GDPR and Spanish LOPDGDD compliance
The controller responsible for the personal data collected on this website is:
Through our AI-powered interactive form-building platform, personal data is collected only when a respondent answers the forms published by their creators.
Purposes of processing:
Technical data for each response. When a form is answered, the Service records the approximate country, browser and operating system of the respondent, and the campaign tags (UTM) of the access link, so that the form owner can analyse where their responses come from.
Special fields. If the form includes a map-location field, the address and coordinates the person chooses are processed; the browser may ask for permission to use their current location and it is used to place the point only if the person grants it. If it includes signature, file or image fields, the signature image and the uploaded files are stored, served from a public address with a random name, and deleted together with the response.
Continue later and data in the link. If the person asks to receive a link to continue later, their email is used only to send that link and is not given to the form owner. A form may also receive data through its web address (prefilled or hidden fields) when whoever distributes it adds them to the link.
The legal basis for processing your data is the explicit consent given by the user when starting and interacting with the form's assistant, as well as the legitimate interest of the form's creator in requesting the information for the purposes stated in their respective questionnaire.
Data collected through form responses is retained on our servers only for the period strictly necessary to fulfil the purpose for which it was collected, or until the form's creator (owner) deletes it from their dashboard, or until the respondent exercises their right to erasure.
Data captured through forms will not be disclosed to third parties, except where required by law, regulatory exemption, or the express request of the form's creator (who exercises direct control over it). For the AI's conversational processing, trusted service providers may be used (sub-processors such as language-model APIs) under strict confidentiality and secure data-processing agreements. In Voice mode, the respondent's voice is sent in real time to a voice-AI provider (currently Google LLC; OpenAI, L.L.C. or another equivalent provider may also be used), as explained in section 7.
The relationship between Form-it, as processor, and each form's creator, as controller, is regulated in detail in the Data Processing Agreement, which lists the specific sub-processors used by the platform.
Mapbox, Inc. is used for maps and receives, from the participant's browser, the addresses searched and the coordinates; Stripe is used for payments and billing; and for anti-bot verification and error logging, the providers listed in the Data Processing Agreement are used.
In accordance with the General Data Protection Regulation (GDPR), you have the following data-protection rights:
To exercise any of these rights, you can contact us by sending a request by email to: info@form-it.com.es, attaching a copy of your identity document.
Some forms offer, in addition to Classic and Chat modes, a Voice mode: the respondent talks out loud with an artificial-intelligence assistant, not a person, and the assistant fills in the form with their answers. This mode is optional: it is never the only way to respond, and the respondent can switch modes at any time.
The form's owner, as data controller, decides whether to offer this mode and must inform respondents in line with their own privacy policy. The voice sub-processor's terms are listed in the Data Processing Agreement.