EventBuilder's Role in Privacy Data

EventBuilder As a PII Processor

EventBuilder is a processor of your PII. This role is determined by both internal and external factors relevant to context and intended outcomes under ISO/IEC 27701 framework. Internal factors include EventBuilder's commercial purpose and contractual obligations to customers. External factors include legal and regulatory requirements that apply to our commercial activities, meeting the standards of the GDPR, CCPA, and any federal and state consumer privacy laws.

Our Customers' Responsibilities as a PII Controller

Our customers are the controller of PII. As such, they are responsible for collecting personal information, determining what to collect, changing or modifying collected information, how the PII will be used, and for what purpose. The PII controller also decides how long the data is kept, and when to dispose of it.

Consumer Privacy Rights and Privacy Record Requests

Consumer Privacy Rights are available in the EventBuilder Privacy Notice , Section 6, paragraph b. If you are an account holder or portal owner and receive an email from EventBuilder indicating we have received a Consumer Privacy Request from someone associated with your portal:

1. Please respond in a timely manner to indicate that you have received notification of the request. Here is an example of what the emails might look like:

Hi Tall Green Tree team,

This message notifies you that on May 1, 2023, EventBuilder received a Consumer Privacy Request from a consumer whose data resides on the Tall Green Tree Portal on the EventBuilder software. 

As a data processor to Tall Green Tree, EventBuilder is required to promptly notify your team when we receive a Consumer Privacy Request from an attendee of your Event(s). Please respond within 5 business days to confirm that you have received this notification and understand the required actions for you as the Controller.
 
I am providing a secure link for the recipients of this email who have a named user and not a generic email alias on their EventBuilder account, to access the Consumer Privacy Request information: <Secure OneDrive Link should be inserted here>  Please note that we will maintain a record of this request, but the linked file will be permanently deleted 10 business days from today.

Directions to redact or delete registrant data in EventBuilder software can be found in our Registrant Management Knowledge Base article. Redacting a Registrant's information still allows them access to their Event. A redacted Registrant's name, email, and other identifiable information will not appear in Event Reports. Deleting (canceling) an individual's Registration means they will no longer have access to the Event.

Please contact privacy@eventbuilder.com if you have any questions. EventBuilder will support your team as necessary so that you can fulfill this request as required by law.

This notification is governed by EventBuilder’s Privacy Notice available at  https://www.eventbuilder.rocks/legal-privacy-security-certifications-info

Have a great day!