The General Data Protection Regulation (GDPR) requires organizations to establish a lawful basis for processing data. A lawful basis for processing means that your organization has a legal right for collecting, storing, or accessing data belonging to a specific person. Often, a lawful basis for processing relies on consent from the Customer. With online scheduling, you may or may not need to obtain consent from Customers who book with you online.
Scheduling is customarily initiated by Customers. By this nature alone, you may not need consent to process information. However, if your organization processes sensitive data, it is recommended that you obtain explicit consent at the time of scheduling. This most likely applies to organizations in the healthcare industry, but other organizations may be affected as well. Data that is considered sensitive includes any information related to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union memberships, genetic or biometric data, health information, or a person’s sex life or sexual orientation. Learn more about establishing a lawful basis for processing
The GDPR defines consent as “freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.” Controllers that process on the basis of consent must clearly request consent and enable data subjects to withdraw consent at any time. The GDPR also states that if your request for consent occurs in the context of other matters, you should ensure that the request for consent is distinguishable from the other matters.
How to add a consent field to your Booking form
1. Go to the Booking forms editor and click Add Custom field to library (See Figure 2).
2. Create the Custom field by selecting the Field type, Field name, Field title and Option. We recommend using a Checkbox as the Field type, and creating one option allowing users to provide consent (See Figure 3).
5. Once you have created the field, add it to your Booking form by locating the field in the custom fields library and clicking the arrow to add it to the form (See Figure 5).
6. Next, you can determine the position of the field and whether or not it will be mandatory for Customers to check. It is recommended that this field be mandatory (See Figure 6).
You are all set! Your Booking form now requests consent for processing data. Be sure to attach this Booking form to the relevant Booking pages or Event types. Learn more about adding the Booking form to your Booking page and Event types