> How RD Station tracks visitors, where data is stored under LGPD and GDPR, when consent is needed, EU and Brazilian hosting and a compliance checklist. > > Canonical: https://www.flowconsent.com/en/services/marketing/rd-station Marketing # RD Station Marketing · [Official website](https://rdstation.com.br) RD Station is a Brazilian marketing automation suite (Marketing, CRM, Conversas) used by SMEs to capture and nurture leads. [Block RD Station until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers Brazil (RD Station, headquartered in Florianopolis, owned by TOTVS) with AWS infrastructure in Sao Paulo and US regions Overview ## What does RD Station do? ## **What is RD Station** RD Station is a Brazilian marketing automation company headquartered in Florianopolis, now owned by TOTVS. Its suite covers RD Station Marketing (lead capture, automation, email), RD Station CRM and RD Conversas (omnichannel messaging). It is one of the leading marketing automation tools in Latin America and is increasingly present in Portuguese and Spanish speaking SMEs across Europe. ## **What cookies and data RD Station collects** The RD Station Marketing tag writes the rd\_visitor cookie (visitor identifier), an rd\_session cookie, an rd\_event cookie tracking specific events and several auxiliary cookies for popups and lightboxes. The platform receives the visitor IP, user agent, source URL, UTM parameters, form payloads, opens, clicks and any custom event you send via the API. ## **GDPR and ePrivacy implications** Loading the RD Station tag writes to the user device, so Article 5(3) of the ePrivacy Directive requires consent. The behavioural lead scoring constitutes profiling under Art. 22 GDPR and, when it informs automated decisions, can trigger the right to human review. Marketing emails sent via RD Station also need a documented consent recorded with timestamp and source. ## **Consent and legal basis** Consent for the tag, the marketing emails and the cross site profiling. Legitimate interest for fraud and abuse prevention. Contract performance for transactional emails closely linked to a paid service. Document the consent log per channel. ## **Data transfers and hosting** RD Station processes data in Brazil (where the LGPD applies) and on AWS regions including Sao Paulo and the United States. Brazil is not currently the subject of a Commission adequacy decision; transfers to Brazil for EU subjects rely on Standard Contractual Clauses in the RD Station DPA. Transfers to the US AWS region rely on the EU US Data Privacy Framework (when AWS is operating in scope) and on Standard Contractual Clauses. ## **Practical compliance steps** Block the RD Station tag until consent. Enable double opt in on subscription forms. Disclose RD Sistemas in your privacy policy as a sub processor in Brazil. Sign the RD Station DPA and Standard Contractual Clauses. Set short retention on inactive leads. Audit RD Station integrations and disable any that you do not actually use. Compliance ## RD Station and the GDPR RD Station is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the marketing tag and subscription forms; legitimate interest (Art. 6(1)(f) GDPR) for fraud and abuse prevention only - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, Brazilian LGPD, EU US Data Privacy Framework (for US AWS), national B2B prospection rules ### Impact assessment (DPIA) A DPIA is recommended when RD Station combines lead scoring with sensitive content (health, education, finance), when minors may subscribe, or when cross border transfers to Brazil and the United States are routine for EU subjects. ### Sample text for your banner > We use RD Station to manage our marketing forms, lead scoring and email automations. RD Station writes cookies on your device, processes your email, IP and behaviour, and shares them with RD Sistemas in Brazil and on AWS in the United States. We only load RD Station if you accept. Cookies and trackers ## What RD Station sets and contacts - Tracking method JavaScript marketing automation tag (RD Station Marketing pixel), pop ups, landing pages and tracked links - Server location Brazil (RD Station, headquartered in Florianopolis, owned by TOTVS) with AWS infrastructure in Sao Paulo and US regions - Data transferred outside the EU RD Station processes data in Brazil and on AWS regions in Brazil and the United States. Brazil has been confirmed as adequate by the European Commission for many use cases under the Brazilian LGPD, but the legal status of the adequacy decision should be verified. Transfers to the US rely on Standard Contractual Clauses in the RD Station data processing addendum. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------- | ------------ | -------- | --------------------------------------------------------------------------------- | | rd\_visitor | first\_party | 1 year | Persistent identifier used to recognise visitors across sessions for lead scoring | | rd\_session | first\_party | session | Stores the current session for the RD Station tracking tag | | rd\_event | first\_party | 30 days | Records the last event tracked by RD Station for funnel analysis | ### Third-party domains contacted (4) - `rdstation.com.br` - `rdstation.com` - `analytics.rdstation.com.br` - `cdn.rdstation.com.br` Questions ## Frequently asked questions about RD Station Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does RD Station set? The RD Station Marketing tag writes rd\_visitor (visitor identifier), rd\_session (session) and rd\_event (event tracking), plus auxiliary cookies for popups and lightboxes. The chat module adds session cookies on the conversas subdomain. ### Is consent required for RD Station? Yes. The tag writes to the user device and processes personal data for behavioural marketing, so Article 5(3) ePrivacy and Art. 6(1)(a) GDPR consent are required. Marketing emails also need a documented consent. ### Which GDPR legal basis applies? Consent for the tag, marketing emails and profiling. Legitimate interest for fraud and abuse prevention. Contract performance for transactional emails tied to a paid service. ### Are there transfers to the United States or Brazil? Yes. RD Station processes data in Brazil (no EU adequacy decision) and on AWS in the US. Both flows need to be covered by Standard Contractual Clauses; the US AWS leg can also rely on the EU US Data Privacy Framework when applicable. ### Do I need a DPIA? Recommended when RD Station combines lead scoring with sensitive content, when minors are reached, or when the cross border transfers are routine for EU subjects. ### How do I implement RD Station compliantly? Block the tag until consent, enable double opt in on forms, declare the Brazil sub processor, sign the RD Station DPA, set short retention and audit integrations. ### Are there alternatives to RD Station? EU based alternatives include Plezi (France), Webmecanik (France, open source), HubSpot EU residency, Brevo (France), GetResponse (Poland) and ActiveCampaign EU. ### How do I update my cookie policy for RD Station? List rd\_visitor, rd\_session and rd\_event with purpose, lifetime and controller. Add a transfer paragraph mentioning Brazil and the United States, with Standard Contractual Clauses and the EU US Data Privacy Framework where relevant. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [MailChimp for WordPress](https://www.flowconsent.com/en/services/marketing/mailchimp-for-wordpress) [MailChimp for WordPress is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. MailChimp for WordPress supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, MailChimp for WordPress remains a leading web.](https://www.flowconsent.com/en/services/marketing/mailchimp-for-wordpress) [Analytics](https://www.flowconsent.com/en/services/marketing/mailchimp-for-wordpress) · ### [Erxes](https://www.flowconsent.com/en/services/marketing/erxes) [Erxes is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Erxes provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Erxes helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/erxes) [Marketing](https://www.flowconsent.com/en/services/marketing/erxes) · ### [Listrak](https://www.flowconsent.com/en/services/marketing/listrak) [Listrak is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Listrak provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Listrak helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/listrak) [Marketing](https://www.flowconsent.com/en/services/marketing/listrak) · ### [Kangaroo Rewards](https://www.flowconsent.com/en/services/marketing/kangaroo-rewards) [Kangaroo Rewards is a customer loyalty and rewards platform designed to help businesses increase customer retention and lifetime value. It enables merchants to create customizable loyalty programs with points, tiers, referral bonuses, and exclusive rewards. Kangaroo Rewards integrates with e-commerce platforms and POS systems, providing detailed analytics on customer engagement and program performance. Kangaroo Rewards helps businesses build lasting customer relationships and drive sustainable revenue growth.](https://www.flowconsent.com/en/services/marketing/kangaroo-rewards) [Preferences](https://www.flowconsent.com/en/services/marketing/kangaroo-rewards) · ### [Vouchley](https://www.flowconsent.com/en/services/marketing/vouchley) [Vouchley is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Vouchley supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Vouchley ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/vouchley) [Preferences](https://www.flowconsent.com/en/services/marketing/vouchley) · ### [SchemaPlus](https://www.flowconsent.com/en/services/marketing/schemaplus) [SchemaPlus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SchemaPlus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SchemaPlus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/schemaplus) [Marketing](https://www.flowconsent.com/en/services/marketing/schemaplus) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)