Eventbrite and GDPR

[PeachAvocado]

I occasionally have to organise work events and have been asked to do a virtual one and promote tickets via Eventbrite. I need to put something about GDPR on there and I notice Eventbrite stores email addresses. Does anyone know if you can delete the eventbrite straight afterwards so that you no longer have the attendees email addresses? I can't see how to do this but I feel worried if I don't delete it in case it's storing peoples' email addresses. Sorry if that sounds silly - I'm fairly new to the role and no-one at work seems to know.

I've used the same platform and as a result eventbrite send me emails afterwards so I imagine they do store email addresses.

Thanks @zippityzip - I wonder if there is a way of me deleting the event as soon as it's taken place to stop them being stored. Hoping someone knows.......

Anyone else?

I think people consent to having Eventbrite store their email address as part of creating an account. Does the privacy policy give any clues?

@Ouchiehelpneeded

I think people consent to having Eventbrite store their email address as part of creating an account. Does the privacy policy give any clues?

This. Given the number of organisations that use eventbrite I'd be surprised if participants didn't already have accounts.

Thanks @ouchiehelpneeded I will have a look at it now.

Deleting your event won't affect whether eventbright store the email addresses, they are held centrally in their system not on your localised event if that makes sense. A lot of people use eventbright and it is easy for them to unsubscribe if they do not want to continue receiving emails, wouldn't have thought a problem. There will be other platforms you can use, what is the functionality that you need specifically?

I’m not sure,but their terms and conditions allow consumers to request E to delete their details. I think the data relationship is then between E and the consumers. E has a detailed GDPR policy. I’ll try to attach an extract.

Section 5.5 of the privacy policy covers the data that EB pass to organisers. I think it would be fine to say something like "we will only use your data to contact you about this event" or something. Most organisers don't say anything specific in my experience...

Thanks so much everyone who has replied - it's a really big help and most appreciated. Mumsnet is great for stuff like this :)

I remember checking out Eventbrite when I was a data protection officer and being happy with its approach to gdpr. It is all in the privacy policy

You need to speak to your data protection team at work a) Eventbrite is US based which is problematic after Schrems II b) third party services should be signed off by your organisation, no organisation is the same of course but you shouldn't be processing personal data on unofficial channels.