Yes, our tracking solution is GDPR compliant by processing the data in the following way:

Our tracking solution is sending raw data to our data pipeline. This raw data, next to other data points, contains the IP address as the only data point that is deemed as PII data. We anonymise this IP address in the enrichment process and assign a hashed ID to it, that will replace the IP address itself.

The IP address will be kept in our raw events logs though for 30 days after which we fully clear our events logs including all the IP addresses. The reason for storing this for 30 days is that we would like to be able to backup and restore data in a critical event.
​
The data is stored in the eu-central-1 zone (Frankfurt).