How do I exercise my GDPR rights?

GDPR (the European General Data Protection Regulation) is designed to give you more rights and control over your personal data. When a company has information from which you can be directly or indirectly identified, you now have rights over what happens to that data. Here’s how to take advantage of them.

What’s ‘personal data’?

‘Personal data’ could be your name, ID number, location data, an online identifier of yours, or even your physical, physiological, genetic, mental, economic, cultural or social identity.

OK, so how do I find out about this data?

Whether you’ve created a typeform, or have responded to one, this guide is intended to provide you with all the info you need to exercise your rights, or facilitate your users to exercise theirs. The rights included in GDPR are:

  • The right of access
  • The right to rectification
  • The right to erasure (right to be forgotten)
  • The right to data portability
  • The right to object

How you exercise these rights will differ depending on whether you are a Typeform user collecting responses, or if you are a respondent to a typeform.

Typeform users can exercise their rights directly with us, but respondents should contact the person or organization which created the typeform. We’ll do our best to help respondents get in touch with the creator of a typeform if they are unable to contact the creator alone.

I’m a respondent and I’ve sent my personal information through a typeform

If you’ve sent personal data through a typeform and want to exercise your data subject rights, we recommend that you contact the person or organization that created the typeform. If this isn’t possible, please contact us and we will do our best to put you in touch with the creator of the form. We’ll also do this if you’re a Typeform user that has answered someone else’s typeform. You can learn more here.

I’m a Typeform user and I collect personal information through typeforms

As our Privacy Policy states, you are responsible for the data collected by typeforms created by you, as well as having the rights to use this data. If we receive a data subject request from someone who has sent personal information to one of your typeforms, we will ask for their permission to provide you with their contact information. If they authorize us, we’ll contact you with their request and it’s your responsibility to comply. You can access and download the results of your typeforms, and also delete results individually or in bulk.

I’m a Typeform user and I want to exercise my right to access the data you store about me

Contact us if you want to exercise your right to access the data we store about you, and we’ll be happy to help. Learn more about the right to access your data here.

I’m a Typeform user and I want to exercise my right to rectify the data you store about me

You can manage your account details from your Account settings, and your billing details from the Plan + Billing section. Click here for more details about what you can fix or change.

I’m a Typeform user and I want to exercise my right to erasure (right to be forgotten)

You can delete your account, along with all the typeforms and responses on it from your My Account page. Once deleted, accounts, typeforms or responses cannot be recovered! So make sure you really want to be forgotten before you hit delete. Click here for more information.

I’m a Typeform user and I want to exercise my right to data portability

You can currently export the results of your typeforms from the Results panel. You can also export the structure and questions of your typeforms (form definitions) one by one using the Create API. Soon you’ll be able to do it on an account level from your Account settings. Click here for more about how typeform data and form definition portability works.

I’m a Typeform user and I want to exercise my right to object the data you store about me

Please contact us if you want to exercise your right to object to the data we store about you, and we’ll be happy to help you.

I’m a Typeform user and I want to opt in or out of communications from Typeform

We will have to send you some communications – usually email – for operational reasons (what GDPR calls ‘transactional communications’), but you can opt in or out of everything else. Learn how to opt in or out of emails here.

Still got questions? Drop us a line and our Support team will be happy to help you!