Buenno’s survey products and services enable our customers to create and administer surveys. We may host our customers’ surveys on our servers and collect the responses to those surveys on their behalf. Our customers may also upload contact information of potential survey respondents to invite them to participate in a survey. We refer to this contact information and responses as “Survey Data”. Our customers remain data controllers of this Survey Data and we process it solely in accordance with our agreement with our customers. Aside from Survey Data, we are likely to process very limited information about you.
Our customers have total discretion to determine what information they collect, who they invite to participate in a survey, whether they upload respondent information, what the Survey Data will be used for, whether it will be combined with other information and data, who it will be shared with and how long it will be stored. We strongly recommend you read the privacy notices and/or obtain privacy information from our customer who has invited you to participate in the survey to fully understand how your Survey Data will be used.
1. The information we collect about you
We collect the following information about you:
Survey Data: we collect your survey responses. Our customer may also have uploaded your contact information to enable them to invite you to participate in the survey, and send reminder emails to you. As explained above, we process this Survey Data on our customer’s behalf and make no use of it ourselves.
Technical information: we collect information relating to your interaction with our software and services, including the type of browser and/or device used, operating system, date/time stamp, referrer page and IP address. We do not link this information to your Survey Data.
Cookies: our online survey services use a limited number of cookies. The most relevant one to you is that they will use a cookie to prevent you completing the same survey multiple times, if our customer has enabled this feature.
Web beacons: when we send you emails, we may include a web beacon to allow us to determine the number of people who open our emails and information such as when and how many times the email was viewed, whether any links were clicked on, whether the email was forwarded, your geographic location and browser and device type. This helps us to measure the effectiveness of our email campaigns. When you click on a link in an email, we may record this individual response to customize our offerings to you. Web beacons can be refused when delivered via email. If you do not wish to receive web beacons via email, you will need to disable HTML images or refuse HTML emails via your email software, but please note that this is likely to reduce the functionality of such emails.
Your contact information: we will collect information from you if you contact us directly, for example in relation to a survey invitation that you have received.
2. How we use your information
We use the information that we hold about you in the following ways:
Survey Data – to provide our products and services: we hold, store and process your Survey Data solely to provide our products and services to our customers, in accordance with our agreement with them. Our customers might be able to track respondents by email address, name, ticket number, customer number or other identification data that is stored within the Survey Data. We only use your Survey Data for our own purposes if required to do so by law.
Technical information – to protect our services, and for analysis: we will use your information in accordance with our legitimate interests of administering and maintaining our systems and ensuring network and information security, for example to prevent unauthorized access to our networks, to investigate faults, to control the abuse of our products or services, to prevent denial of service attacks and to monitor system usage and server load. We may also use this information in aggregate form for our legitimate interests of improving our products and services.
Cookies – to prevent multiple survey completion: if our customer has enabled this feature, our online survey services will use a cookie to prevent you completing the same survey multiple times.
Your contact information – to respond to your enquiry: we will only use your contact information where you contact us directly, to respond to your enquiry. This is in accordance with our legitimate interests of providing customer service. In many cases (for example where you wish to exercise your rights as a data subject) this is likely to involve referring you to our customer for them to respond to you directly.
We will not use any information that we hold about you for marketing purposes.
3. Who we share your information with
Survey Data: unless we are required to do so by law, we will not disclose your Survey Data to any third parties other than our customers and our subprocessors (such as our affiliates and our hosting providers) that have been authorized by our customer in our agreement with them.
Your contact information: where you contact us directly, we may, if appropriate, refer your enquiry to our customer.
4. Your rights as a data subject
Your right to access: at your request we will provide you with information about whether we hold any of your personal information (other than your Survey Data) and provide a copy of this information to you. To request this information please contact us at firstname.lastname@example.org. You may also request that we update, amend, correct or delete your personal information.
If you wish to access, correct, or delete your Survey Data, opt out of any use or disclosure of your Survey Data or exercise any of the other rights described below in relation to your Survey Data, you will need to contact our customer directly. Where necessary, we will provide assistance to our customers to deal with your request.
Where we are the data controller, you may have the right to exercise the following additional rights:
Right of Erasure: in certain circumstances you have the right to erasure of personal information held about you, although this may be qualified where e.g. it is necessary for that information to be retained for record keeping purposes or compliance with our obligations.
Right to Object: you may have the right to object to our processing of your personal data for purposes based on our legitimate interests. In some cases, we may be able to demonstrate that we have compelling legitimate grounds to process your information which overrides your rights and freedoms.
Right of Restriction: you may have to right to request that we restrict the processing of your personal data (e.g. where you believe that the personal data we hold about you is inaccurate or unlawfully held).
Right to Data Portability: you may have the right to be provided with your personal data in a structured, machine readable and commonly used format and to request that we transfer the personal information provided by you to another data controller.
If you would like to exercise such rights, please contact us at email@example.com. To protect your privacy and security, we may take steps to verify your identity before complying with the request.
You also have the right to withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
5. How long we keep your information
Survey Data: our customers determine how long they store your Survey Data in our products and services, so if you have any questions about this, please ask them directly. Usually we do not store any personal survey data more than one month or the time that the data is needed. After that the data is completely removed.
Aside from Survey Data we are likely to hold only very limited information about you. We typically retain technical information for no longer than 6 months from the date we collect it and will retain your contact information for no longer than a year after we have resolved your enquiry (unless we have a specific reason to retain it for longer, for example to comply with a legal requirement).
6. International transfers of information
Your information may be processed by some of our third party service providers which may operate outside of the EEA or the UK and therefore in countries which may not provide for the same level of data protection as the EEA. Whenever we transfer your information out of the EEA or the UK, we ensure that a similar degree of protection is afforded to it, for example by putting in place appropriate contractual terms including where relevant standard contractual clauses.
Buenno Research Oy