What is GDPR?

At Typeform, we take your data privacy and security seriously. This article explains the basics of the European General Data Protection Regulation (GDPR), and how it affects you.

What’s GDPR?

This is a European Union regulation, designed to improve the data security and privacy of European citizens. Find out more from the European Commission – the short version is “companies in Europe have to make sure your data is safe, and that you can access and control it”. Sounds like a good idea, right?

It’s about giving you greater security, transparency, and control of your personal data online. We think this is a good thing wherever you’re from, not just if you live in the European Union!

Frequently Asked Questions

We know you may have questions, so we’ve put together some of the most frequently-asked below. If you have more, please go to the bottom of this page, and click Contact Support.

We’ve tried to make it as easy to understand and simple as possible, as the world has enough endless legal documents that no one ever reads.

How can I exercise my GDPR rights?

Under GDPR in the European Union, we are all data subjects, and have certain rights.

If you have a Typeform account, this article explains how to exercise your GDPR rights:

How to exercise your GDPR rights

If you’ve completed a typeform and want to exercise your GDPR rights, see this article:

GDPR rights for respondents

What is a data subject?

Good point! A data subject is legal jargon for any living person whose personal data is being processed somewhere. So, that means pretty much all of us! We can’t, unfortunately, rewrite European Regulations without all the legal jargon, but we’ll try to explain it to you when necessary!

Do you have a Data Processing Agreement available to sign?

Section 4 of our Privacy Policy includes all obligations regarding the handling of personal data by the General Data Protection Regulation (GDPR). This means that there is no need for you to sign a separate Data Processing Agreement (DPA).

Our Privacy Policy was prepared in accordance with the GDPR, which has similar obligations as the California Consumer Privacy Act (CCPA). You can find the DPA and CCPA sections of our documentation here.

If you’d like us to sign a custom DPA, you can do that on an Enterprise plan - reach out to our Sales team here. As an existing Enterprise customer, contact your Customer Outcomes Manager, or reach out to our Sales team, if you’re new to Typeform. If you have further questions, you can contact our Support team.

How do I contact your Data Protection Officer (DPO)?

You can find our DPO’s contact details in our Privacy Policy. You can also contact Support and, we’ll help you in getting in touch with our DPO.

What does this mean for me?

If you’re a company, this means more transparency and visibility of how we process personal data. If you’re an individual, you don’t need to do anything! This all just means your data is safer than ever.