Is the author of a petition the data controller, and how does the platform handle data protection (GDPR)?

The author of a petition is always the data controller for the collected signatures. You cannot gather a list of people's opinions without being the controller.

Our platform supports GDPR compliance by letting you choose what data is collected, how long it is stored, and the specific purposes (each with its own explicit consent on the sign form). We auto-generate a privacy policy based on your choices, or you can link your own.