Here's your GDPR Toolkit - Meet the consent requirements

GDPR sets a higher standard than ever before for what’s acceptable as far as marketing consent goes.

At Nutickets, we’ve added some new tools to our platform to enable you to record and manage consent in line with the new requirements.

What are the rules?

The rules around consent can be broken down into 3 areas:

• Asking for consent
• Recording consent
• Managing consent

In this guide, we’ll cover each area and demonstrate how you can use our tools to meet the criteria set out by the new regulations.

Asking for Consent

Requirements

There are new rules set out by the GDPR regarding how you ask people for consent, meaning there are some new things you need to do and new things you need to tell people.

What you need to do:

• Keep requests separate from other terms and conditions
• Ask for positive opt in and don’t use pre-ticked boxes
• Provide separate opt ins for different types of processing
• Allow the individual to say no, without any hindrance to their service
• Use plain, clear language to ask for consent

What you need to tell people:

• Name your organisation and any third parties reliant on the consent
• That they can withdraw their consent and how

The Solution

So that you can ask people for consent in the right way, we’ve made a few small changes to our Ticket Shop.

Now, every time a new customer signs up to one of your events, they’ll see the following screen and be asked to confirm their marketing preferences:

We keep the requests separate to other terms and conditions, never use pre-ticked boxes and we don’t stop them from using the service if they don’t consent to receiving marketing messages.

We’ve also added a new section to your Nutickets dashboard called “Marketing Preferences” where you can edit the text displayed in this form when asking for consent.

You can access these new settings by going to My Account > Marketing Preferences and pressing “edit text”.

Recording Consent

Requirements

GDPR also sets out new rules around recording consent. In particular, you need to make sure that you keep a record of:

• When and how you received the consent
• Exactly what they were told at the time

The Solution

With the latest update, you can access this information about each customer by following the below steps:

• Log into your Nutickets dashboard
• Go to Sales > Customers
• Search for the customer
• Press Options > View Details

From here, you’ll be provided with the customer’s profile.

If you scroll down to the bottom you’ll see the “Marketing Preferences” section with all the details of how they consented, when they consented and what they were told at the time.

If you wish to export a list containing details of all your customer’s consents, you can do so by going to Sales > Customers and pressing “Export attendance” at the bottom of the page.

Managing Consent

Requirements

Finally, the GDPR sets out rules around managing ongoing consent.

The GDPR asks that you regularly review your consent and check that the relationship, processing and purposes have not changed since you acquired the consent.

Additionally, you need to make sure you:

• Have processes to refresh consent at appropriate intervals
• Make it easy for people to withdraw consent and tell them how
• Act on withdrawals of consent as soon as possible
• Don’t penalise individuals for withdrawing consent

The Solution

Of course, we’ve implemented a few changes to help you meet these criteria too.

Should you wish to ask your attendees to update their consent the next time they log in, you can do so easily by simply pressing “update” in the “edit text” section of the Marketing Preferences.

You don’t actually need to change the text here, just pressing update will log the time when the texts were changed – prompting your users to re-consent when they next log in.

Alternatively, if you wish to ask your customers every time by default, you can do so by visiting the “advanced settings” section of the marketing preferences.

In here you’ll find options for managing the frequency of consent requests, as shown below:

TIP: To improve your compliance, we would further recommend that you add a link to your Terms and Conditions & Privacy Policy.

If your customers want to update their consent for themselves, they can do so at any time by visiting the marketing preferences section of their account page.

Don’t worry, even if they opt out of a particular type of consent, they’ll still be able to use our services and purchase tickets from you just the same.

The consent changes can be a lot to take in, but we’re here to help you through them!

If you need further explanation, feel free to get in touch.