.

Data hosting and transfers

GetResponse Sp. z o.o. operates its primary infrastructure in Poland with disaster recovery and CDN edges in the United States. Sub processors include AWS and Cloudflare. The transfer to US sub processors relies on the EU U.S. Data Privacy Framework or Standard Contractual Clauses, listed in the GetResponse DPA.

Implementing GetResponse compliantly

Sign the GetResponse DPA, gate the tracking script on consent, use double opt in plus consent capture for email lists, set retention periods for inactive contacts, document GetResponse Sp. z o.o. as a processor and update the privacy policy to mention the cookies, the email pixel and the EU hosting.

Compliance

GetResponse and the GDPR

GetResponse is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Prior consent for the website tracking script and web push (Article 5(3) ePrivacy and Article 6(1)(a) GDPR). Marketing emails follow national ePrivacy implementations (consent or soft opt in). Transactional emails can rely on contract performance.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, EU U.S. Data Privacy Framework (US sub processors)

Impact assessment (DPIA)

A DPIA can be relevant when GetResponse is used for behavioural lead scoring, predictive segmentation or large scale email campaigns to children or sensitive audiences. EU based hosting reduces the transfer risk significantly.

Sample text for your banner

We use GetResponse for our newsletters and on site automation. With your consent, GetResponse will set tracking cookies on your device, attribute your activity to your contact record and send you marketing emails. You can refuse or withdraw your consent at any time from the cookie settings or via the unsubscribe link.
Cookies and trackers

What GetResponse sets and contacts

Tracking method
JavaScript tracking script (gr-wcm.js, web push, popup forms loaded from app.getresponse.com / cdn.getresponse.com), API integrations and tracking pixels embedded in marketing emails, used to attribute newsletter clicks, run web push and capture form submissions to the GetResponse SaaS.
Server location
GetResponse data centres in Poland (primary) and the United States (backup and CDN edges).

Cookies set (3)

NameTypeDurationPurpose
gr_recoverfirst_party1 yearStores a recovery identifier on the publisher domain to recognise returning visitors who have submitted a GetResponse form.
mtuidfirst_party1 yearVisitor identifier used by GetResponse to attribute on site activity and form submissions to the right contact record.
ga_visitorfirst_party1 yearTracks the visitor across newsletter campaigns and on site automations to fire the correct workflow steps.

Third-party domains contacted (4)

  • app.getresponse.com
  • cdn.getresponse.com
  • gr-wcm.azureedge.net
  • getresponse.com
Questions

Frequently asked questions about GetResponse

Can't find your question? Write to us, we answer fast.

Which cookies does GetResponse set?

The website tracking script sets the gr_recover, mtuid (visitor identifier) and ga_visitor first party cookies. Email opens are tracked via a 1x1 pixel and link clicks pass through getresponse.com redirects.

Does GetResponse require consent?

Yes. The website tracker is a marketing technology and writes non essential cookies, so prior consent is required under Article 5(3) ePrivacy. Web push opt in needs an additional explicit consent.

What is the legal basis?

Consent for site tracking, push notifications and marketing emails to prospects. For existing customers, soft opt in based on legitimate interests can apply for similar product emails under PECR or LCEN. Transactional emails rely on contract performance.

Are data transferred outside the EU?

Personal data is primarily processed in Poland. US sub processors (AWS, Cloudflare) may handle CDN, push delivery and disaster recovery, under the EU U.S. Data Privacy Framework or Standard Contractual Clauses listed in the DPA.

Do I need a DPIA for GetResponse?

A DPIA is typically not mandatory for standard newsletter use cases. It becomes appropriate when GetResponse is used for behavioural lead scoring, predictive segmentation or large scale outreach to sensitive audiences.

How do I deploy GetResponse compliantly?

Sign the GetResponse DPA, gate the tracking script on consent, use double opt in with captured consent text and timestamp, define retention for inactive contacts, and update the privacy policy to mention the EU hosting and cookies.

Are there alternatives to GetResponse?

Other EU based marketing platforms include Brevo (formerly Sendinblue, France), MailerLite (Lithuania), ActiveCampaign EU, or fully self hosted Mautic. Each has its own EU data residency setup.

How do I update my cookie policy?

Add a section that names GetResponse, lists the cookies (gr_recover, mtuid, ga_visitor) with purpose and duration, mentions the email open pixel, web push and the EU hosting plus US sub processors.

Mutiny

Mutiny is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Mutiny provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Mutiny helps deliver the right message to the right audience at the right time.

Marketing

NoPaperForms

NoPaperForms is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. NoPaperForms provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, NoPaperForms helps deliver the right message to the right audience at the right time.

Marketing

Salesloft

Salesloft is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Salesloft provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Salesloft helps deliver the right message to the right audience at the right time.

Marketing

Releva

Releva is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Releva integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Releva makes advanced AI accessible to all teams.

Marketing

Ecal

Ecal is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Ecal enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Ecal empowers marketing teams to achieve measurable growth.

Marketing

HubSpot API

HubSpot API is an integration and connectivity platform that enables businesses to connect web applications, APIs, and services seamlessly. It provides pre-built connectors, webhook management, and data synchronization. HubSpot API supports real-time data flow between marketing, sales, and operational tools, eliminating data silos and manual processes. With visual workflow builders and robust API management, HubSpot API helps create unified digital ecosystems that drive efficiency.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.