import StyleClasses from "../style-css/html-classes-of-formbricks-react-form-library-to-custom-style-surveys-and-forms.png";
export const meta = {
title: "Text Input - Formbricks React Form Library",
title: "Textarea Input - Formbricks React Form Library",
};
The `textarea` input uses HTML's [native textarea input](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/textarea) . It allows a user to enter multiple lines of text and is resizable in most browsers.
import Layout from "@/components/shared/LayoutMdx";
import { Callout } from "@/components/shared/Callout";
import { Checkbox } from "@formbricks/react";
export const meta = {
title: "How to create a GDPR compliant form",
@@ -10,7 +11,7 @@ export const meta = {
the implications of how GDPR applies to your business.
</Callout>
## Creating a GDPR compliant form with Formbricks
## **Creating a GDPR compliant form with Formbricks**
In our [Privacy Policy](/privacy-policy) we inform you about your rights and responsibilities using Formbricks. A quick recap: You are the data controller of the data you collect from your respondents using Formbricks forms and surveys. We are the data processor.
@@ -20,15 +21,19 @@ It is **your responsibility to create a GDPR compliant form when you collect per
You have to collect consent from your respondents to comply with the GDPR framework. The consent must be freely given, specific, informed, and unambiguous. It has to be very clear why you collect personal data, how you intend to use it and if it will be shared with any third parties. The respondent has to be aware that they are giving you permission to use their personal data.
This is usually done with a seperate checkbox.
### 2. Inform respondents about their rights
In the same way we inform you about your rights in our [Privacy Policy](/privacy-policy), you have to inform your respondents about their rights in your privacy policy. They have the right to request all personal data you have stored about them as well as a deletion of it. If they request it, you can delete their submission in your dashboard to respect their right of deletion. The data will be removed from our backups within 90 days.
## Put into practice
This is usually done in a Privacy Policy you link to in the form.
## **Put into practice**
You should add a checkbox fieldto your form to collect opt-in consent from your respondent. The checkbox can not be pre-checked. Make sure to add multiple checkboxes (with explanation), if you're planning to use the personal data for multiple actions. For example:
[ ] I understand that my information is stored according to the Privacy Policy (add link to _your_ privacy policy)
[ ] I understand that my information is stored according to the Privacy Policy (add link to **your** privacy policy)
[ ] I would like to receive the monthly newsletter
@@ -39,7 +44,12 @@ The seperation allows respondents to fill out your form without having to agree
If you're using [Formbricks React](/react-form-library) to code your form, you can use this code snippet as a starting point:
```jsx
add when checkbox ready
<Checkbox
name="gdpr-consent"
label="I understand that my information is stored according to the Privacy Policy"
validation="accepted"
/>
<p>Please find all information in our <a href="https://pp.com">Privacy Policy</a></p>
```
export default ({ children }) => <Layout meta={meta}>{children}</Layout>;
the implications of how GDPR applies to your business.
</Callout>
### What is GDPR?
### **What is GDPR?**
The General Data Protection Regulation (GDPR) is a European Union (EU) privacy law that allows EU citizens and residents to have access and control over their personal data.
@@ -18,7 +18,7 @@ If your business is based in the European Union (EU), or you process the persona
---
### Is Formbricks GDPR Compliant?
### **Is Formbricks GDPR Compliant?**
Formbricks is based in Germany (EU) and is GDPR compliant. This is how we comply:
@@ -29,7 +29,7 @@ Formbricks is based in Germany (EU) and is GDPR compliant. This is how we comply
---
### Who is responsible of form data?
### **Who is responsible of form data?**
Formbricks is the provider of a form service, and not the owner of the collected form responses. The creator of the form (i.e. you) is responsible for the data they collect and is thereby the data controller of the respondent data.
@@ -41,7 +41,7 @@ You are able to delete or export form responses from your account if it would be
---
### How can I make my Formbricks form GDPR compliant?
### **How can I make my Formbricks form GDPR compliant?**
You (the form creator) are the data controller of the personal data you collect from your respondents. Your Formbricks form is not automatically GDPR compliant. When you collect personal data (name, email address, etc.) you should make sure that you comply with GDPR.
@@ -49,7 +49,7 @@ In short, you have to inform the respondents what data you store for how long, g
---
### How does Formbricks use personal data?
### **How does Formbricks use personal data?**
Formbricks acts as a data controller in the relationship between Formbricks and our users (everyone using the service under [hq.formbricks.com](http://hq.formbricks.com) with an account). You give us personal data like registration information in order to use our service. Formbricks does not sell personal data to third parties or use it for marketing purposes or for serving advertisements.
We take your data privacy serious. It is our highest priority to offer a solution, both self-hosted and in our managed cloud. We take on considerable additional effort to collect as little data as neccessary and handle it safely and securely.
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For more detailed information on data protection, please refer to our privacy policy listed below this text.
This Privacy Policy explains how and why our organization collects personal data and how it is used. If you have any questions after reading this Privacy Policy, feel free to contact us at **privacy@formbricks.com**
### Data collection on this website
### Important Notice
#### Who is responsible for data collection on this website?
This Privacy Policy only applies to the Formbricks Cloud under [hq.formbricks.com](http://hq.formbricks.com) (”Cloud”) and our Landing Page under formbricks.com. (”Landing Page”) If you are self-hosting our open source tool on your own servers, this Privacy Policy does not apply.
Data processing on this website is carried out by the website operator. You can find his contact details in the section "Information on the responsible party" in this data protection declaration.\
in this data protection declaration.
### Definitions
#### How do we collect your data?
To avoid confusion, let’s define who we collect data from:
On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form.\
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
- Researcher: the person who uses the Cloud to create and distribute Formbricks forms and surveys or manage submissions from other forms
- Website visitors: People who visit our marketing landing page
#### What do we use your data for?
### We are data processor, you are data controller
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.
With our Cloud we are a provider of this service. We are not the owner of the collected personal data from survey respondents. The Researcher (the person who sends out a form i.e. you) is responsible for the data they collect and thus data controller of respondent data.
#### What rights do you have regarding your data?
## **2. What data do we collect**
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.\
For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time. Analysis tools and third-party tools\
When visiting this website, your surfing behavior may be statistically analyzed. This is done primarily with so-called analysis programs.\
Detailed information about these analysis programs can be found in the following privacy policy.
This is the information we collect from **Website visitors** and **Researchers as** long as you are using our service:
## 2\. hosting and content delivery networks (CDN)
- **Electronical identification data**: including anonymized IP address, device & browser data;
- Anonymized i**nformation about your use of our website**: including how you end up on our website and the pages you visited.
- **Registration information:**
When you register for an account, we collect your name, username, hashed password and email address.
- **Billing information:**
If you pay for Formbricks, we will ask for your billing details including name, address and financial information depending on your payment method (stored by our payment service provider Stripe)
- **Form data:**
We store your form data (questions and responses) for you and provide tools for you to use this data.
### External hosting
## **3. How we use your data**
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.\
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).\
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.\
We use the following hoster:
Formbricks does not sell personal data to third parties. Generally, we only collect your data with your consent in order to:
Vercel Inc.\
340 S Lemon Ave #4133\
Walnut, CA 91789\
United States
- Deliver our service to you
- To improve your user experience
- To email you with essential product updates
- To troubleshoot product functionality and fix bugs
- To respond to legal requests or prevent fraud
### Conclusion of an order processing contract
## **4. Data Subprocessors**
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.
We only share your information with our service providers who help us operate our business, in which case those third parties are also required to comply with the GDPR framework. We worked hard to reduce the number of subprocessors to a minimum and keep your information within the EU. This is a list of the subprocessors we are working with:
## 3\. general notes and obligatory information
| Subprocessor | Data | Use | Server Location | DPA | GDPR Info |
| AWS | Anon. IP, Browser & Device Information | Hosting & Email | 🇩🇪 | Part of ToS | [GDPR Info](https://aws.amazon.com/de/compliance/gdpr-center/) |
| PostHog EU | Anon. IP, Browser & Device Information | Product Analytics | 🇩🇪 | DPA signed | [GDPR Info](https://posthog.com/docs/privacy/gdpr-compliance) |
| Vercel Inc. | Anon. IP, Browser & Device Information | CDN | 🇩🇪 | DPA signed | [GDPR Info](https://vercel.com/legal/privacy-policy) |
| Stripe | Billing Information | Payments | 🇺🇸 | Part of ToS | [GDPR Info](https://stripe.com/privacy-center/legal#international-data-transfers) |
### Data protection
## **5. Data retention**
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.\
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.\
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
If you are a Formbricks Researcher we do not delete the data in your account. You can delete data in your Formbricks account. You are responsible for the time period for which you store the data.
###Note on the responsible office\
The responsible party for data processing on this website is:
If you are a Respondent, you will need to ask the Researcher how long your responses will be stored in Formbricks.
Johannes Dancker & Matthias Nannt\
Kuhnkestr. 6\
24118 Kiel\
E-mail: hola@formbricks.com
All form data which has been deleted by the form Researcher is permanently deleted from our back-ups within 90 days.
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).\
Storage period\
Unless a more specific storage period has been specified within this data protection declaration, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.\
Note on data transfer to the USA\
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
## **6. Your data protection rights**
### Revocation of your consent to data processing
Formbricks Researchers can exercise their rights directly with us.
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.\
Right to object to data collection in special cases and to direct marketing (Art. 21 DSGVO).\
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).\
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 (2) OF THE GERMAN DATA PROTECTION ACT).
If you’ve submitted your personal data through a Formbricks form, the Researcher who created the form is responsible for the collected data. Formbricks only processes the data. Respondents should contact the person or organization which created the form. If this isn't possible, please contact us. We'll help in any way we can.
### Right of appeal to the competent supervisory authority
## **7. Marketing**
In the event of violations of the GDPR, data subjects shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right of appeal is without prejudice to any other administrative or judicial remedy.
If Researchers register to Formbricks, we may send them emails about company news, updates, related product or service information, etc. Researchers can always opt out of the email communications.
### Right to data portability
## **8. Cookies**
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
Cookies are small text files that are placed on your computer or mobile device by websites you visit. They are widely used in order to make a website work, or work more efficiently, as well as to provide information to the owners of the site. Formbricks uses cookies to improve your experience on our website and with our product.
### SSL or TLS encryption
Formbricks uses cookies to improve your user experience, including:
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.\
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
- Keeping you signed in
- Understanding how you use our product
### Information, deletion and correction
### What types of cookies does Formbricks use?
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time.
1. **Required cookies:** Certain cookies are necessary in order for the website to operate correctly and remain secure. For example, we use cookies to authenticate you. When you log on to our website, authentication cookies are set which let us know who you are during a browsing session. We have to load essential cookies for legitimate interests pursued by us in delivering our Sites essential functionality to you.
### Right to restriction of processing
### How can you block or eliminate cookies?
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time. The right to restriction of processing exists in the following cases:\
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.\
If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.\
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure. If you have lodged an objection pursuant to Art. 21 (1) DSGVO, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
We only use cookies when you are logged into our service. You can allow, eliminate, or block cookies within your browser. If you block all cookies, some websites will not work properly anymore.
If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
## **9. Data Transfers**
## 4\. Analysis tools and advertising
Formbricks is based in the EU and all form and user data is stored in Germany, EU. Only billing information processed by Stripe Inc. and anonymized personal data neccessary to provide this service may be transfered overseas.
### Plausible
## **10. Users Acceptance Of These Terms**
This website uses the open source web analytics service Plausible. The information collected by Plausible about the use of this website is stored on our server. The IP address is anonymized before storage.\
With the help of Plausible, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases and the like).
By using Formbricks, Researchers signify their acceptance of this policy. If Researchers do not agree to this policy, they should not use Formbricks. Researchers continued use of Formbricks following the posting of changes to this policy will be deemed their acceptance of those changes.
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. Insofar as a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.
## **11. Changes to our Privacy Policy**
We can make changes to this Privacy Policy from time to time. In circumstances where a change will materially change the way in which we collect or use your personal information or data, we will send a notice of this change to all of our account holders.
We keep our privacy policy under regular review and will place any updates on this web page. This privacy policy was last updated on 12th December 2022.
## **11. Contact**
Please use the following contact information for privacy inquiries:
privacy@formbricks.com
Johannes Dancker & Matthias Nannt<br/>
Kuhnkestr. 6<br/>
c/o Starterkitchen<br/>
24118 Kiel<br/>
Germany
export default ({ children }) => <Layout meta={meta}>{children}</Layout>;
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Johannes