Exhibitors consent

Discussion in 'General Data Protection Regulation (GDPR) Forum' started by Rileycat, Mar 7, 2018.

  1. Rileycat

    Rileycat UKBF Newcomer Free Member

    1 0
    Can anyone help out with a question relating to exhibitors consent? So our company manages online events which includes exhibitions. Users need to register and give consent to be contacted by the exhibitors perhaps to market their products/services going forward. Question is, do we have to gain the users consent in relation to every single exhibitor separately or can this be done as a group consent? Presumably if it's singular consent then we must capture a date and time stamp for each consent separately. Also, as the full list of exhibitors isn't known or finalised when registration is open then what would be the most compliant way to manage this? Do we have to notify users each time a new exhibitor joins and ask the user to provide consent? I can't seem to find anything specific on this anywhere on line (possibly looking in the wrong places! :)) but it's going to impact how we develop our system to make it compliant so it's vital we get it right! Any help much appreciated! Thanks
    Posted: Mar 7, 2018 By: Rileycat Member since: Mar 7, 2018
  2. fisicx

    fisicx It's Major Clanger! Staff Member

    29,337 8,652
    It looks like you are the data controller and the exhibitors are the data processors.

    This means you are responsible for the data and you are the one who needs to obtain consent.

    This is a good place to start your investigation: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/

    However, consent has to be explicit. The checkbox has to explain exactly what they are agreeing to and as the data controller you are responsible to allowing them to unsubscribe.

    There is lots of really good information here: https://ico.org.uk/media/for-organi...neral-data-protection-regulation-gdpr-1-0.pdf
    Posted: Mar 8, 2018 By: fisicx Member since: Sep 12, 2006
  3. Keith Budden

    Keith Budden UKBF Contributor Full Member

    77 10
    As fisicx says, consent has to be voluntary and it has to be explicit, so I think in an ideal world you would need specific consent for each exhibitor. It is a tricky area though, so you would be wise to get individual advice on a case by case basis.
    Posted: Mar 30, 2018 By: Keith Budden Member since: Mar 30, 2018