GDPR checklist for scheduling tools.
Scheduling tools store names, emails and calendar details of everyone who books a meeting. Compare 2 common tools and see what to check for each.
Calendly
Cal.comWhat to check for scheduling tools
- Show a short notice on the booking page.
- Check which calendar data the tool can read and write.
- Set a retention period for past bookings.
- Record the region and any transfer outside the EEA.
All scheduling tools
Questions, answered.
What should I check before using a scheduling tool under the GDPR?
Show a short notice on the booking page. Check which calendar data the tool can read and write. Set a retention period for past bookings. Record the region and any transfer outside the EEA.
Do I need a data processing agreement with a scheduling provider?
If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.
Which scheduling tools does Privacyboard cover?
Calendly, Cal.com. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.
Other categories
Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.