Skip to main content

Does RSVPify comply with the General Data Protection Regulation (GDPR) for EU customers?

Learn about the actions that RSVPify has taken to underscore our continued commitment to privacy and ensure compliance with GDPR.

Updated over 2 weeks ago

At RSVPify, we take data privacy and protection seriously, and we are committed to complying with the requirements of the General Data Protection Regulation (GDPR). We understand the importance of safeguarding the personal data of our users and their event attendees.

To ensure GDPR compliance, RSVPify implements industry best practices and security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. We collect and process personal data only for legitimate and specific purposes, with explicit consent from the individuals involved.

Our Privacy Policy clearly outlines the types of data we collect, how it is used, and the rights individuals have regarding their personal information. We provide easy-to-access mechanisms for users to update, modify, or delete their data, as well as to opt-out of any communications or data processing activities.

In the event that data is transferred to third-party service providers, we ensure that adequate safeguards are in place to protect the data during the transfer and processing. We conduct regular assessments and reviews of our data processing practices to maintain compliance and continually improve our data protection measures.

What Are SCCs?

At RSVPify, we’re committed to protecting the privacy and personal data of all our users—including those in the European Union. To help ensure compliance with the EU’s General Data Protection Regulation (GDPR), RSVPify utilizes Standard Contractual Clauses (SCCs) for data transfers from the EU to the United States.

Standard Contractual Clauses (SCCs) are legal contracts approved by the European Commission that provide a recognized mechanism for transferring personal data from the European Economic Area (EEA) to countries outside the EEA—like the United States—where privacy laws may not offer the same level of protection as under GDPR.

These clauses impose contractual obligations on both the sender and the receiver of the personal data to ensure that EU privacy rights travel with the data, regardless of where it’s processed.

How RSVPify Uses SCCs

RSVPify has implemented the latest European Commission-approved SCCs into our data processing practices. These clauses form part of our Data Processing Agreement (DPA) and apply to all customer data transferred from the EU to our U.S.-based infrastructure.

By incorporating SCCs:

  • We contractually commit to protecting EU personal data according to GDPR standards.

  • Our EU customers can continue to use RSVPify with confidence that their data is being handled lawfully and securely.

  • We ensure legal continuity for international data flows, even as privacy laws evolve.

Under GDPR, personal data of EU residents can only be transferred internationally if one of the approved safeguards is in place. SCCs are one of the most commonly used safeguards, particularly for U.S.-based services like RSVPify.

Do I Need to Do Anything?

If you're an RSVPify customer located in the EU or working with EU-based data subjects, SCCs are automatically included in our DPA.

If you have any questions or concerns about the handling of your personal data, please do not hesitate to contact us. We are committed to being transparent and responsive in addressing any inquiries related to GDPR and data privacy.


More Resources

Need more help? Get support from our Community Forum.
Find answers and get help from the RSVPify Support team and our community.

Did this answer your question?