Profiling in Thrive Quiz Builder – How to be GDPR Compliant
First of all: What exactly is profiling?
According to GDPR (General Data Protection Regulation), profiling is defined as being the automated processing of data to analyze or to make predictions about individuals - Meaning that simply "assessing or classifying individuals based on characteristics" could be considered profiling.
If you're not familiar with the GDPR situation, don't forget to check out this blog post: How Thrive Themes Products Will Help You With GDPR Compliance.
What is the Problem with Profiling?
Personalized content and segmentation (especially as a result of automation), can be viewed by the GDPR as a discrimination and, the visitor that completes a quiz should give his consent for having his answers and quiz result used to send him personalized offers and newsletters.
Here's an example in which profiling would be needed in Thrive Quiz Builder:
You have a quiz that also uses the Dynamic Content element to segment your visitors - Either just by the result or also by using tagged answers and then sending them to the email service.
Since enabling profiling on each individual form would take too long, because you would have to edit each Dynamic Content state, enabling profiling should happen at page level, for all variations of that page.
To enable profiling, click on "Manage" on the Results Page card, from the Quiz Dashboard:
Then, look for the following option:
According to the GDPR, you are not allowed to create any user profiles, without having the permission of the actual user to do that.
However, if you select the checkbox, you will begin to receive data from your users, based on their result or, if you used tags, based on the answers they have given.
For example: Your visitor has to type in their e-mail address to get the full report of the quiz, let's say.
You have enabled the option to receive their data, and you plan on sending future personalized offers to that visitor, based on his result and answers from the quiz.
You need to let them know you're doing this.
In this way, they will know what's going on, and they can decide for themselves if they want to receive personalized offers or not.
What About Old Quizzes?
For older quizzes, as a website administrator, you might find yourself in a situation in which you have collected data without consent.
An easy way for you to be GDPR compliant would be to quickly anonymize the results, from the Reports area:
In this area you will have a new option available, called "Anonymize Results":
Important! - By anonymizing the results, you will no longer be able to associate answers and results with a certain name or email address.
The action applies only to the currently selected quiz.
Hope you found this article useful. However, if you have any further questions, don't hesitate to contact us on the Support Forum!