Survio recognizes that its customers, visitors, users and others utilizing the Survio System or visiting the Survio website value their privacy. This document (Personal Data Protection Rules) contains important information pertaining to the processing of personal data by our company.
Survio would therefore like to inform you of the principles and procedures in the processing of personal data, which is conducted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”).
Please note: In the event of any discrepancies between the English and Czech language version of these Personal Data Protection Rules, the English version shall prevail. The English version is available at: www.survio.com.
The following terms, among others, are used within the text – “User”, “Survio Sites/Questionnaires” and “Third Party”, the definitions of which are set out in the Terms.
Further, under the term “Agreement”, Survio means a legal act on the basis of which the provider undertakes to provide you with its services, whether for payment or free of charge.
Under the term “Survio System”, Survio means software that enables Users to create questionnaires/surveys according to the User’s requirements.
I. Basic Information
Controller’s Identification and Contact Information: Survio s.r.o., identification number (IČ) 28300785, with its registered office at: Brno, Hlinky 995/70, ZIP code 60300, Czech Republic, contact address: Hlinky 78a, Brno, 603 00, Czech Republic, a company registered in the Commercial Register with the Regional Court in Brno, section C, file 59684 (hereinafter also referred to as “Survio” or “we”), contact e-mail: email@example.com.
Data Protection Officer: Survio has appointed a Data Protection Officer to help address any data protection issues. If any such issues arise, please contact the Data Protection Officer directly. The Data Protection Officer is available to help you deal with inquiries regarding the handling of personal data or to provide additional information on the protection of personal data:
Name: Richard Žižka
Phone: +420 725 008 003
Transfer of Personal Data to a Third Country or International Organization: In cases where Survio transfers your personal data to non-EU countries, it always ensures compliance with Article 44, et seq., of the GDPR and also requires compliance from personal data processors. Survio will transfer data only to non-EU countries that are able to ensure the level of protection provided under the GDPR. This level of protection is ensured in particular by the adequacy decision issued by the EU Commission or the application of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR.
Survio does not transfer personal data to third countries or international organizations, except for the transfer of personal data to Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105, which operates the SendGrid service. This processor shall ensure an adequate level of security of personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data and Directive 95/46/EC, on the basis of standard contract clauses, please see: https://www.twilio.com/legal/data-protection-addendum.
Automated Individual Decision-Making: Survio does not conduct profiling or automated individual decision-making.
Information on the Purpose of Data Processing: If personal data are being processed for the purpose of fulfilling an agreement or fulfilling legal obligations, the provision of data is a statutory requirement. If personal data are being processed on the basis of the consent of the data subject, the provision of data is a contractual requirement.
Supervisory Authority: The relevant supervisory authority according to Survio’s registered office is the Office for Personal Data Protection with its registered office at: Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, e-mail: firstname.lastname@example.org, tel.: +420 234 665 125.
Certification: Survio declares that it has obtained the ISO/IEC 27001 certification, which guarantees that the company meets internationally recognized standards for information security management systems.
Survio operates both in the position of a personal data controller, as well as in the position of a personal data processor. Survio operates in the position of a personal data controller in relation to the personal data of Users and of natural persons who visit the Survio website (Art. II of these Rules). In relation to personal data that the User stores on Survio servers (the User puts together a questionnaire in which respondents fill in their personal data), Survio operates as a processor, as it only provides the User with data space for the purposes of data storage. The controller of such personal data is the User itself (Art. III of these Terms).
II. Survio as a Personal Data Controller
Survio operates in the position of a personal data controller in relation to the personal data of Users and natural persons who visit the Survio website.
Why does Survio process personal data?
For the purpose of fulfilling agreements (in particular communicating with customers and concluding agreements), implementing measures taken before the conclusion of an agreement (negotiations before the conclusion of an agreement) or fulfilling legal obligations (in particular bookkeeping and issuance and registration of tax documents), Survio processes primarily the following personal data: name, surname, company name, identification number, tax identification number, residence/registered address, phone number, and e-mail address.
Survio also processes data that it obtains from the User and other natural persons through their use of the Survio system or their visits to the Survio website: cookie files, protocol files (IP address, or other online identifiers). Such personal data is processed on the basis of our legitimate interest or your consent.
Based on legitimate interest or your consent, Survio processes: e-mail address, phone number (sending business messages/newsletters by e-mail and SMS, providing direct marketing).
In the event that Survio intends to process different personal data than as stated in this article, or for different purposes, it can only do so on the basis of a validly granted consent to the processing of personal data. Consent to the processing of personal data must be granted in a separate document.
Survio declares that it does not process the payment information of Users. All payment information is processed by a third party, specifically by the company cleverbridge AG, with registered office at Gereonstr. 43-65, 50670 Cologne, Federal Republic of Germany.
Information on the processing of personal data of employees is provided in a separate internal regulation.
As the controller of personal data, Survio does not process the personal data of Users that fall under special categories of personal data pursuant to Article 9 of the GDPR.
For what period of time does Survio process personal data?
Survio processes your personal data for as long as there is a legal reason to keep it, after which we will delete the data immediately.
The specified scope of Users‘personal data of (name, e-mail address, and address) is processed for the duration of the contractual relationship and subsequently for a maximum of 5 years from the termination of the contractual relationship.
Personal data processed for the purpose of fulfilling obligations arising from special legal regulations, such as legal data retention or documentation obligations, is processed by Survio for the period specified by the applicable laws. These include, in particular, data retention obligations under applicable civil, commercial or tax laws. If the data retention obligation ceases, the personal data will be deleted immediately.
Where does Survio obtain personal data?
Survio obtains personal data directly from data subjects when entering into the Agreement. Survio always informs data subjects as to which of their personal data they must provide for the purposes of fulfilling the Agreement.
When visiting our website:
When visiting our website, Survio collects, processes, and stores the following types of data: browser type and language, IP address of the accessing computer, server requests, incl. time information and the referring URL (i.e. the address of the previous website, if you were redirected to the Survio website by clicking on a link).
This data is necessary in order for the website to be displayed correctly. In addition, this data can also be used as needed to keep the website secure (for example, to prevent hacking attempts). The IP address and browser language are also used to suggest the appropriate language settings for our website. The referring URL is used in anonymised form for statistical purposes. For technical security reasons and in particular to deter attempts to attack the Survio server, this type of data shall be processed in accordance with Article 6(1)(f) of the GDPR.
Customer care, answering questions and technical support:
You can use the Survio website for inquiries or to request technical support.
The contact e-mail or the form available after logging in is used to enter the data necessary for communication (e-mail address or phone number) and to write a message (Article 6(1)(a)(b) of the GDPR). This data is used to manage customer relationships (the course of contact) and to answer your questions/provide technical support.
If an individual solution needs to be adopted, especially in the case of a request for a phone consultation, you may be asked to provide the necessary data that Survio will process in order to provide an adequate level of support to the individual customer. It may include, in particular: name, surname, and employee position in the case of a corporate customer.
You may also be contacted in order to receive customer care by Survio. If you would like to participate in and possibly customise Survio services to your needs, you may be asked to provide contact information, in particular: name, surname, and employee position in the case of a corporate customer.
When using all communication channels, Survio adheres to the principle of data minimisation, so that you only have to enter data that Survio needs to be able to contact you and process your request.
In addition, for technical security reasons and to prevent attack attempts, your IP address is processed.
Conclusion of a contract:
Contact and billing information are required to process an order.
Your data provided within an order is processed by Survio only for the purpose of implementation or performance of the contractual relationship (Article 6(1)(a)(b) of the GDPR), unless expressly provided for other purposes.
The principle of data minimisation and avoiding unnecessary data is observed by providing only the information that Survio necessarily needs to perform the contract or to fulfill its contractual obligations (i.e. your name, ID number, address, e-mail address) or in respect to data which Survio has a legal obligation to handle. Survio does not process your payment details in any way; you only communicate this information to cleverbridge AG; please see below.
For technical and security reasons, your IP address is also processed. Of course, you may provide other information about yourself; however, the provision of such information is voluntary.
If you have subscribed to the newsletter, Survio will collect and process the following data: address, surname, name, and e-mail address.
For statistical purposes, we also perform anonymous link tracking.
Registration / Customer account:
On our website, Survio offers Users the opportunity to register by entering personal data.
Registration is therefore required either for the performance of the contract (via the Survio online shop) with you or to carry out pre-contractual measures (Article 6(1)(a)(b) of the GDPR).
At the same time, Survio adheres to the principle of data minimisation and the avoidance of unnecessary data collection, so only the necessary fields are marked as mandatory when registering. Mandatory data include the e-mail address and password, including the password repeat. Other fields are optional and are marked as such.
By registering on the Survio website, the User’s IP address, date and time of registration (technical data in the background) are also stored. By clicking the “Register” button, you complete the creation of your customer account.
Please note: Survio will store your password in encrypted form. Survio employees cannot read this password. Therefore, they cannot provide you with any information if you forget your password. In this case, use the “Forgot Password” feature to receive an automatically generated new password by e-mail.
Survio uses the services of cleverbridge AG, a third-party partner, to handle and process your payments. In accordance with the principle of data minimisation, Survio does not process any payment data and you only communicates such data to cleverbridge AG.
Further details on data protection at cleverbridge AG can be found at: https://www.cleverbridge.com.
Product demonstration requests:
Survio provides parties interested in the product with the opportunity to have the product demonstrated. When a demonstration is requested, Survio requests information about the interested party in order to prepare and provide the demonstration. For this reason, Survio processes the following data of the interested party: surname, first name, e-mail address, phone number, field of business, job title and number of employees.
III. Survio as a Personal Data Processor
Survio provides the User with data space for the purposes of storing data operated within the Survio system, on Survio servers. The User’s data may also include the personal data of natural persons. In regard to personal data that the User stores on our servers (personal data of respondents), Survio operates as a personal data processor. The controller of such personal data is the User itself.
Notice for the User
If you will be collecting the personal data of natural persons through questionnaires, you become a personal data collector and you are obligated to comply with all personal data protection rules set out by the GDPR and by other legal regulations governing such issue. Survio does not bear any liability for a breach of personal data protection rules by Users.
Notice for respondents
The utilization of the Survio system may be subject to the principles and rules of the given User, if Users have such principles. Users are allowed to refer to their policies directly in the questionnaire. If you provide your personal data to Users, contact the User directly with any questions regarding personal data protection, as the User is in the position of a personal data controller. Survio cannot be liable for the personal data protection principles or security procedures used by the User, which may differ from these Personal Data Protection Rules.
Survio is not entitled to publish information about its Users (personal data controllers). If you have provided your personal data when filling out the questionnaire, you have the right to contact the User through Survio in order for the User to fulfill its information obligation. Survio will inform you that Survio has forwarded your request to the User. Survio is not responsible for the User’s decision on whether to accept your request. If your request has not been satisfactorily resolved, you have the opportunity to request the deletion of personal data in accordance with the GDPR.
What is the purpose of processing and how does Survio handle data?
Survio does not conduct any operations with Users’ data, including personal data, with the exception of storing them on Survio servers, does not intervene in them in any manner, does not modify them, does not make them accessible, nor does it transfer them to third parties (with the exception of making them accessible to state authorities in accordance with the law), unless the Agreement provides otherwise. The sole purpose of handling such personal data is their storage and the possibility of them being accessed by the User.
What kind of personal data does Survio process?
Survio only process such personal data of respondents that will be stored through a Survio questionnaire on Survio servers, i.e. data that end users fill into questionnaires within the Survio system. These may be primarily name, surname, gender, age, job position, residence address, e-mail, etc.
In the event that data belonging to special data categories is stored on the Survio servers, the User is responsible for the lawfulness of obtaining and handling such data in accordance with the GDPR and the applicable national laws. Survio reserves the right to remove such personal data from its servers if Survio finds non-compliance with the conditions for processing personal data of special categories. Before deleting the personal data of respondents, Survio contacts the User with a request for correction.
For what period of time does Survio process personal data?
Survio processes personal data for the duration of the contractual relationship with the User. After the account is cancelled by the User, all data are erased. Users are entitled to request the deletion of data at any time during the contractual relationship. In the event of receipt of the User’s request to delete data, Survio will delete all data without undue delay, but no later than within 15 days of receiving such a request.
IV. Recipients of Personal Data
Survio does not transfer personal data to any other controllers. Processors of personal data are:
- Hosting and server service provider, NETHOST s.r.o., ID number 26226979, with its registered office at: Kšírova 435/136, Brno, Czech Republic. The processor processes the data that Users store on the Survio servers. The sole purpose of processing is to store data and operate the Survio website.
- Email service provider, Twilio Inc., 375 Beale Street, Suite 300, San Francisco, CA 94105. The processor only processes the following data of Users: e-mail address. The sole purpose of processing is to send bulk emails to Users of Survio services.
- E-mail services, online chat on the Survio website, product tours and other customer support services are provided by Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen’s Green, Dublin 2. The processor only processes the following data of Users: first and last name and e-mail of the Users.
- Providers of legal services (law firms) based in the Czech Republic within the scope necessary to resolve complaints and requests from Users and respondents, in the event of legal disputes. It will include primarily the contact information of the User.
The processing of personal data may be conducted by processors exclusively on the basis of a personal data processing agreement, i.e. with guarantees of the organizational and technical security of such data with the definition of the purpose of processing, whereby processors cannot use data for other purposes.
Under certain conditions, personal data may be made available to state authorities (courts, police, notaries, financial authorities, etc., within the scope of the exercise of their statutory powers) or may be provided to other entities within the scope as set out by a special law.
V. Data Security Methods
For the purpose of securing the User’s data against their unauthorized or accidental disclosure, Survio utilizes reasonable and appropriate technical and organizational measures.
Technical measures consist in the application of technologies that prevent unauthorized access to the User’s data by third parties, in particular the use of firewalls, updated antivirus programs, etc. For the purpose of maximum protection, Survio uses encryption of the User’s and end users’ data, primarily including passwords for logging into the Survio system, communication within the Survio system and all data stored on servers. Survio uses TLS/SSL (Transport Layer Security/Secure Socket Layer) encryption for data transmission. Access to areas with a high concentration of personal data processing is protected by electronic security systems.
Organizational measures comprise a set of rules for our employees’ behaviour and are incorporated into Survio’s internal regulations, which are, however, considered confidential due to security reasons. The procedures are based exclusively on the “need to know” principle. Survio thus limits the number of persons who have access to personal data and the ability to handle personal data. Employee access to personal data, as well as methods of handling it, is closely monitored.
Survio takes to ensure that, in the event of the placement of servers at a data center operated by a third party, similar technical and organizational measures are also implemented by such third party.
All data are placed only on servers located within the European Union or in countries ensuring personal data protection in a manner equivalent to the protection ensured by the legal regulations of the Czech Republic.
VI. Rights of Data Subjects
As a data subject, you have:
- the right to access to personal data: a data subject has the right to obtain from Survio a confirmation of whether personal data pertaining to him/her are or are not being processed, and if so, he/she has the right to access to such personal data and to the following information: a) the purpose of processing; b) the category of personal data affected; c) the recipients to whom personal data have been or will be made available; d) the planned time period for which the personal data will be stored; e) the existence of the right to require the rectification or erasure of personal data from the controller or a restriction on their processing, or to lodge an objection against such processing; f) the right to submit a complaint with a supervisory authority; g) all available information on the source of personal data, if not obtained from the data subject; h) the fact that automated decision-making is occurring, including profiling. The data subject also has the right to obtain a copy of the personal data being processed.
- the right to the rectification of personal data: the data subject has the right to require that we rectify inaccurate personal data pertaining to him/her without undue delay, or that we complete incomplete personal data.
- the right to the erasure of personal data: the data subject has the right to require that we erase personal data pertaining to him/her without undue delay in the event that: a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) the data subject withdraws the consent on the basis of which the data were processed, and there is no other legal reason for processing; c) the data subject lodges objections against processing and there are no prevailing legitimate reasons for processing; d) personal data have been processed unlawfully; e) personal data must be erased in order to fulfill a legal obligation set out in the law of the Union or of the Czech Republic; f) personal data have been collected in connection with an offer of information society services. However, the right to erasure shall not apply if the processing is necessary in order to fulfil legal obligations, for the establishment, exercise or defense of legal claims, and in other cases set out by the GDPR.
- the right to the restriction of processing: the data subject has the right to require that we restrict processing, in any of the following cases: a) the data subject refutes the accuracy of the personal data, for the period of time necessary in order for us to be able to verify the accuracy of the personal data; b) the processing of data is illegal and the data subject refuses to allow the erasure of the personal data and requests, in place thereof, the restriction of their use; c) Survio no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defense of legal claims; d) the data subject has lodged an objection against processing, until it is verified whether our legitimate reasons prevail over the legitimate reasons of the data subject.
- the right to lodge a complaint against processing: the data subject has the right, for reasons pertaining to his/her specific situation, to lodge a complaint at any time against the processing of personal data that pertain to him/her and that we are processing on grounds of his/her legitimate interest. In such a case, Survio does not process the personal data further, unless it proves compelling legitimate interests for processing that prevail over the interests or rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
- the right to data portability: the data subject has the right to obtain personal data pertaining to him/her and that he/she has provided us with, in a structured, commonly-used and machine-readable format, and the right to transmit such data to another controller, without Survio hindering it, in the event that: a) processing is based upon consent and b) processing is conducted in an automated manner. In the exercise of his/her right to data portability, the data subject has the right for personal data to be transmitted directly by one controller to another controller, if this is technically feasible.
- the right to lodge a complaint with the supervisory authority: ff the data subject believes that we are not processing his/her personal data in a lawful manner, he/she has the right to lodge a complaint with the supervisory authority. The supervisory authority is the Office for Personal Data Protection with registered office at Pplk. Sochora 27, 170 00 Praha 7, Czech republic, e-mail: email@example.com, tel.: +420 234 665 125.
- the right to information regarding the rectification or erasure of personal data or restriction of processing: Survio is obligated to notify individual recipients to whom personal data have been made available of all rectifications or erasures of personal data or restrictions of processing, with the exception of cases when this proves impossible or requires disproportionate effort. If the data subject requests it, we inform the data subject of such recipients.
- the right to be informed in the event of a breach of personal data security: if it is likely that a certain case of a breach of personal data security will result in a high risk to the rights and freedoms of natural persons, Survio is obligated to notify the data subject of such breach without undue delay.
the right to withdraw consent to the processing of personal data: in the event that the processing of some of the personal data is being conducted on the basis of a consent, the data subject has the right to withdraw his/her consent to the processing of personal data in writing at any time, by sending a disapproval of the processing of personal data to the e-mail address firstname.lastname@example.org In connection with the right to withdraw consent, the following applies:
- If Survio processes your personal data for the purposes of direct advertising, you have the right at any time to object to such processing without giving reasons.
- If you do not consent to processing for direct advertising purposes, Survio will no longer process your personal data for these purposes; simply email email@example.com.
- In the event that Survio processes your data to protect its legitimate interests, you may disagree with such processing at any time for reasons arising out of your particular situation; this also applies to profiling on the basis of these provisions. Subsequently, Survio will cease processing your personal data unless Survio is able to demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the purpose of the processing is to enforce or defend legal claims.
VII. Cookie Files and Protocol Files
Survio uses cookie files, which are small text files that identify the user of the website www.survio.com and record the user’s user activities. The text in a cookie file is often comprised of a series of numbers and letters that positively identify the user’s computer, but do not provide any specific personal data on the User. The cookie usually contains the domain name from which it was sent, information on the age of the cookie, and an alphanumeric identifier.
The website www.survio.com automatically identifies the user’s IP address. An IP address is a number automatically assigned to the user’s computer after connecting to the internet. All such information is recorded in an activity file by the server, which enables the subsequent processing of data. In addition, Survio records the request from the browser and the time of the request, as well as the status and the amount of data transferred within this request.
Survio also collects information about your browser and your computer’s operating system and their versions. It also records the website from which you accessed the Survio website. Your computer’s IP address is only stored for as long as the website is used and for the following three months. After three months, the IP address is deleted or anonymised by truncation.
This data is used by Survio to operate the website, in particular to identify and remedy any errors, to determine the use of the website and to make adjustments or improvements. These are the purposes for which Survio has a legitimate interest in the processing of data pursuant to Article 6(1)(f) of the GDPR.
Types of cookies
Based on its legitimate interest (Article 6 (1)(f) of the GDPR), Survio uses technically necessary cookies, which are necessary for the operation of the website and to ensure its functionality. Survio uses two types of cookies, persistent cookies and session cookies. Persistent cookies remain on your hard drive even after you close your browser. Persistent cookies may be used by the browser during further visits to the website: www.survio.com. Persistent cookies can be deleted. Session cookies are temporary and are deleted as soon as you close your browser.
In addition, Survio uses additional cookies with your permission. These cookies allow Survio to analyse how Users use our website. Survio can thus create the content of the website according to the needs of the visitors. Cookies also allow Survio to measure the effectiveness of a given advertisement and place it, for example, according to the User’s interests. Survio needs your consent to process personal data (Article 6(1)(a) of the GDPR). Of course, if you have given your consent, you can withdraw it at any time without giving a reason.
Please note: If you disable optional cookies, not all features of the Survio website may be fully usable.
Cookie files and similar technologies serve several purposes, which include:
- Log-in and verification: As soon as the User uses a personal account in order to log on, an encrypted cookie file is stored on the User’s device, which enables the User to move between the pages of the website without the need to repeatedly log on. The User can also save their log-in information so that they do not need to log in every time they return to the website www.survio.com.
- Editing: Survio uses cookie files in order to adjust the content and information to the requirements of Users in order to ensure the user-friendliness of the website.
- Marketing: Survio uses cookie files in order to monitor its advertising campaigns, and for the monitoring of User submissions, applications and discount coupons, promotions and contests.
- Diagnostics: Survio uses cookie files for the purpose of diagnosing and repairing technical problems reported by Users or programmers that are associated with the IP addresses under the control of a specific web company or connection provider.
- Analysis: Survio uses cookie files and other identifiers for the purpose of collecting data on the use and performance of the website www.survio.com.
There may also be third party cookie files located on the website www.survio.com. This may be, for example, because we have authorized a third party to conduct a website analysis. Survio utilizes the following service providers:
On its website, Survio uses the Google Analytics tracking tool from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This is how your User’s interactions with the Survio website are obtained and systematically evaluated.
In doing so, your following data is stored:
- IP address
- website usage information
- click progress
- application updates
- browser information
- device information
- visited websites
- URL of the referring server
- Flash version
- location information
- shopping activity
- widget interactions
- date and time of the visit
The legal basis for the processing of your personal data is your consent pursuant to Article 6(1) sentence 1 letter a) of the GDPR. You can withdraw your consent at any time.
The purpose of processing your personal data by Google Analytics is to analyse the interaction of visitors to the Survio website with the Survio website. By evaluating the data obtained here, Survio can optimize its offer and increase User comfort.
Survio deletes or anonymises data collected by Google Analytics as soon as it is no longer needed for Survio’s purposes. It takes place after 26 months.
This service may transfer the collected data to another country. Survio points out that this service may transfer data outside the European Union and the European Economic Area and to countries that do not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without any legal remedies available. Below is a list of countries to which the data is transferred. This can be done for various purposes, such as storage or processing. However, Survio is taking the measures that are possible and necessary under Article 44et seq., of the GDPR in order to ensure the level of data protection in third countries.
Google Tag Manager
Learn more at: https://www.google.com/tagmanager/use-policy.html.
In addition, Google Tag Manager includes the following sub-services (Eloqua, LinkedIn Insight Tag, Hotjar, Google Ads Remarketing, Google Ads Conversion Tracking, Facebook Pixel) and Google Tag Manager, and the sub-services are linked based on your consent (Article 6(1)(a) of the GDPR). You can find the cancellation option in the description of individual sub-services. If you object to one sub-service, that objection will automatically apply to the other sub-services included in Google Tag Manager.
These services may transfer data to another country outside the European Union and the European Economic Area and to countries that do not provide an adequate level of data protection. If the data is transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes without any legal remedies. However, we take measures that are possible and necessary according to Article 44et seq., of the GDPR in order to ensure the adequate level of data protection in third countries.
Cookies are set by Microsoft Corporation.
- This cookie is set by websites that run on the Windows Azure cloud platform. The file is used to assign a client to an instance of the Azure Web application.
- This cookie is installed by Microsoft Bing.
The cookies set by CookieYes Limited are used to check:
- whether the consent banner is active on the website;
- the unique visitor identifier used by CookieYes with regards to granting consent;
- maintaining an overview of activities performed by the User;
Cookies are set by Cloudflare, Inc.
- This cookie is used by cdn services such as Cloudflare to identify clients behind a shared IP address and to set security for individual clients. It does not match any user ID in the web application and does not store any personal data.
- This cookie is set by Cloudflare, Inc. and is used to support Cloudflare Bot Management.
Cookies are set by LinkedIn Corporation.
- The purpose of the cookie is to enable LinkedIn features on the website.
- The cookie is used for routing, to store the User’s language preferences and to display the content in the saved language each time the User visits the website.
- This is a browser identification cookie set by share buttons and ad tags on LinkedIn.
This cookie is also used:
- To store visitors’ consent to the use of the cookies for secondary purposes;
- To track visitors to multiple websites in order to display advertising according to visitors’ preferences;
- To store information about when the synchronization with the lms_analytics cookie for Users in specified countries took place.
G2.com, Inc. This cookie is used to store information on the User’s session with a unique session ID. It stores information such as referrer, landing page, and other.
Cookies are set by Facebook, Inc.
This cookie is used:
- to deliver ads to users of Facebook or another digital platform using Facebook advertising after the User visits the website,
- to show relevant ads to Users and to measure and improve ads. The cookie also tracks User behaviour across the web interface on websites that have Facebook pixel or Facebook social plugin.
Cookies are set by Datadog, Inc. The RUM SDK browser relies on cookies to store session information and track the User’s session on various websites. These are first-party files (set up on your domain) that aren't used for cross-site tracking. More information on: https://docs.datadoghq.com/real_user_monitoring/browser/troubleshooting/#rum-cookies
Cookies are set by Seznam.cz, a.s.
- This cookie is very common and is used for session state management.
Instructions for blocking or removing cookie files in browsers can generally be found in the personal data protection principles or in the user guide documentation of individual browsers.
The User’s browser automatically reports certain information upon every display of the website www.survio.com. When registering on the website www.survio.com or when browsing the website, servers automatically record certain information that the web browser sends upon every visit to the website. These server protocols (so-called “log files”) may contain information such as a web request, IP address, type of internet browser, browser language, linking / exit sites and URLs, platform type, number of clicks, domain names, entry portals, number of pages seen and the order of such pages, the amount of time spent on certain pages, the date and time of a submitted request, and one or more cookie files that may positively identify the web browser.
VIII. Applicable Personal Data Protection Legislation
Survio declares that in the provision of personal data protection, it abides primarily by the following legal regulations:
European Union Legislation
All of the legislation based upon Article 16 of the Treaty on the Functioning of the European Union and Article 7 and 8 of the Charter of Fundamental Rights of the European Union, specifically:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
- Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector;
- Commission Regulation (EU) No. 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications (to a limited extent);
- Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (to a limited extent).
Council of Europe Legislation
- Council of Europe Convention No. 108 dated 28 January 1981 for the Protection of Individuals with Regard to Automatic Processing of Personal Data.
Czech Republic Legislation
- Act No. 110/2019 Coll., on Personal Data Processing;
- Act No. 121/2000 Coll., the Act on Copyright, on Rights Related to Copyright.
Survio is present on social networks to facilitate communication with customers, interested parties and Users who are logged in there and to inform them about Survio’s offers.
Please note that you use these platforms and their features at your own risk. This is especially true for using interactive features (e.g. commenting, sharing or rating). Survio also points out that your data may be processed outside the European Union.
In addition, your data may be processed for market research and advertising purposes. In this way, for example, it is possible to create User profiles using your User behaviour and interests. For example, ads that are likely to match your interests may be turned on or off within the platform. For this purpose, so-called cookies are usually stored on your computer. Independently, User profiles can also store data that was not obtained directly from your end device (especially if you are a member of the respective platform and you are logged in to it).
As a provider of this information service, Survio does not collect or process any other data about your use of its service beyond this scope.
The processing of the User’s personal data takes place on the basis of Survio’s legitimate interests in effective User information and communication with the User pursuant to Article 6(1) sentence 1 letter f) of the GDPR.
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Statement: https://www.facebook.com/about/privacy/.
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Statement: https://twitter.com/de/privacy.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Statement https://www.linkedin.com/legal/privacy-policy.
IX. Final Provisions
By entering into the Agreement, the User confirms that it has acquainted itself with these Personal Data Protection Rules.
Last modified 2022-01-17.