Under the GDPR, you are able to supply a third-party agency with your customers data, as long as you have received permission from those customers for their data to be passed on for customer survey purposes.