GDPR Checklist

GDPR Checklist


Consult your Data Protection Officer (DPO)

If your company has a data protection officer, make sure to consult this person to ensure GDPR compliance.

Data Processing Agreement (DPA) for storing personal data

It’s ok to collect privacy-sensitive information, as long as you have a valid reason for it and take necessary measure to ensure the privacy regardless of what happens. If you are capturing private-sensitive data, willingly or not, you need a Data Processing Agreement (DPA) between your company and Task Analytics.

Delete privacy-sensitive information

It's not uncommon for visitors to collect personal data inadvertently via the free text inputs on the survey. Sometimes visitors to your site that respond might provide their email address or phone number. While this is mostly harmless and a great way for you to get in touch with them directly, collecting and storing that personal data, even accidentally, adds a responsibility our customers don't always want. Learn how: http://help.taskanalytics.com/running/deleting-text-responses

Respect the right to be forgotten

You should only use and keep the personal data that is needed at any given time for any given purpose. If it’s not needed for that intended purpose and duration, it should be deleted. And customers have the right, at any time, to withdraw consent and request data to be deleted. You are obliged to remove all traces of the customer data that may have been shared and stored. This does not apply for data that has been stored anonymously.

Secure backup of your data

You are responsible for maintaining, protecting, and making backups of your content. Optionally, you can remove privacy-sensitive information before making a back-up. The storage of back-ups with privacy-sensitive data should be processed conform GDPR regulation. How  to backup your data

    • Related Articles

    • Task Analytics and GDPR

      Task Analytics is committed to the security of your data and protection for the privacy of your clients. All data is stored and hosted in the European Union (The Netherlands, Belgium and Ireland). In GDPR-terms, you are the controller, Task Analytics ...
    • Enable Content Security Policy (CSP)

      What's Content Security Policy (CPS) Content Security Policy (CSP) is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks. These attacks are used for ...
    • How does Task Analytics use the collected data?

      Task Analytics aims to help clients understand customer intent to elevate their service and the customer experience of their websites. General data We collect device data to provide insights to our clients regarding which user demographics or ...
    • Which information does Task Analytics collect

      The information that is collected depends on the set-up of your configuration. Some of the data will always be collected as part of using Task Analytics; other data is optional and depends on the set-up of your survey and feedback given by visitors. ...
    • Backup of data

      You are responsible for maintaining, protecting, and making backups of your data. To the extent permitted by applicable law, Task Analytics will not be liable for any failure to store, or for loss or corruption of your data. Export your data Users ...