This document provides the full list of systems in scope of OneTrust’s Privacy Rights Automation module. These systems are automatically processed by OneTrust for all data deletion and data access requests made by guests through the RBI mobile app or website.
The list is subject to be updated over time, if other systems are added to the Privacy Rights scope. Note that third party systems will only be integrated with OneTrust if the Franchisee has a contract with the respective third party.
Systems in scope
RBI
AWS (RBI guest database)
Snowflake (RBI reporting)
Third parties
mParticle (customer data platform)
Braze (customer engagement platform)
Amplitude (customer analytics platform)
Branch (deep links)
Note: Forter is out of scope for Privacy Rights because it would interfere with this system’s ability to detect fraud. Forter has a well-documented GDPR exemption.