DATA PROTECTION DECLARATION SURVEYS

Data protection information for participation in surveys

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you participate in our surveys.

Data collection on our website

How do we collect your data?

We collect your data primarily by voluntarily providing it when you participate in a survey.

In addition, technical conditional log files are required, such as the date and time of participation, the device or device group used, as well as the browser and operating system used. However, we do not store IP addresses in the data sets of our surveys.

What do we use your data for?

First and foremost, we use your data for anonymous statistical analysis. On the other hand, we use your data to invite you to interviews, insofar as you have given us your consent.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority. In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. For details, see the Privacy Policy under “Right to Restrict Processing”.

 

2. General notes and mandatory information

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating via e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

SSL or TLS encryption
For security reasons, our surveys use SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

 

2.1 Note on the responsible body

The responsible body for data processing on this website is:

UScale GmbH
Impact Hub
Quellenstrasse 7a
D – 70376 Stuttgart
Phone: +49 711 6200 140
Email: kontakt@uscale.digital

The controller is the natural or legal person who decides, alone or together with others, on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

 

2.2 Data Protection Officer

You can contact our data protection officer at the following contact details:

DSB External Data Protection Officer Stuttgart
Fabian Henkel
Diploma in Business Administration (FH)
Certified Data Protection Officer
Kantstraße 14
71277 Rutesheim
Phone. +49 7152 564773
Fax. +49 7152 564771
Email info@externer-datenschutzbeauftragter-stuttgart.de
Web https://www.externer-datenschutzbeauftragter-stuttgart.de

 

2.3 Overview of your rights under the General Data Protection Regulation

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of objection to data collection in special cases as well as direct marketing (Art. 21 GDPR)

If data processing is based on Art. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this shall also apply to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing of the data. serves the assertion, exercise or defence of legal claims (opposition under Art. 21 sec. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (opposition under Art. 21 sec. 2 GDPR).

 

Right of appeal to the competent supervisory authority

In the event of infringements of the GDPR, the persons concerned shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of alleged infringement. The right of appeal shall be without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract, either to itself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this is only done as far as it is technically feasible.

Information, blocking, deletion and correction

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to rectification, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for further questions on the subject of personal data.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data is done/happens illegally, you can request the restriction of the data processing instead of the deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you object under Article 21(4) 1 GDPR, a balance must be made between your and our interests. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may only be used with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest in the European Union or of a Member State.

 

2.4 Survey platform

Use of Qualtrics

We usually use the system of the provider Qualtrics (Qualtrics LLC, 2250 N. University Pkwy, 48-C, Provo, Utah, USA) for our surveys. With Qualtrics, we have concluded a Data Processing Agreement (order processing contract under Article 28 GDPR) with appropriate guarantees for compliance with the European General Data Protection Regulation. We use Qualtrics in the legitimate interest (Art. 6 sec. 2 lit. f GDPR), the interest is to use the technology and usability of a market-leading platform.

Information about Qualtrics’ privacy can be found at https://www.qualtrics.com/privacy-statement/.

 

3. Data collection as part of our surveys

3.1 Purpose and legal basis

We conduct customer surveys for our clients on products of our customers for the purpose of product improvement and correction of quality defects.

In principle, we only process your data in the context of a survey on the basis of your consent (Art. 6 sec. 1 p. 1 lit. a GDPR).

 

3.2 Anonymity in interviews

The interviews are generally anonymous, so that it is not possible to inference about your person for the persons involved in the evaluation as well as our clients. The statistical analyses are generally carried out anonymously.

 

3.3 Communication of your contact details in the context of interviews

At the end of a survey, we usually ask you to provide your contact details so that you can contact you at a later date either for inquiries about a survey in which you have taken part or for further interviews.

The feedback to our clients about the results of the individual surveys is always based on an anonymous data set. Our clients cannot therefore draw conclusions about the individual participants in the surveys conducted on their behalf.

However, if you voluntarily leave us your contact details (name and e-mail address) at the end of the survey, your details from the survey will be linked to your person.

If you have provided us with your contact details and take part in multiple surveys, the individual survey results will be linked together.

 

3.4 Who has access to your data?

In principle, your personal data will only be known to those employees of UScale GmbH who are responsible for the IT management of the data sets or the analysis of studies.

For online surveys, we use platforms of the instruction-based service provider Qualtrics LLC, based at 2250 N. University Pkwy, 48-C, Provo, Utah 84604, USA, which is required by data protection regulations and may not use the data for any other purpose. Qualtrics LLC has a certification according to the “EU-US Privacy Shield” (under https://www.privacyshield.gov/list under the search term “Qualtrics”). The Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European data protection standards in the US. Qualtrics LLC stores the answers of our surveys exclusively on servers in Germany.

In principle, your personal data will not be passed on to our clients. The participation of the respective client in individual surveys, whereby the client may draw conclusions about your person if you have given your consent before the start of the survey, will only take place.

 

3.5 How long do we store your personal data?

We will always store your personal data, which we process on the basis of your consent, for three years, unless you revoke your consent in advance. After that, they will be deleted. If you take part in a further survey within these three years, this period will start every time. If there are legal retention obligations, the data will be blocked until the expiry of the retention obligations and then deleted.

You can revoke your consent to us at any time with effect for the future. In some cases, however, we may not completely delete personal data due to legal retention obligations.

We would also like to inform you about your right to complain to a competent data protection supervisory authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.