GDPR & security

GDPR-compliant event registration tool.

How your attendees’ data is handled matters to us. Every registration is stored in our database in Frankfurt. Before an analysis goes to the AI, our server removes your guests’ names, email addresses and phone numbers.

What it means

What “GDPR-compliant” actually means for event registration.

A tool like signUP keeps the processing inside the tool compliant. Responsibility for how the data is used stays with you as the organiser.

But we make that work easier by collecting only the data you need, saying clearly where it sits, and explaining how it is processed.

Data locations

Where your attendees’ data sits.

All data your guests submit when registering is stored in our database in Frankfurt. We explain data processing in three parts: What happens to attendee data? What happens when someone opens your event site? And what data do we use when you create an event website in signUP?

Your guests’ registration data

Names, contact details and every answer from the form. It is stored and sent inside the EU.

AreaPurposePlace of processing
DatabaseEvents, forms, registrationsFrankfurt, EU
Emails to your guestsConfirmations, reminders and cancellations, unless you use your own SMTP serverIreland, EU
AI analysis of your guest listThe analysis does not run automatically; it must be started manually. Fields containing names, contact details and addresses are not passed on to the AI. In the remaining answers, your guests’ names, email addresses, links and long digit sequences are redacted.Without names, email addresses or phone numbers

When a guest opens your event site

This is not about registration data, it is about the page request: IP address and browser. The registration itself runs back into the database in Frankfurt.

AreaPurposePlace of processing
Delivery of the event siteSo the page loads quickly everywhereglobal delivery network

While you build in signUP

No attendee data is involved here, you are working on templates.

AreaPurposePlace of processing
Design analysis for the signUP Brand ScanOpens your company website and reads colours, type and logoFrankfurt, EU
AI for content and translationsGenerates the form, the page, text and translations from what you enterNo processing of attendee data
In plain terms

All registration data submitted by your guests is stored in Frankfurt. The AI receives no names, email addresses or phone numbers of your guests.

AI and attendee data

Does attendee data go to an AI?

For generation, translation, the editor and the signUP Brand Scan the AI needs no attendee data. What is sent are your own entries for the form and the event site, and your brand’s design values.

The AI analysis of your registrations also works without your guests’ names, email addresses and phone numbers. Name, contact, address, ID, bank and company details, comment fields and other personal field types are removed server-side before the data set is analysed. In the remaining answers the server also masks your guests’ names, email addresses, links and long digit sequences.

Data minimisation: only ask for what you need

The most effective data protection in a registration is asking less. Every field you do not collect is one you need neither protect nor delete nor justify.

  • Use conditional logic to show fields only when they are genuinely relevant
  • Make fields required deliberately; much of it can be optional
  • Internal fields for your own notes that never appear publicly

Consent and required fields in the form

Legal fields land automatically in their own final step during generation, instead of getting lost between address fields.

  • Consents, notices and checkboxes gathered in one place
  • You supply the wording and the content yourself
  • Which consent you need and how your privacy notice reads depends on your event and is up to you as the organiser
Roles and permissions

Clear responsibilities for your team.

Define who manages signUP, works on events and can access each area.

Role model

Assign responsibilities within your account through clearly defined roles.

  • Admins manage the team, domains and sender addresses
  • Managers work on events
  • Read-only users can view the guest list without changing data

Assign permissions deliberately

For each manager, enable the areas that fit their tasks.

  • Settings
  • Form and event site
  • Guest list and publishing

Protected team access

Two-factor authentication protects your account alongside your password.

  • Sign in with your password
  • Confirm with a code from your authenticator app
FAQ

Frequently asked questions.

All data your guests submit when registering is stored in our database in Frankfurt.

Your guests’ registration data

Names, contact details and every answer from the form. It is stored and sent inside the EU.

AreaPurposePlace of processing
DatabaseEvents, forms, registrationsFrankfurt, EU
Emails to your guestsConfirmations, reminders and cancellations, unless you use your own SMTP serverIreland, EU
AI analysis of your guest listThe analysis does not run automatically; it must be started manually. Fields containing names, contact details and addresses are not passed on to the AI. In the remaining answers, your guests’ names, email addresses, links and long digit sequences are redacted.Without names, email addresses or phone numbers

When a guest opens your event site

This is not about registration data, it is about the page request: IP address and browser. The registration itself runs back into the database in Frankfurt.

AreaPurposePlace of processing
Delivery of the event siteSo the page loads quickly everywhereglobal delivery network

While you build in signUP

No attendee data is involved here, you are working on templates.

AreaPurposePlace of processing
Design analysis for the signUP Brand ScanOpens your company website and reads colours, type and logoFrankfurt, EU
AI for content and translationsGenerates the form, the page, text and translations from what you enterNo processing of attendee data

No names, email addresses or phone numbers.

For generation, translation, the editor and the signUP Brand Scan the AI needs no attendee data.

The AI analysis of your registrations also works without them: name, contact, address, ID, bank and company details, comment fields and other personal field types are removed server-side before the data set is analysed.

In the remaining answers the server masks your guests’ names, email addresses, links and long digit sequences.

The database restricts browser access to your own company with row-level security, and server functions additionally check company membership in code.

If a client’s data has to stay strictly separate, we set up a workspace of its own for it.

Yes. The data processing agreement (AVV) is part of our terms and applies without a separate signature.

You can read it here as a PDF (in German); the sub-processors are listed in Annex 3. For questions about it, write to hallo@sign-up-events.com.

Yes. When you embed external maps or videos on your event site, a consent banner appears automatically. These elements only load after consent.

Guests can allow all external providers, reject them or choose individually, and change or withdraw their decision at any time via “Privacy settings”.

Registration works without these elements too. Without external maps or videos, this banner is not displayed.

Get started with signUP.

Get in touch and we will talk about your use case.

Request a demo