Host GDPR Compliant Events

At Livestorm, data security and confidentiality are core priorities. The General Data Protection Regulations (GDPR) is our best ally to protect your personal information when you use Livestorm. We are fully committed to keeping your data secure and confidential, and we are working tirelessly to perfect our compliance with the GDPR. Confidentiality is our number 1 priority, and here at Livestorm we guarantee to treat you and your attendees' data with the utmost respect.

Here's everything you need to know about Livestorm and the protection of your data!

Organizer Compliance Obligations#

As the data controller for your events, you are legally responsible for the personal data you collect. To remain GDPR-compliant, you must observe the following principles:

• Data Minimization: Only collect essential information on your registration forms. Do not request fields or data points that you do not actively require for the event.

• Compliant Field Selection: Ensure that the nature of the questions and custom attributes you request adheres fully to EU privacy regulations.

• Consent-Based Invites: Do not use the bulk event invitation feature for contacts who have not explicitly opted into receiving your marketing communications.

• Third-Party Integrations: Verify that any external platforms or CRMs integrated with your account are fully GDPR-compliant before transmitting attendee data.

Opt-in to Livestorm's Privacy Policy and Terms#

You'll see our Privacy Policy and Terms & Conditions right out in the open in the registration form. 

Those who register to your event will have to give their explicit acknowledgement of Livestorm's terms of service and privacy policy to complete their registration. We will stock the consent of our registrations as it's required by the GDPR. It looks like this ↓

Sending Registrations to Livestorm via Zapier#

If you choose to opt for this method, please make sure to collect consent from your registrants to use their data. This is required if you will be using their data to register them yourself.

Here's the consent your registrants have to give to register for your event on Livestorm:

Custom Consents#

If you plan to use registrant details for downstream sales or marketing outreach, you should append your own custom consent checkbox to the registration form. This keeps your marketing opt-ins clearly isolated from the core event registration consent.

To configure this, navigate to your event registration settings. For detailed setup steps, review our documentation on 👉Add Your Own Custom Consents.

Respond to Requests for an Exercise of Rights#

As the responsible person for all attendee data associated with your account, you may need to receive requests from others to exercise their right to data privacy (deletion, access, limited processing, etc.). Feel free to consult our complimentary articles related the exercise and implementation of these rights in Livestorm:

• Deleting a Registrant (for admins)

• Deleting the Livestorm account

• Extract a file containing someone's data

In strict compliance with the GDPR, you must formally respond to and execute an attendee's data privacy request within 30 days of receipt.