--- generated_by: surveylegend-page-markdown title: How to Write GDPR Privacy Policy for Surveys description: If you want to have a GDPR-compliant survey, you must also have a proper privacy policy. This guide helps writing a GDPR-compliant privacy policy. canonical: https://www.surveylegend.com/gdpr/how-to-write-gdpr-proof-privacy-policy-for-surveys/ --- # How to Write GDPR-proof Privacy Policy for your Surveys [Create your feedback survey, it’s free!](https://www.surveylegend.com/register/) 6 min read **Published: ** July 23, 2018 ![how to write gdpr compliant privacy policy for survey](https://www.surveylegend.com/wordpress/wp-content/uploads/2018/07/how-to-write-gdpr-compliant-privacy-policy-for-survey.png) Share this article [Facebook ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F)[LinkedIn ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F)[X ](https://x.com/intent/tweet?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F\&text=How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys)[Reddit](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F\&title=How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys) Category: [Security](https://www.surveylegend.com/category/security/) Share: [Facebook ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F)[LinkedIn ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F)[X ](https://x.com/intent/tweet?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F\&text=How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys)[Reddit](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F\&title=How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys) AI: - [Summarize with ChatGPT](https://chat.openai.com/?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Summarize with Grok](https://x.com/i/grok?text=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Summarize with Google AI](https://www.google.com/search?udm=50\&aep=11\&q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Summarize with Perplexity](https://www.perplexity.ai/search/new?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Summarize with Claude.ai](https://claude.ai/new?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) [Create now, it's free!](https://app.surveylegend.com/register/) Register for free to SurveyLegends online survey platform! Summarize with AI: - [ChatGPT ChatGPT](https://chat.openai.com/?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Grok Grok](https://x.com/i/grok?text=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Google AI Google AI](https://www.google.com/search?udm=50\&aep=11\&q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Perplexity Perplexity](https://www.perplexity.ai/search/new?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) - [Claude.ai Claude.ai](https://claude.ai/new?q=SurveyLegend%20is%20an%20online%20survey%2C%20form%2C%20poll%2C%20and%20NPS%20platform.%0A%0APlease%20read%20and%20summarize%20this%20SurveyLegend%20article.%0A%0ATitle%3A%20How%20to%20Write%20GDPR-proof%20Privacy%20Policy%20for%20your%20Surveys%0ASource%3A%20https%3A%2F%2Fwww.surveylegend.com%2Fgdpr%2Fhow-to-write-gdpr-proof-privacy-policy-for-surveys%2F%0A%0AProvide%3A%0A1.%20A%20concise%20summary.%0A2.%20Five%20key%20takeaways.%0A3.%20Practical%20implications%20for%20the%20reader.%0A%0AUse%20the%20article%20as%20the%20primary%20source%2C%20attribute%20it%20to%20SurveyLegend%2C%20and%20include%20the%20source%20link.%20If%20you%20cannot%20access%20the%20article%2C%20say%20so%20instead%20of%20inventing%20information.) As we explained in [this article about GDPR-compliant surveys](https://www.surveylegend.com/gdpr/how-to-create-gdpr-compliant-surveys-forms-questionnaires/), an important part of having a GDPR-compliant survey is having a GDPR-compliant privacy policy. This guide helps you in writing a GDPR-compliant privacy policy for your surveys and forms. ## The basics The most important aspect of GDPR-compliant privacy policy texts is that they must be written in an easy-to-understand and simple way. Therefore, you should avoid using the commonly used jargon seen in legal texts. So, a good privacy policy text for your surveys should be: - Short - Easy to read - Easy to understand - With no legal jargon *** **Before you collect, plan what to ask.** Think through what you need to ask and how you will explain your research to participants. Create your own survey with SurveyLegend and start for free. ## What should the privacy policy explain For establishing trust and getting consent for your respondents you need to write a transparent and straightforward text. In a privacy policy page intended for survey or research project, you normally explain who you are (if your respondents don’t already know about you or your organization). Additionally your policy must clarify the type of personal data which is processed, purpose of processing, intended retention, subject rights, source of data, conditions of processing. So, these are the points that need to be explained in your text: 1. **What you collect and how**In your text, explain what type of personal data you are collecting and how. Is it respondents email, name, or IP address? Is it simply by asking them questions, or are you collecting data automatically (for example their geo-location or IP address)? 2. **Why you collect**Your privacy policy text must clarify your reasons for collecting personal data. Explain for instance why you need their email. Do you have good reasons for collecting their name or address? 3. **How will you use their data**This is super important to let your respondents know how you are going to use their personal data. Are you going to share it with third parties? In that case, say who these 3rd parties are and why you need to share their data with them. If you ask for their contact info for instance, are you going to use it to contact them, or send them something? 4. **How long will you keep their data**The GDPR requires you to define a so called “data retention” period, when you collect personal data. Thus your privacy policy text should explain how long you will retain the data. After your data retantion period is over, you must delete all collected data, even those which are shared with 3rd parties! 5. **How secure is the data in your possession**Your privacy policy must also explain what security measurements are applied when you collect, export, share, and store personal data of your respondents. What tools are you using, and if your data processors are also taking the security of the data seriously. 6. **Clarify your respondents rights**The GDPR clearly defines individuals rights for their own data. You must also make sure to reflect these rights in your privacy policy text, and inform your respondents about their rights, which are as follows: - Right to **access**, **view**, and **edit** their own information in a timely manner - Right to be forgotten, which means being deleted from your survey results - Also right to be able to opt-out form your future messages (e.g. if you use their data to send them ads or marketing messages)Keep in mind that data is owned by the respondents, not you or your company or organization. 7. **Who to contact**Every organization that is collecting data from EU citizens must have a Data Protection officer. The DPO is a person in the organization who can represent the organization with respect to data and privacy issues. Including the DPO’s contact information in your privacy policy would be great for your respondents, in case then need to ask questions or practice their rights. *** **What would you like to know? Bring your own questions.** Choose one thing you want to understand about your audience. Create your own survey with SurveyLegend and get started for free. ## Examples of a privacy notice inside a survey We have gone through the requirements of the GDPR for writing privacy policies, but what then does a privacy notice actually look like? You can present your privacy policy in different ways. It could be a part of your survey’s welcome page, like the example below, which illustrates a fair way of getting consent for collecting none-sensitive data. ![Example of a getting consent for non-sensitive data in a survey](https://www.surveylegend.com/wordpress/wp-content/themes/sage/public/images/tutorials/gdpr-obtain-consent-for-non-sensitive-data-using-a-welcome-page.523801.png) This shows an example of a getting consent for non-sensitive data in a survey, using a Welcome Page. In such a privacy notice, you must optimally explain the personal data processed, purpose of processing, intended retention, subject rights, source of data, conditions of processing. You provide clear information and put a note for getting consent. The amount of information that you provide here is up to you and your research case. However, if suitable for your case, you can split up your privacy policy and spread it within the survey, displaying information where they are most relevant. This helps you make reading your privacy policy less scary and less intimidating for readers, while letting them know how and why you are collecting their data. In the example below, the privacy notice has become a part of obtaining consent from respondents, informing them about legitimate interests of the surveyor. The notice is presented at the point of data collection. **Tip:** This way you give the respondents the opportunity to agree with some parts of your privacy policy, not all of it. It’s a very good idea, because you can still collect other valuable information for your research and let respondents skip some parts of it. Here at **organization name** we take your privacy seriously, and will only use your personal information to **explain your intentions** (e.g. provide the products and services you request us / or enhance our service based on your feedback)]. However, from time to time we would like to contact you with details of other **specify products / offers / services** we provide. - In such case, how would you like us to contact you - Post - Email - Phone call - Text message We would also like to pass your details onto other **name of company/ companies who you will pass the information to**, so that they can contact you by **e.g post, email, etc…** to **explain their intentions**. - Do you consent to us passing on your details for that purpose? - Yes - No **Tip:** Based on how respondents have answered your questions previously and what they have given their consent to, you can later present respective questions taking advantage of our smart **survey logic flows**. For example if they choose “Email” and means of contact, you can then show the “email question”. Below is another example of how you can divide up your privacy policy and embed it inside the survey itself. What is your full name? We need this to be able to verify your membership at our institute. What is your email address? From time to time we would like to contact you with details of other specify products / offers / services we provide. To do so, we need your email. This information helps our partners to explain their intentions. What is your postal address? This information helps our partners to explain their intentions. *** **Found an approach you like? Give it your own questions.** Use what you have learned to create your own survey. Get started for free with SurveyLegend. ## Conclusion When you ask respondents to provide their personal information, they may sometimes feel a bit guarded and doubtful. However, by disclosing your privacy policies up front, you’ll not only increase your response rates by immediately putting your respondents at ease, but also do your research more professionally and according to law. Writing a GDPR-compliant privacy policy text is super easy if you just cover the points that we explained above. Also, as shown in our examples above, you can make the policy less scary and more easily-understood if you divide it up and spread it within your survey, showing relevant parts of it at the point of data collection. ![Jasko Mahmutovic](https://www.surveylegend.com/homepage-media/team/jasko-mahmutovic.avif) Written by ## [Jasko Mahmutovic](https://www.surveylegend.com/author/jasko-mahmutovic/) Online survey tool expert, founder and CEO of SurveyLegend Jasko Mahmutovic has worked in the online survey, form, and polling industry since 2008. In 2010, he founded SurveyLegend with a simple goal: collecting valuable insights from customers, employees, and audiences should never be complicated or boring. He stays closely connected to developments in the market research industry and continues to innovate and advance the online survey industry—now by exploring how AI can make collecting and understanding feedback smarter, faster, and more engaging. [View author profile](https://www.surveylegend.com/author/jasko-mahmutovic/) View author profile [LinkedIn](https://www.linkedin.com/in/jaskomahmutovic/) The verified LinkedIn profile of Jasko Mahmutovic, founder and CEO of SurveyLegend. Visit Jaskos LinkedIn profile to connect. [Website](https://jaskomahmutovic.com/) Jasko Mahmutovic’s personal webpage, where you can learn how Jasko founded SurveyLegend the best online survey platform and how his journey in Software as a Service (SaaS) started. Related articles ## Keep reading [![SurveyLegend Halloween costume voting poll shown on a laptop and phone, with adult costume photos as answer choices.](https://www.surveylegend.com/wordpress/wp-content/uploads/2022/10/Halloween-Costume-Contest-Main.png) ](https://www.surveylegend.com/holiday/halloween-costume-contest/) [ Holiday October 9, 2026](https://www.surveylegend.com/holiday/halloween-costume-contest/) ## [How to Host a Halloween Costume Contest for People & Pets 2026](https://www.surveylegend.com/holiday/halloween-costume-contest/) [![Screenshot of a SurveyLegend Halloween pumpkin carving contest survey displayed on desktop and mobile, showing image-based voting options for pumpkin designs.](https://www.surveylegend.com/wordpress/wp-content/uploads/2025/10/How-to-make-a-Pumpkin-Carving-Contests-for-Halloween.webp) ](https://www.surveylegend.com/holiday/how-to-make-a-pumpkin-carving-contests-for-halloween/) [ Holiday October 9, 2026](https://www.surveylegend.com/holiday/how-to-make-a-pumpkin-carving-contests-for-halloween/) ## [How to Host a Pumpkin Carving Contest for Halloween 2026](https://www.surveylegend.com/holiday/how-to-make-a-pumpkin-carving-contests-for-halloween/) [![Illustration of a survey mascot standing in front of a large group of diverse people arranged in a grid pattern, with a speech bubble labeled “Systematic Sampling.”](https://www.surveylegend.com/wordpress/wp-content/uploads/2025/11/systematic-sampling-survey-tool.webp.webp) ](https://www.surveylegend.com/sampling/systematic-sampling/) [ Sampling February 6, 2026](https://www.surveylegend.com/sampling/systematic-sampling/) ## [What is Systematic Sampling? Pros, Cons, and Examples](https://www.surveylegend.com/sampling/systematic-sampling/)