Choice of legal basis for processing of personal data (applies to all events)

You must always have a legal basis to collect an attendee’s personal data, and you must inform the attendee of the collection. In EasySignup, there are three to four different types of processing of the attendees' information, which the attendees are informed about in the cookie and privacy policy in the terms of registration.

The types of processing are:

• Processing of the information entered, i.e. the information an attendee provides in connection with the registration for an event.
• Processing of information when an attendee visits the registration page.
• Processing of information when an attendee receives a payment reminder by e-mail.
• Processing of information in relation to passing on the list of attendees.

The processing of information in relation to an attendee receiving a reminder by e-mail is only relevant if there is payment to attend the event in question.

In the cookie and privacy policy in the terms of registration, a number of legal bases for why you may collect personal data for the proccessing described above have been inserted by default as standard.

You can choose to change the legal basis for processing personal data if your legal basis for processing personal data makes it necessary to adapt the standard in the cookie and privacy policy in the terms of registration. However, you cannot opt out of certain legal bases for the processing of personal data, as EasySignup is used for the administration of events.

If sensitive personal data is collected for an event, you must insert information for the attendee about the processing of the sensitive personal data in connection with the creation of the sensitive personal data. This happens on the individual event under the tab "Registration" -> "Attendee information" when you edit it. See how to insert information about processing of sensitive personal data in this guide.

There may be a difference in the legal basis for processing personal data, depending on whether a payment is required to attend the event or not. If it is possible to accept payment for an event on the account, it will be possible to set the account's legal basiss for events with and without payment.

Below you can see how you can change the legal basis for processing personal data in general for all events.

• Find the account settings under Account→Settings.

• Find the personal data tab. Here you will find the section "Legal basis for processing of personal data", where you can change the legal basis for processing personal data under the 4 types mentioned at the beginning of this guide.

• "Standard legal basis" is selected by default. If that is not sufficient, you can choose "Other legal basis" (1), after which you can choose the article or articles (2) that apply to your processing. You can choose to see a preview of the terms of registration based on your choices (3).

• Remember to press "Save settings" at the bottom right to save your choices.

Note: The new settings will only take effect for events when the terms of registration for each event have been approved again. This means that events that are published will show the old legal basis until you agree to the terms of registration for each of these again.

You can also change the legal basis for processing personal data on a single event if it needs to deviate from these general settings. See how to deviate from the general settings in this guide.