Is your WhatsApp integration GDPR compliant?

For Lime Connect accounts opened before June 13, 2025:

The contractual relationship
The integration runs through the official WhatsApp Business API and requires verification by WhatsApp/Facebook. Our certified partner and official Business Solution Provider 360dialog handles the communication with Facebook and will support you at every step of this process.
Lime Connect provides an interface to 360dialog. With our WhatsApp channel, you have an interface to receive and respond to WhatsApp messages in your Lime Connect Message Center.
All messages you receive via Lime Connect (regardless of which channel they come through, such as WhatsApp, Threema, SMS, etc.) are processed within our system by our hosting service provider Hetzner Online GmbH in Germany. If you send messages to external systems, e.g., via the WhatsApp channel, the service providers of the external systems are in a direct contractual relationship with you.
Your company therefore enters into contractual relationships directly with 360dialog and WhatsApp (through your Business Manager Account).
Starting April 12, 2024, the hosting of data for WhatsApp messages is provided via Meta's Business Platform through their cloud servers. For this, you also enter into a contractual relationship with Meta.
Data processing
As with our website chat, you receive the messages and contact details from messaging app channels like WhatsApp as part of conversations. This means the contact details and messages that you process from your customers via the WhatsApp API can be accessed through "All Conversations".
However, WhatsApp independently collects user data when using WhatsApp, which is regulated through consent to WhatsApp's terms of use. This data collected by WhatsApp is not processed by you or the WhatsApp Business API.
The controller for the WhatsApp messenger service under GDPR is WhatsApp Ireland, and the responsible supervisory authority under GDPR is the Irish Data Protection Authority.
The terms for hosting with Meta can be found here:
What is special about the WhatsApp Business API?
Unlike WhatsApp Business, address book data is never automatically synchronized when using the WhatsApp Business API and therefore not sent to WhatsApp.
When you use the API, you don't deploy a WhatsApp app. Instead, the infrastructure is set up by a "Business Solution Provider" who is certified by WhatsApp to ensure responsible handling of the API. With our interface, you then have the platform to communicate with your customers via WhatsApp. Messages between WhatsApp and the 360dialog API are end-to-end encrypted.

For Lime Connect accounts opened after June 13, 2025 OR existing accounts that wish to connect WhatsApp in a new organization as of June 13, 2025:

The contractual relationship
The integration runs through the official WhatsApp Business API and requires verification by WhatsApp/Facebook. You also need a verified Meta Business Account before you can proceed.
With our WhatsApp channel, you have an interface to receive and respond to WhatsApp messages in your Lime Connect Message Center. All messages you receive via Lime Connect (regardless of which channel they come through, such as WhatsApp, Threema, SMS, etc.) are processed within our system by our hosting service provider Hetzner Online GmbH in Germany. If you send messages to external systems, e.g., via the WhatsApp channel, the service providers of the external systems are in a direct contractual relationship with you.
Your company therefore enters into contractual relationships directly with Meta and WhatsApp (through your Business Manager Account).
Since April 12, 2024, the hosting of data for WhatsApp messages has been provided via Meta's Business Platform through their cloud servers. The terms for hosting with Meta can be found here: https://www.facebook.com/legal/Meta-Hosting-Terms-Cloud-API
Data processing
As with our website chat, you receive the messages and contact details from messaging app channels like WhatsApp as part of conversations. This means the contact details and messages that you process from your customers via the WhatsApp API can be accessed through "All Conversations".
However, WhatsApp independently collects user data when using WhatsApp, which is regulated through consent to WhatsApp's terms of use. This data collected by WhatsApp is not processed by you or the WhatsApp Business API. The controller for the WhatsApp messenger service under GDPR is WhatsApp Ireland, and the responsible supervisory authority under GDPR is the Irish Data Protection Authority.
What is special about the WhatsApp Business API?
Unlike WhatsApp Business, address book data is never automatically synchronized when using the WhatsApp Business API and therefore not sent to WhatsApp.
When you use the API, you don't deploy a WhatsApp app. Instead, the infrastructure is set up by a partner who provides access to the interface (API). With our interface, you then have the platform to communicate with your customers via WhatsApp. Messages between WhatsApp and the Meta Cloud are end-to-end encrypted.