As part of our continued commitment to our user's safety, security and privacy -- as well as that of their guests -- RSVPify will continue to ensure industry best practices and compliance with with the General Data Protection Regulation (GDPR), a new EU data privacy regulation that will go into effect May 25, 2018. The regulation is designed to give EU citizens more control over their data and to unify a number of existing privacy and security laws under one comprehensive law.
Our product team has analyzed the requirements of the GDPR to ensure that our data policies and procedures comply with GDRP regulations and guidelines, and RSVPify will continue to monitor new guidance on best practices for implementing the requirements of the GDPR. We have updated our Terms of Service, products, policies and procedures to match and adhere to the tenants outlined by these new global regulations.
What RSVPify is Doing
RSVPify has updated its Privacy Policy and Terms of Service in an effort to offer an even greater degree of transparency as it pertains to what personal data is collected and how it is used. We have also made some tangible changes to the way in which we store and retain event host and guest data. Below are a few examples of initiatives RSVPify undertaked in order to satisfy GDPR requirements that apply to both RSVPify's event hosts (admins) and their guest data (if applicable):
Account Closure / Deletion:
RSVPify will maintain personal (user and guest) data for any events in the admin's account for up to 120 days after account closure after which time it will be permanently removed and unrecoverable.
Any data contained within any RSVPify accounts that were closed before May, 25 2018 will be permanently removed and will be unrecoverable after September 25, 2018.
Manual Event Deletion:
RSVPify will maintain event and guest-level data (RSVPs and Guest List) for up to 120 days after an event is manually deleted by the account admin.
Any data event and guest-level data associated with any events that were manually closed / deleted before May, 25 2018 will be permanently removed and will be unrecoverable after September 25, 2018.
Manual RSVP Deletion:
RSVPify will maintain event and guest-level data (RSVPs and Guest List) for up to 120 days after an event is manually deleted by the account admin.
Any data contained within any RSVPify accounts that were closed before May, 25 2018 will be permanently removed and will be unrecoverable after September 25, 2018.
Any RSVPs (guest submissions to an individual event) are immediately and permanently deleted from all RSVPify databases when the event host ("user") deletes an RSVP from their dashboard.
Individual Manual Guest / Party Deletion:
When an event host deletes a guest / Party from their Guest List, all of the details associated with the guest(s) within that Party (guest first and last names & email(s)) are permanently deleted from our system and are not recoverable. Note that this action is already in effect and the team is considering an improvement to introduce a 120-day recovery / grace period similar to the other scenarios outlined in this section of the article.
Bulk Manual Guest / Party Deletion (DELETE ALL):
Similar to the individual guest / Party deletion, all of the details for all of the guests / Parties in a Guest List are permanently deleted from our systems when a host performs the action 'DELETE ALL' are removed from our system and are not recoverable.