Legals

Privacy policy –Usability Tests and Surveys

Status: 21/06/2021

Privacy Notice for Processing Personal Data in the Context of Usability Tests and Market Research Surveys under Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR).

Preambel

Dear visitor, job applicant, business partner, or interested party,

In accordance with the provisions of Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your data protection rights. The specific data processed and the manner of use depend on the requested or agreed-upon services. To ensure that you are fully informed about the processing of your personal data in the context of contract fulfillment or pre-contractual measures, please read the following information.

‍

Responsible Party

Company: awork GmbH
Street and Number: Großer Burstah 36-38
Postal Code, City, Country: 20457 Hamburg, Germany
Commercial Register No.: HRB Hamburg 172 488
Managing Directors: Daniel Tobias Hagenau, Nils Lukas Czernig, Lucas Alexander Bauche
Phone Number: +49 40 88215330
Email Address: [email protected]

‍

Data Protection Officer

Company: PROLIANCE GmbH
Street and Number: Leopoldstr. 21
Postal Code, City, Country: 80802 Munich, Germany
Email Address: [email protected]
‍Website: www.datenschutzexperte.de

‍

General Information

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). If processing personal data is necessary for initiating or performing a contractual relationship or for pre-contractual measures, such processing is lawful under Article 6(1)(b) GDPR.

If you grant us explicit consent to process your personal data for specific purposes (e.g., sharing with third parties, analysis for marketing purposes, or promotional emails), the legality of this processing is based on your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time, affecting future processing.

If required and legally permissible, we may process your data beyond the primary contractual purposes to fulfill legal obligations under Article 6(1)(c) GDPR. Furthermore, processing may occur to protect our legitimate interests or those of third parties and to defend against or assert legal claims under Article 6(1)(f) GDPR. We will inform you separately about our legitimate interests if required by law.

Your Rights

Below, you'll find information about your data protection rights concerning the processing of your personal data by the controller:

Right to Information (Article 15 GDPR): You have the right to request information about your personal data we process. This includes details about the purposes of processing, categories of personal data, recipients, or categories of recipients, planned storage duration, the right to rectification, erasure, restriction of processing, or objection, the right to lodge a complaint, the source of your data (if not collected from you), and the existence of automated decision-making, including profiling, and meaningful information about its details.
Right to Rectification (Article 16 GDPR): You can request the correction of your personal data stored with us without undue delay.
Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal data stored by us, provided the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing (Article 18 GDPR): You can request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to processing under Article 21 GDPR.
Right to Data Portability (Article 20 GDPR): You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
Right to Lodge a Complaint (Article 77 GDPR): If you believe that the processing of your personal data violates data protection laws, you have the right to complain to a supervisory authority. Normally, you can contact the supervisory authority in the federal state where our registered office is located or where you reside or work.
Right to Withdraw Consent (Article 7(3) GDPR): If you have given your consent for specific data processing, you can withdraw it at any time for future processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
‍

Right to Object

If we process your personal data based on legitimate interests under Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation or for direct marketing purposes without specifying a particular situation.

If you wish to exercise your right to withdraw consent or object to processing, please send an email to the contact address provided above.

Automated Decisions under Article 22 GDPR

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into or performing a contract between you and us, is permitted by Union or Member State law to which we are subject, and that law contains appropriate measures to safeguard your rights, freedoms, and legitimate interests or is based on your explicit consent.

In cases a) and c) mentioned above, we will take appropriate measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

Legal Obligations

Providing personal data for the decision on concluding a contract, contract performance, or pre-contractual measures is voluntary. However, we can only make decisions as part of contractual measures if you provide personal data necessary for concluding the contract, contract performance, or pre-contractual measures.

Changes Reserved

We reserve the right to adapt or update this privacy policy if necessary, in compliance with applicable data protection regulations. This ensures that we can align it with current legal requirements and consider changes to our services, such as introducing new features. The most current version will always apply to your concerns.

‍

Usability Tests

Purpose of Processing

We conduct usability tests periodically to improve our software service. These tests are solely intended for the enhancement of our service.

Categories of Personal Data

Usability tests typically collect only the participant's name and contact information for scheduling purposes. However, in some tests, additional information related to the test, such as profession, position, software experience, gender, and more, may be collected for statistical analysis.

To evaluate the tests later and make them available to internal personnel, video and audio recordings of the user and the screen are made.

Legal Basis for Processing

If a user provides consent, the legal basis for processing their data is Article 6(1)(a) GDPR.

Recipients of Data

For conducting, recording, and storing test sessions, we use appropriate cloud services.

The data is internally accessible only to relevant personnel.

Additionally, the data or aggregations may be processed using internally-used communication and knowledge management services.

Transfer to a Third Country

Notion Labs, Inc.548 Market StSan Francisco, CA 94104Privacy Policy: Notion Labs Privacy Policy

Notion Labs complies with an adequate level of protection (Binding Corporate Rules), and we have entered into a contract with Notion Labs containing standard contractual clauses, in which they commit to processing user data only in accordance with our instructions and to comply with EU data protection standards.

Data Retention Period

The data collected is deleted after evaluation and no later than one year after collection.

‍

Umfragen

Purpose of Processing

We conduct user surveys at irregular intervals to improve our software service. The insights gained are used for customer-oriented service development.

Categories of Personal Data

Survey results are not anonymous, so responses can be associated with an account. This helps put survey results into context, such as relating them to contract details, company type, and company size.

The surveys cover preferences and experiences in the daily work routine, service usage, as well as suggestions and ideas for improvement. No data is collected outside the context of service improvement.