0

I created a website for a friend's company that has no user account feature, it is only meant to be an online catalog for prices. The only user data we might receive are data that users fill in the contact form (name, surname, phone number and email) which we receive by email in the official website's mailbox. Is this website concerned by GDPR? Are data received through the contact form considered "personnal data" as GDPR mention?

0

GDPR only applies if you or your users are European or actually in Europe.

‘Personal data’ is data that can be used to identify an individual. Given that, do you think names, phone numbers and email addresses are personal data?

  • Since such info is not collected unless it is filled in by the user, and a 'send" button is clicked, would that not constitute sufficient consent under the GDPR? Assuming that the user is in Europe, of course, or the site is. – David Siegel Jan 2 at 2:15
  • 1
    @DavidSiegel the OP asked if they needed to comply - not how. Anyway, you have not dealt with deletion and security. – Dale M Jan 2 at 2:59
  • @ Dale M that makes sense. Thank you. But it raises an interesting question. If one invites people to send emails with identifying info, what obligations does one have under the GDPR (assuming that receiver or senders are in Europe). Perhaps i will ask this as a separate question. – David Siegel Jan 2 at 3:11
  • 1
    Yes it is - you probably don’t need consent. Consent is only one of several methods that allow personal data to be kept - read the GDPR – Dale M Jan 2 at 20:38
  • 1
    An email system is a database – Dale M Jan 3 at 22:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.