Protecting your personal data following its collection, processing, and use during your visit to our website is very important to us.
In the following we would like to inform you that and how we request personal data from you and store and process it electronically.
OPINION HERO is an offer of the market research company SPLENDID RESEARCH GmbH from Germany. We conduct surveys worldwide via the Internet and our app for smartphones. Our survey portals are integrated into a worldwide network, so that we can also carry out large-scale surveys with correspondingly high quality. As a thank you and as a sign of appreciation for your time, the participants in our surveys receive a remuneration that they can have paid out via PayPal, among other things.
Information about us as controllers of your data
Responsible provider of this Internet presence in the data protection sense is:
SPLENDID RESEARCH GmbH
Barmbeker Strasse 7a
represented by the Managing Director André Wolff
Contact details for the data protection officer:
Mauß Datenschutz GmbH
Neuer Wall 10
Phone: 040/999 99 52-0
Personal data is information about you personally. This includes, for example, information such as name, address, telephone number or email address, but also data such as your location, your IP address or bank details. It is not necessary for you to disclose personal data to use our website. In certain cases, however, we need your name and your address and other information so that we can provide the required services.
The data that we collect on our homepage are only transmitted to us in encrypted form. For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.Server Log Files
Our website provider automatically collects and stores information in so-called server log files, which are automatically transmitted to us by your browser. These are:
- Name of the called site
- Name of the browser used
- Date and time of access
- Name of the downloaded files
- Full IP address
This data cannot be used to identify specific people. This data is not combined with data from other sources. We reserve the right to examine this log data retrospectively if there is concrete evidence of illegal activity.
The saved log files are automatically deleted after 3 days.
Visiting our website
This Website only records and stores
- required member information during registration (email address, password, user name, year of birth, gender, postcode, level of education, professional position, IP address) and, if applicable
- Information that you have voluntarily made available in your member profile following specific inquiries (further profile creation).
- Information about your device and its services (IP address, device type, operating system, network and Internet service provider, time zone, web browser version, screen resolution, display information). We collect the data mentioned using digital fingerprint technology for the purposes of quality control as well as fraud detection and prevention.
This Website only collects information that is necessary to carry out our business activities and provide our services.
As a condition of membership, you must provide a valid email address and give your consent to receive surveys invitations.
If you do not want to receive invitations to surveys from us, you must terminate your membership using the function provided in the profile. A link for an opt-out function will also be provided at the end of every survey invitation we send you (you must log in beforehand). You can cancel your membership by clicking this link.
Your account will be deactivated and permanently deleted after 7 days; This does not include data that must be archived for legal reasons. After that, all personal information will be destroyed. This also applies to any outstanding or unpaid rewards due. If you want to cancel your membership during the 7 days please contact our support.
Data transmitted via the contact form, including your contact details, are stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent.
The legal basis for this is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your request serves to conclude a contract with us, to which you as a person are a contracting party, further legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or until there is no longer any need for data storage. Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
A cookie is a small text file that is stored on your device by your browser when you visit our website. If you visit our website again later, we can read these cookies again. Cookies are stored for different lengths of time. You have the option at any time to set which cookies it should accept in your browser, but this can result in our website no longer functioning properly. You can also delete cookies yourself at any time. If you do not do this, we can specify how long a cookie should be stored on your computer when you save it. A distinction must be made here between so-called session cookies and permanent cookies. Session cookies are deleted from your browser when you leave our website or when you close your browser. Persistent cookies are stored for the duration that we specify when saving them.
Session cookies: We use so-called cookies with our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address. This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function. The legal basis for such processing is Art. 6 para. 1 lit b GDPR, provided that these cookies process data for contract initiation or contract processing. If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is Art. 6 para. 1 lit. f GDPR. When you close your browser, these session cookies are deleted.
Below is a list of the cookies that we and/or our cooperation partners set or use in connection with the services. There is no mechanism available for the cookies listed to reject these cookies.
Website usage statistics
Social media sharing
Nebu DubInterviewer Session Cookie
NewRelic Performance Monitoring - Session Cookie
FraudLogix Fraud Prevention
Online advertising measurement program
Ad Targeting, Analytics/Measurement, Optimization
Online Ad Effectiveness Program
Facebook for Developers
Online Ad Effectiveness, Tracking Website Visits, Developing Online Look-a-Like Cohorts and Audience Insights
Online Ad Effectiveness Program
Development of online “look alike” cohorts and audience insights
Cint unique respondents
Displays the correct language
.mindtake.com - MTPanelZoneNr: Measuring Ad Exposures and Website Exposures for survey targeting, calculating campaign and website statistics as well as running survey-based advertising efficiency tests
.reppublika.com - MTPanelZoneNr: Measuring Ad Exposures and Website Exposures for survey targeting, calculating campaign and website statistics as well as running survey-based advertising efficiency tests
Most browsers that our users use allow you to set which cookies should be saved and allow you to delete (certain) cookies. If you restrict the storage of cookies on certain websites or do not allow cookies from third-party websites, it may result that our website can no longer be used in full. Here you will find information on how you can adjust the cookie settings for some common browsers:
- Google Chrome (https://support.google.com/chrome/answer/95647)
- Internet Explorer (https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies)
- Firefox (https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop)
- Safari (https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac)
Within our online offer, based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) for analysis, optimization and economic operation of our online offer and for these purposes the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is used.
Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law.
With the help of Facebook pixels, Facebook is able to determine the visitors of our online offer as a target group for the presentation of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we post only to Facebook users who have shown an interest in our website or who have certain features (e.g. interests in certain topics or products that are determined by the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of Facebook pixels, we want to make sure that our Facebook ads correspond to the potential interest of the users and are not annoying. The Facebook pixel also helps us understand the effectiveness of Facebook ads for statistical and marketing research purposes by showing and evaluating whether users are directed to our website after they have clicked a Facebook ad (so-called "conversion"). The Facebook pixel will be integrated directly by Facebook when you visit our website and may store a so-called cookie on your device. If you then log on to Facebook or visit Facebook in a registered state, your visiting our online offer will be noted in your profile. The data collected about you remains anonymous to us, so it does not provide us with any information about the identity of the user. However, Facebook stores and processes the data so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we send data to Facebook for matching purposes, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely with the purpose of establishing a comparison with the data that is equally encrypted by Facebook. Furthermore, when using the Facebook pixel, we use the additional function "extended matching" in which data for the creation of target groups ("custom audiences" or "look alike audiences") is transmitted to Facebook in encrypted form.
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.
Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA.
We use Google Analytics on our website. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
By certification according to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google guarantees that the data protection requirements of the EU are also observed when processing data in the USA.
The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at https://www.google.com/intl/de/policies/privacy/partners further data protection information ready for you, for example also on the possibilities to prevent the use of data. Google also offers at https://tools.google.com/dlpage/gaoptout?hl=de a so-called deactivation add-on along with further information on this.
Our website uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
By certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that the data protection requirements of the EU are also observed when processing data in the USA.
This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.
On the website v2 and v3 re CAPTCHA are used:
With reCAPTCHA v2, the familiar checkbox with the title "I'm not a robot" is displayed. In most cases, one click is enough and the user is validated. If in doubt, the user must also solve a graphic or alternatively acoustic captcha. This is the simplest option in the later integration, since only 2 lines of HTML code need to be inserted.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.
Google offers further information on the general handling of your user data at https://policies.google.com/privacy.
We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google LLC., Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees, and thus also its subsidiary YouTube, that the EU data protection regulations are also complied with when processing data in the USA.
We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website.
According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video.
Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.
If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account.
For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.
Further information about the collection and use of data as well as your rights and protection options in this regard can be found at https://policies.google.com/privacy.
We use Google AdSense on our website to integrate advertisements. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
Through certification according to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees, and thus also its subsidiary YouTube, that the EU data protection regulations are also complied with when processing data in the USA.
Google AdSense stores cookies and web beacons on your device via your browser. This enables Google to analyze how you use our website. In addition to your IP address and the advertising formats displayed, the information thus collected will be transmitted to Google in the USA and stored there. Google may also share this information with third parties. Google states that it will not connect your IP address to other data.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.
Content Delivery Networks (CDN) - Google Fonts
We use content delivery networks (CDN). CDNs mean that the loading time of common Java Script libraries and fonts is shortened because the files are transferred from fast, local or underutilized servers. We use the services "Google Web Fonts" from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; \ "Google \") and "BootstrapCDN", offered by StakPath LLC (2012 Mc Kinney Ave., Suite 1100, Dallas, TX 75201, USA, "StackPath"). For such integration, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third-party provider. Both providers operate servers in the EU, but it cannot be excluded that your browser will also access servers outside the EU.
This data processing is carried out in each case for the protection of our legitimate interests in the optimisation and commercial operation of our website and has as its legal basis Art. 6 1 lit. f GDPR.
Google is certified under the Privacy Shield Agreement and thereby offers a guarantee to ensure the level of protection of European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
StackPath is certified under the Privacy Shield Agreement and thus offers a guarantee to ensure the level of protection of European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active).
For the purpose of customer evaluation and quality assurance, we work with Trustpilot (Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark - de.trustpilot.com). Customers have the option to submit a rating after making a payment. The conditions and data protection provisions of Trustpilot apply, published at http://legal.trustpilot.de/end-user-privacy-terms and http://legal.trustpilot.de/end-user-terms-and-conditions. You will receive an email from us immediately after your payment asking you to submit a rating. You have the right at any time to object to the sending by email or not to carry out the customer evaluation. By participating in our surveys, you automatically consent to an electronic evaluation request by Trustpilot. You are free to ignore this evaluation request.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of the surveys offered.
We use the chatbot Artibot for communication purposes or to answer customer inquiries. Data such as IP address, creation date, city, location and content are saved.
Processing is based on consent in accordance with art. 6 para. 1 lit. a GDPR.
The data concerned is kept indefinitely at the provider of the chatbot. A deletion of the individual data by us is possible afterwards.
It is possible to use our MOBROG skills for Amazon Alexa without providing personal data. If a data subject wishes to make use of specific services of our company via our website, processing of personal data may become necessary. If we process your personal data as described below, this is done in accordance with Art 6 para. 1 lit. B) GDPR to fulfil your request and is mandatory.
What data do we collect, why and for how long?
For technical reasons, we have to collect and save certain data when using the MOBROG Skills for Amazon Alexa. We collect and process personal data only for certain purposes. These are, for example, technical necessities or user requests.
We collect among other things
• Date of the last use of Skills
• Your inquiries to the MOBROG Skill
• Answers of the MOBROG Skills
• Error messages when using Skills
• The device address, provided the user transfers the device address stored at Amazon to the Mobrog skill in has approved the app.
We only store your data for as long as is necessary to fulfill the purpose for which it was collected, as long as you have a account or as required by law.
• The anonymized data saved for technical reasons (date and duration of use, inquiries about the skill, error messages) will be deleted after 30 days.
• In addition, the stored personal data will be deleted if the user deactivates Skill.
• This is how we store your data when you link your account with the MOBROG Skill, as long as your account is active with us. If you delete your account, your MOBROG Skill data will also be deleted. If you do not connect your account to the MOBROG Skill, we do not store any data about you.
• Your individual ID will be stored with us as long as the MOBROG Skill in Alexa is activated for you.
How does data processing work?
1. After activating Skill in the Alexa app, Alexa can be given the voice command to send a question to our information service or another request to us. To execute this command, Amazon will forward the following data to us:
• The individual "UserID" assigned by Amazon when Skill is activated and
• One of several predefined voice instructions to which the question asked by the user or prompt is assigned.
2. We pass on our answer as a reference to an audio file (stored in the cloud) to Amazon, whereupon this audio file is output via an Alexa-enabled device.
The way in which your personal data is processed before any of your questions or requests have been sent to us by Amazon, as well as after we have sent you a corresponding answer for you, is beyond our sphere of influence and responsibility.
The processing of your personal data for which we are responsible begins with the receipt of your personal data by transmission from Amazon to us and ends when we have sent a corresponding response in text form to Amazon for transmission to you. We have no influence on any data processing of your personal data by Amazon. For the data protection declaration of amazon please visit the following website: https://www.amazon.de/gp/help/customer/display.html?nodeId=3312401
Advertising ID (IDFA) / personal advertising ID
When you download our app, we collect an ID created by your device. This is device-independent and can in some cases serve us and our cooperation partners for identification. This ID can be reset on your smartphone differently depending on the operating system. We use the data in accordance with our data protection guidelines.
Login area & app
After you have registered via our website or app, you can provide additional data in the login area to complete your profile. In addition to the adjustment of the information provided during registration, this includes questions from the areas:
- Consumer electronics
- Smoking and tobacco
- Mother and child
- Hobbies and Interests
- Food & beverages
- Computer & video games
- Survey types/Invitation channels
The legal basis for processing is your consent (Art. 6 para. 1 (a) GDPR).
The data will be stored as long as you maintain your registration.
Furthermore, historical data is collected which record events and actions of your account.
- Logins (time stamp and IP address)
- Survey starts
- Survey results
- Password changes (time stamp)
- Changes to the email address
- Last active date
- Recruited friends
- Credit balance
- Sweepstakes participation
The legal basis for processing is your consent (Art. 6 para. 1 (a) GDPR).
The data will be stored as long as you maintain your registration.
If we do not observe any activity in your account for a period of 10 months, your account and all profile and history data will be deleted.
We use the digital fingerprint technology, which is widespread and well-established in market research, to prevent fraud, ensure quality standards as well as the integrity of the survey results by identifying duplicates in surveys in our panel.
For these purposes OPINION HERO assigns a unique identifier or “Relevant ID” to a member´s computer. The technology records and analyzes publicly available data, such as the computer´s IP address or non-personal data such as browser settings, operating system version, browser version, screen resolutions and display information. We may also collect location information that is automatically provided by your computer or mobile device or that is derived from your IP address.
Our reliable partner converts this data into a unique serial number, the so-called digital fingerprint, which is compared with digital fingerprints that have already been generated. This procedure enables us to ensure that the survey is not filled out more than once by one and the same person. The data collected during this process are stored on secure servers and are used exclusively for the purpose of fraud prevention and quality assurance.
OPINION HERO will not upload any software into your computer or mobile device or interfere with the use or control of a computer. OPINION HERO will not alter, modify or change the settings or functionality of a computer or mobile device. OPINION HERO will not use digital fingerprinting to collect personal data or track the online activities. The data collected specifically excludes the content of a survey, the content of the responses to questions in a survey as well as any personally identifiable information other than your publicly available IP address
The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in fraud prevention and quality assurance.
OPINION HERO only stores your data for as long as it is necessary to fulfill the purpose for which it was collected, as long as you are a member of OPINION HERO.
Transfer to third parties
We will provide your personal information (name, user name, address, email address or telephone number (s)) on the legal basis of Art. 6 para. (1) clause 1 of point (b) GDPR and Art. 6 1 lit. f GDPR to third parties.
This transmission takes place on the basis of a contractual relationship and our legitimate interest in simplifying the payment of the remuneration.
Data is only processed in Germany in addition to the external calls listed above. For data transfers to the countries listed above, data protection is guaranteed under the EU standard contractual clauses.
We cooperate with the following companies for payment purposes:
- PayPal S.à.rl et Cie, SCA 22-24 Boulevard Royal, L-2449 Luxembourg
- Skrill Ltd. at 25 Canada Square, E14 5LQ London, United Kingdom
- EcoMatcher Ltd, Paris 1 C, 41 Conduit Road, Hong Kong
If you want to use the companies mentioned above for the payment, your data will be forwarded to them. This refers to your name, date of birth, the country in which you live, as well as your postal address and your e-mail address.
Our terms and conditions do not allow multiple participations within an identical survey by using different e-mail addresses.
In order to assure this, comparisons are made before a PayPal monetarization is paid out. For this purpose, a panelist connects to his PayPal account. Thereby, a comparison of the e-mail addresses is conducted. If the e-mail address is identical a payout will take place. During this process we store the "Payer_ID" of each panelist. This allows us to quickly identify if a panelist tries to get a monetarization paid out to his PayPal account multiple times.
Besides the "Payer_ID", "requesting TID"; "Payer-ID"; "other TID with Payer-ID"; "name at PayPal"; "e-mail addresses stored at PayPal"; "address data"(only the respective country) are transmitted as well.
With this process, we want to prevent that panelists participate in one identical survey multiple times with different e-mail addresses, and get multiple rewards.
In addition, we check the information provided in the payout process (in particular the country in which you live and the date of birth) against the master data you have provided us with. If there are any discrepancies, we reserve the right to stop the payment. Further information on this and your rights in this particular case can be found below under the section "Automated decisions in individual cases".
The data processing is carried out on the basis of Art. 6 para. 1 letter of the DSGVO. Our legitimate interest is the identification of fraudsters and the prevention of any unlawful behavior.
We store the data for the period of active usage of a panelist's survey account or until it is recalled.
For the purpose of identifying and assigning surveys from third parties, we will pass on anonymized information such as year of birth, postal code, gender, educational level and professional position as well as other anonymized information to other market researchcompanies.
This is necessary in order to:
- fulfill our contractual obligations and provide you with our service;
- to fulfill legal obligations, in particular claims of the public prosecutor's office or claims established by the court;
- to enforce our General Terms and Conditions properly.
We can access your account, including its content, under the conditions listed above, or to answer service requests or to resolve technical issues.
We share your personal and/or socio-demographic data, including, but not limited to, an identification number, post code, gender, relationship status, education, professional status, and non-personal information about other household members with third party sample/market research companies for them to determine whether you fall into the target group of a survey. If you have been selected for a survey, the third sample/market research company will provide us with your identification number and a survey link and we will invite you to the survey. We will not share your name, email address or phone numbers with third party sample/market research companies. In connection with the disclosure of this data to third party sample/market research companies, your data may be stored and passed on outside of your country of residence, including but not limited to, the United States. If you have any questions regarding the exchange of data, please contact us. Alternatively, you are always open to terminate your membership with us. Your participation in these surveys does not entitle you to rewards or memberships offered by third-party sample/market research companies.
For the purposes of fraud detection and prevention as well as quality assurance, we will transfer the automatically collected information about your device and its services (IP address, device type, operating system, network and internet service provider, time zone, web browser version, screen resolution, display information) on the legal basis of Art. 6 para. 1 lit. f GDPR to our partner, Imperium, LLC, 1720 Post Road East Suite 221, Westport, Connecticut, for digital fingerprinting technology implementation.
By completing the EU standard data protection clauses in accordance with Art. 46 para. 2 lit. c) GDPR, Imperium undertakes to comply with European data protection law when processing data. The legal basis for processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in fraud prevention and quality assurance.
We use the Freshdesk communication tool. Freshdesk is a help desk application — i.e. a web-based ticket system where a team of company representatives can see all customer enquiries at a glance. The customer also has the option to find their own answers in the help desk software through the knowledge base. The service provider for the service is Freshworks Inc., at 2950 S. Delaware Street, Suite 201, San Mateo CA 94403 USA. Freshdesk processes data in the USA, which is why we would like to point out that according to the European Court of Justice, there is currently no appropriate level of protection for the transfer of data to the USA. This entails various risks for the legality and security of the data processing.
Freshdesk uses Standard Contractual Clauses (SCC) as the basis for data processing. These are templates provided by the EU Commission to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries such as the USA. Through the clauses, Freshdesk undertakes to comply with the European level of data protection when processing your data. All relevant information can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=en. The terms and conditions for data processing, which are also included in the SCC, can be found here: https://www.freshworks.com/data-processing-addendum/. For more information on Freshdesk's data processing, please visit: https://www.freshworks.com/privacy/.
Automated individual decision-making including profiling
We use procedures for automated decision making/profiling.
The selection of suitable candidates for a survey takes place through an automated decision. Certain surveys are offered for predefined target groups.
This may result in the decision being made against you as a suitable candidate, which means that the respective survey will not be sent to you. The automated decision is thus used to quickly identify people in a target group and is based on the legal basis of Art. 6 para. 1 lit. b GDPR in the context of the contractual relationship.
If you use Hyperwallet for the payout, we will compare the data you entered as part of the payout with the data stored in your profile. If we find discrepancies in this comparison, we reserve the right to stop the payout process. We do this, to prevent fraud and to protect you from unauthorized payouts to third parties (for example, if your account has been hacked). The legal basis is our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to protect us and you from fraudulent activities.
If you believe that you have been wrongly excluded from a survey by such an automated decision, or that you have been wrongly denied a payout, you can contact our Customer Support via the contact form and request a review of this decision by one of our employees.
The rights of users and data subjects
If you would like to exercise your right, please contact us as the person responsible under the contact details given above or use one of the other ways we offer to send us this message.
Right to receive information:
According to Art. 15 GDPR, you have the right to request confirmation from us as to whether personal data concerning you will be processed by us. If this is the case, you have a right to information about this personal data and further information, which are mentioned in Art. 15 GDPR.
Right to have data corrected:
According to Art. 16 GDPR, you have the right to request that we immediately correct any incorrect personal data relating to you. Taking into account the purpose of the data processing, you also have the right to demand the completion of your incomplete personal data – also by means of a supplementary declaration.
Right to deletion:
You have the right to ask us to delete your personal data immediately. We are obliged to delete personal data immediately if the relevant requirements of Art. 17 GDPR are met. For details, we refer to Art. 17 GDPR.
Right to restrict processing:
In accordance with Art. 18 GDPR, you have the right, under certain conditions, to request that we restrict the processing of your personal data.
Right to data portability:
According to Art 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to give this data to another person in charge without hindrance from us if the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or in a contract in accordance with Art. 6 para. 1 lit. b GDPR is based and processing is carried out using automated processes.
Right to object:
According to Art. 21 GDPR you have the right to the processing of personal data concerning you, which is based on Art. 6 para. 1e or f GDPR; the same applies to profiling based on these provisions.
Where personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for the purposes of such advertising, including profiling to the extent it is related to such direct marketing.
Existence of a right of appeal to a supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority without prejudice to any other administrative or judicial remedy. This right exists in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data violates the GDPR.