Back to Documentation
GDPR Compliance
How AItocha Surveys helps you comply with the General Data Protection Regulation.
Our Commitment to GDPR
AItocha Surveys is fully committed to GDPR compliance. We act as a data processor on your behalf when you collect survey responses.
Key Points:
- We process data only as instructed by you
- Data Processing Agreements (DPAs) available
- Data stored in secure EU and US data centers
- Subprocessor list available upon request
Data Subject Rights
We help you fulfill data subject requests:
Right to Access
Export all responses from a specific email address to fulfill access requests.
Right to Rectification
Edit or update individual response data through the dashboard.
Right to Erasure
Delete specific responses or all data from a respondent.
Right to Data Portability
Export data in machine-readable formats (CSV, JSON).
Consent Management
Tools to help you collect valid consent:
- Customizable consent checkboxes on surveys
- Link to your privacy policy
- Record of consent with timestamp
- Opt-out mechanisms for follow-up communications
Data Processing Agreement
A DPA is required when we process personal data on your behalf. Our DPA covers:
- Nature and purpose of processing
- Types of personal data processed
- Categories of data subjects
- Security measures in place
- Subprocessor obligations
- Breach notification procedures
Data Retention & Deletion
Control how long data is retained:
- Set automatic data retention periods
- Manual deletion of individual responses
- Bulk deletion tools
- Account deletion removes all data permanently
Your Responsibilities
As the data controller, you should:
- Have a lawful basis for collecting data
- Inform respondents about data collection
- Provide a link to your privacy policy
- Respond to data subject requests within 30 days
- Report data breaches within 72 hours