Valimail only collects DMARC aggregate reports on behalf of their customers. 

Valimail’s infrastructure is GDPR-ready, Privacy Shield certified and SOC2 Type 2 compliant. And we handle no PII (personally identifiable information), so you’re not putting any customer data at risk when you use us to automate your DMARC deployment and management.

For more information please see the blog post below and this link to our privacy policy which have more information:

How DMARC can facilitate GDPR Compliance.