https://get.quicktapsurvey.com/gdpr/

GDPR Hub

Q&A

Now that the GDPR is officially here, we've put together some information on what the changes mean, what we've done to get ready, and how you can make GDPR-related requests.

Download the DPA

GDPR: What you need to know

What is GDPR and why does it matter?

The GDPR is a European Union regulation designed to improve and standardize the data security and privacy of European Union citizens. You can find out more about the specifics of the regulation here. In short, GDPR matters because it formalizes a higher standard for business policies and practices, and grants additional rights to Data Subjects in the EU. QuickTapSurvey is committed to meeting this higher standard not only for our customers in the EU, but for our customers around the world.

Bottom line: Your personal data will be safer and more private.

How has QuickTapSurvey prepared for GDPR?

Over the past several months, we've revisited our policies, procedures, and our approach to privacy overall. We've taken significant strides to make sure we're meeting our obligations under global privacy laws, and we will continue to make sure we're up-to-date as these laws change. Some of the key measures we've taken and continue to take are:

Updating our Terms of Service and Privacy Policy to be easier access, more concise, and more transparent about how and why we collect and process personal data
Enhancing internal data protection policies, with updated training for all employees
Creating a GDPR-compliant Data Processing Addendum which customers can enter into
Implementing a Data Subject Rights Program to make it easy for you to exercise your rights
Engaging with 3rd party vendors to make sure we have appropriate contractual measures in place
Updating our incident response and disaster recovery processes

Where do you store personal data?

QuickTapSurvey uses third party data hosting provider, Amazon Web Services (AWS) to store our data. AWS physically hosts the data in the United States. For more information on how AWS is compliant under GDPR, click here.

Are you EU-US Privacy Shield certified?

No. QuickTapSurvey is based in Canada, and the EU-US Privacy Shield and Swiss-US Privacy Shield apply to companies based in the United States. Canada has been determined to have adequate safeguards for personal data by the European Commission, which means personal data can be transferred from the EU to Canada.

What are data subjects, controllers, and processors?

A data subject is a living individual to whom personal data relates. A data controller is a person/entity who determines how and why to process personal data. A data processor is a person/entity who processes personal data on behalf of a controller.

If I use QuickTapSurvey, does that mean I'm GDPR compliant?

Not necessarily. GDPR compliance involves taking a look at multiple aspects of your business, including all of the vendors you might use to process personal data.

What is personal data?

Any information relating to an identifiable natural person (data subject). An identifiable natural person is one who can be identified by reference to an identifier. Identifiers can include names, ID numbers, location data, online identifiers, and more.

How do i keep up to date with your GDPR progress?

That part's easy. Just come back to this page - we'll continue to update it with any relevant changes.

Data Subject Rights

Under GDPR, EU citizens have increased Data Subject Rights. These rights include:

Right of Access
Right of Rectification
Right to Be Forgotten
Right to Restrict Processing
Right to Data Portability
Right to Object

For more information on GDPR and what these rights mean, click here. Exercising your rights may follow a different process depending on if you are a QuickTapSurvey customer, a prospective customer, or a person who has responded to a QuickTapSurvey survey. If you have responded to a QuickTapSurvey survey, the creator of that survey is the controller of the data you provided and you should make your Data Subject Request directly to that entity.

Data Processing Addendum

How to execute this DPA

Click on the link below to download the addendum. Once you've reviewed it and filled out your details and signature, send it to privacy@quicktapsurvey.com. Our team may need to confirm some of your account details with you. You'll receive the countersigned version in your email shortly thereafter. If you have any questions about the DPA, just get in touch and our team will be happy to assist you. If you have any issues executing this DPA, contact privacy@quicktapsurvey.com.

Make a Data Subject Request