Posted on: 2018-05-01
Last updated: 2018-05-24
Our sub-processors of data
In some cases we use 3rd party technologies and services, to deliver the best services to our Users, Respondents, and Visitors.
Data or Personal data may reach, be stored, or get processed by these services.
To securely handle online payments, we use the best and most secure online payment system available, called Stripe. Stripe handles our online payments when users use their credit or debit cards.
In our Stripe dashboard, we can see an overview of all transactions and users who have paid us, but this data is without provided credit/payment card information, as they are encrypted and safely stored in Stripe’s data centers.
For more information refer to:
EU-U.S. and Swiss-U.S. Privacy Shield Policy | Stripe
Privacy Shiled Framework | Stripe Inc.
Privacy Counsel | Stripe, Inc.
185 Berry Street, Suite 550, San Francisco, California 94107
Phone: (866) 620-8423
To provide alternative ways of payment to our Customers we also use PayPal. Just like Stripe, we cannot see or access details about payment information, when payments are handled by PayPal.Note:
At the time of writing this document, we cannot verify if PayPal as an organization is compliant with the GDPR.
We store and safeguard Users’ data (registration and account information), survey data (information about User’s surveys, questions, etc.), and Response data (information that Respondents provide while participating in surveys and their uploaded files).
This data is securely saved on our data centers hosted by DigitalOcean LLC, which are physically located in EU (Frankfurt Germany) and follow GDPR law. This data centers are also used for data storage in databases and as digital files, emails and for generating charts of collected responses, hosting our website.
Our system uses a 3rd party service made by Google called Firebase. All of Firebase database are currently located in US only and currently they have no plans that we know of, to move them to Europe. Google LLC, including the Firebase products, is certified under both the EU-U.S. and Swiss-U.S. Privacy Shield frameworks and their certifications can be viewed on the Privacy Shield list. Firebase already complies with GDPR.
Google Firebase is used as an intermediate database for storing surveys and responses, and data for charts. Before the data reaches and gets saved on our European servers, it is temporarily passed and processed through Google Cloud servers that abide by the European Union (EU) data protection directive.
However, as soon as the data is processed there (which normally takes just a few seconds), it will be transferred and saved on our servers and immediately deleted form Google Cloud Servers.
Director, Privacy Legal | Google LLC
Google Data Protection Office
1600 Amphitheatre Pkwy, Mountain View, California 94043
To provide a superior live chat support both to our users and website visitors we use a tool called Livechat. This application has an built in tracking system that provides us with some data and insights about users and their way of surfing our site or app.
Both on our website and in our app, we use a service from Google which is called Google Analytics. Google Analytics is used for tracking page views and user behaviour within SurveyLegend services. With intentions of improving user experience, identifying bottlenecks and pain points, improving performance and ease of use.
Important to know that data is kept in Googles systems and is not used to track individual users only to get an overview of large groups of users. Google Analytics shows us general information which are not personally identifiable! For example, we cannot not see who exactly has searched for which keyword on Google to find our website, or we can never know which one of our current visitors lives exactly where. As explained in the previous sections, we just see general behavior of our visitors or users, which countries they are from, which pages on our website are mostly visited, what devices (computers, tables, or smartphones) or web browsers (Chrome, Safari, Firefox, etc..) are used to access our site or app, and things like that.