GDPR: Role and Compliance
The General Data Protection Regulation (GDPR) is the most significant legislative change in European data protection laws in over two decades, effective on May 25, 2018. The GDPR strengthens the security and protection of personal data in the European Union and serves as a single piece of legislation for all of the EU. It replaced the EU Data Protection Directive (Directive 95/46/EC introduced in 1995) and all local laws relating to it.
EventBuilder’s role under GDPR
We act as both a data processor and a data controller under the GDPR.
EventBuilder as a data processor: When customers use our products and services to host or promote events, we act as a data processor. For example, we will be a processor of EU personal data submitted at the time of registration. This means we will, in addition to complying with our customers' instructions, need to comply with the legal obligations that apply directly to processors under the GDPR.
EventBuilder as a data controller: We act as a data controller for the EU customer information we collect to provide our products and services and to provide timely customer support and technical assistance. This customer information includes things such as customer name and contact information.
EventBuilder's compliance with GDPR
EventBuilder supports the GDPR and all EventBuilder services comply with its provisions. The GDPR is an important step in protecting the fundamental right of privacy for European citizens.