We are very concerned about security. Your survey/response data is stored in a separate database with a separate user name/password for each LimeSurvey Cloud instance. The connection is encrypted if you are using SSL connections (that is the default — visible by https:// prepending your survey links). The data inside LimeSurvey is not encrypted because it is regularly accessed by the LimeSurvey application (it is not at rest). However, we create daily backups of your LimeSurvey data. That data is at rest and encrypted, stored safely on a different server, but at the same hosting location.

We do not offer a template for that. The data protection policy/law is very different for each country and also the type of data your collecting in our survey(s) has a big influence on how the policy should look like and what is allowed/required. Please contact your data protection officer or a lawyer to find out how such a policy should look like for your specific survey(s).

Yes. Starting with LimeSurvey 3.4.x you will be able to insert a survey policy in the survey settings and require the user to agree to that by checking a box.

Disclaimer: This is not a legal advice, so if in doubt ask a lawyer. We think it is not necessary to show a Cookie consent form. Here is a related excerpt from the EU commission website The EU Internet Handbook:  Consent is not required if the cookie is: used for the sole purpose of carrying out the transmission of a communication, and strictly necessary in order for the provider of an information society service explicitly required by the user to provide that service. Cookies clearly exempt from consent according to the EU advisory body on data protection- WP29 include:user‑input cookies (session-id) such as first‑party cookies to keep track of the user's input when filling online forms, shopping carts, etc., for the duration of a session or persistent cookies limited to a few hours in some cases   LimeSurvey is clearly covered by this case. In general, you can say without a cookie it would not be possible to run a normal online survey safely that spreads over several pages.

Yes. We offer on online contracting tool where you can quickly create the necessary contract with a few clicks yourself and download the resulting contract as PDF - the resulting document is already signed by us.You can find the tool here: In your LimeSurvey website profile click on the menu entry GDPR agreements in the left menu.

Yes, we are generally GDPR compatible. To be compatible with the GDPR & EU law we strongly recommend selecting our German server as server location as it is the only server location where we can guarantee full EU GDPR compliance for the future. Our other locations benefit from our belief in strong privacy, but local legislation may contradict the GDPR and void the GDPR compatibility.