Data Use/Compliance for privacy

Robin Vidito

Good morning,  we use E-Tix for event tickets and museum admissions.  I am in the process of setting up a regular transfer of data from E-Tix into Raiser's Edge. 


Our IT Director asked me to research the subject and see if it requires an "opt-in" by the purchaser.  My understanding is that we (the non-profit) are by law, considered the controller of the data and that E-Tix is the processor.  And within that guideline, it does not require an opt-in by the ticket purchaser.  Can someone confirm that we are within standards of compliance for the United States and GDPR?

 

Crystal Bruce

Discussion moved to Raiser's Edge forums. Thanks!

John Heizer

To the best of my knowledge, U.S. and GPDR regulations are all platform agnostic. They don't care where and how you store the data. You can copy and move data as much as you want to as long as you're able to comply with privacy regulations.  Whether the data is only in E-Tix or is in both E-Tix and RE shouldn't matter.

Robin Vidito

Fantastic, thank you!