Is Diller allowed to transfer information to third-party entities via integrations?
Edited
In the case of integration with e.g. Mailchimp, Klaiyo, or other third-party vendors; are you as the owner of the loyalty program and Diller allowed to transfer information from the loyalty program to these third parties?
This is legal. The store owns the loyalty program and is the data processor, and it is the data processor that transfers data. Diller is the data controller.
When a data processor connects to an integration, this is not counted as a transfer.
The data processor is the extension arm of the data controller. Diller is not a third party to the store that owns the customer program, we are part of the store. Diller processes customer data on behalf of the store.