GDPR-compliant form submissions: what you actually need to know

The non-lawyer's guide to GDPR for HTML forms - lawful basis, DPA, data residency, retention, and what to put on the form itself.