I run an event where people tend to book in groups, or families. Therefore on a booking a parent could register tickets for themselves and their children (under and over 16 of course).
Other bookings could be a group of friends where one person is booking 5 people in. How does this work for GDPR as I assume they can’t give consent for the others. Some of the details we require for registration are persona such as DOB, dietary requirements etc…
From what I can understand from GDPR, if we gather data from any source other than the individual themselves we have a responsibility to contact that individual, inform them of the data we have obtained and give them a copy of our privacy notice.