GDPR and surveys: what you need to know

GDPR applies to your surveys

As soon as you collect data that can directly or indirectly identify a person (email, name, IP address), GDPR applies. And yes, this includes surveys.

Essential rules

Informed consent: the respondent must know what you will do with their data before answering. A clear introductory text is sufficient.

Minimization: only collect data that is strictly necessary. If you don't need the email, don't ask for it.

Retention period: define how long you keep responses and delete them once that period has passed.

Right of access and deletion: any respondent can request to view or delete their data. You must be able to do so.

Best practices

Prefer anonymous surveys when possible. If you need to identify respondents, separate identification data from responses.

Quervey is hosted in France and designed for GDPR compliance by design. Data is encrypted, exports are controlled and deletion is straightforward.