Posted on: 2018-05-01 Last updated: 2018-05-24

Our sub-processors of data

1. 1. Stripe

      To securely handle online payments, we use the best and most secure online payment system available, called Stripe. Stripe handles our online payments when users use their credit or debit cards. In our Stripe dashboard, we can see an overview of all transactions and users who have paid us, but this data is without provided credit/payment card information, as they are encrypted and safely stored in Stripe’s data centers.
      For more information refer to: EU-U.S. and Swiss-U.S. Privacy Shield Policy | Stripe Privacy Shiled Framework | Stripe Inc.

      Risha Jamison Privacy Counsel | Stripe, Inc. 185 Berry Street, Suite 550, San Francisco, California 94107 [email protected] Phone: (866) 620-8423

1. 1. PayPal

      To provide alternative ways of payment to our Customers we also use PayPal. Just like Stripe, we cannot see or access details about payment information, when payments are handled by PayPal.
      Note:

      At the time of writing this document, we cannot verify if PayPal as an organization is compliant with the GDPR. Therefore, we do not recommend our users (specially citizens of EU who are protected by GDPR) to use PayPal for their payments, unless the users are fine with PayPal’s terms and privacy policy.

1. 1. DigitalOcean

      We store and safeguard Users’ data (registration and account information), survey data (information about User’s surveys, questions, etc.), and Response data (information that Respondents provide while participating in surveys and their uploaded files). This data is securely saved on our data centers hosted by DigitalOcean LLC, which are physically located in EU (Frankfurt Germany) and follow GDPR law. This data centers are also used for data storage in databases and as digital files, emails and for generating charts of collected responses, hosting our website.
      For more information refer to: DigitalOcean Security DigitalOcean Privacy Privacy Shiled Framework | DigitalOcean

      Alan Shapiro General Counsel | DigitalOcean, LLC 101 Avenue of The America, New York, New York 10013 [email protected] Phone: (347) 903-7918

1. 1. Firebase

      Our system uses a 3rd party service made by Google called Firebase. All of Firebase database are currently located in US only and currently they have no plans that we know of, to move them to Europe. Google LLC, including the Firebase products, is certified under both the EU-U.S. and Swiss-U.S. Privacy Shield frameworks and their certifications can be viewed on the Privacy Shield list. Firebase already complies with GDPR. Google Firebase is used as an intermediate database for storing surveys and responses, and data for charts. Before the data reaches and gets saved on our European servers, it is temporarily passed and processed through Google Cloud servers that abide by the European Union (EU) data protection directive. However, as soon as the data is processed there (which normally takes just a few seconds), it will be transferred and saved on our servers and immediately deleted form Google Cloud Servers.
      For more information refer to: Privacy Shiled Framework | Google LLC. Google Cloud Security Google Cloud Compliance | Standards, Regulations & Certifications Privacy and Security in Firebase

      Keith Enright Director, Privacy Legal | Google LLC Google Data Protection Office 1600 Amphitheatre Pkwy, Mountain View, California 94043 [email protected] Phone: 650-253-0000 Fax: 650-618-1806

1. 1. LiveChat

      To provide a superior live chat support both to our users and website visitors we use a tool called Livechat. This application has an built in tracking system that provides us with some data and insights about users and their way of surfing our site or app.
      For more information refer to: Privacy Shiled Framework | LiveChat Inc.

      Katarzyna Janiszewska Lawyer | LiveChat Inc. One International Place, Suite 1400, Boston, Massachusetts 02110 [email protected] Phone: +1 617 275-2400

1. Google Analytics

   Both on our website and in our app, we use a service from Google which is called Google Analytics. Google Analytics is used for tracking page views and user behaviour within SurveyLegend services. With intentions of improving user experience, identifying bottlenecks and pain points, improving performance and ease of use. Important to know that data is kept in Googles systems and is not used to track individual users only to get an overview of large groups of users. Google Analytics shows us general information which are not personally identifiable! For example, we cannot not see who exactly has searched for which keyword on Google to find our website, or we can never know which one of our current visitors lives exactly where. As explained in the previous sections, we just see general behavior of our visitors or users, which countries they are from, which pages on our website are mostly visited, what devices (computers, tables, or smartphones) or web browsers (Chrome, Safari, Firefox, etc..) are used to access our site or app, and things like that.
   For more information refer to: Privacy Shiled Framework | Google LLC.

   Keith Enright Director, Privacy Legal | Google LLC Google Data Protection Office 1600 Amphitheatre Pkwy, Mountain View, California 94043 [email protected] Phone: 650-253-0000 Fax: 650-618-1806