I am implementing a user feedback function in an application for my employer. The feedback is anonymous, but users can enter any text in the form.
If a user includes personal information (e.g. their email) in the form, what is its status under the GDPR (and other similar regulations)? I am not actively cataloguing this information, but it can be used to easily identify a person.