This survey has been created and published by 

PURPOSE OF DATA PROCESSING

Purpose

The purpose of treatment is

Legal basis

This data processing is based on the consent of the respondent

DATA PROCESSED

The type of processing can be: collection, recording, organisation, storage, adaptation, editing, extraction, consultation, use, transmiton, communication, publishing or any other form of provision, connection or interconnection, locking, deletion or destruction

Categories of data processed   

The IP address of the computer or mobile device you are currently using might be collected. However, it is only to prevent multiple responses left by the same person. This data is only accessible to EVALANDGO.

Source of data

This information is collected from the respondent who answers the questionnaire

Mandatory nature of data collection

The mandatory collection depends on the type of data involved. If it is the case, this is specified in the questionnaire.

Don't make this decision automatic

PERSONS CONCERNED

The data processing concerns any natural and legal person answering the questionnaire.

DATA RECIPIENTS

Categories of recipients

Data transfer within eu

DURATION OF DATA STORAGE

Personal data is kept during

SECURITY

We constantly protect your data.

This is why we apply all the security measures necessary to protect your data against unauthorised access, modification, disclosure or destruction. These measures include:

The security measures taken by our subcontractor for personal data processing, EVALANDGO, are as follows:

• A secure access to the EVALANDGO online questionnaire platform through a user account with password.
• Ciphering of your data to ensure confidentiality while transfers are made.
• Limiting the collection of data only to the most necessary.
• Not using the data for purposes that do not concern the reason of the collection.
• Keeping personal data for a set amount of time.
• Not transferring this data to third parties, other that EVALANDGO service providers involved in the execution of the contract of EVALANDGO online questionnaires.
• Use of digital data hosting providers having made commitments to comply with Personal Data Protection Regulation, including as follows:
• Physical security measures to prevent access to the infrastructure on which EVALANDGO data are stored by unauthorised persons
• Security staff responsible for ensuring the physical security of the data hosting structure, 24/24 hours, 7/7 days
• A system managing authorisations to limit access to data only to those who need to be in contact with data, only because of their professional duties.
• A system of physical and/or logical isolation (per service) of customers.
• Strong authentication processes for users and administrators through a password management policy and, in some cases, a double-authentication measure.
• Processes and devices to keep a trace of actions carried out on the information system in order to report, as established by the regulations, the event of an incident affecting the customer's data
• As a subcontractor, the hosting provider of EVALANDGO has also made these commitments:
  • processing personal data exclusively for the required service (no other use is possible).
  • Not transferring EVALANDGO data outside the EU zone or outside the countries recognised by the European Commission as having a sufficient level of protection.
  • Informing the responsible about any recourse to subcontractors who may need personal data processing.
  • implementing high security standards in order to provide an appropriate security level for these services.
  • Informing the responsible for Data Processing in case of data breaching
  • ensuring the ongoing confidentiality, integrity, availability and resiliency of Treatment systems and services,
  • ensuring the means to restore the availability of data and access to them quickly in case of physical or technical accident,;
  • applying a procedure to test, analyse and evaluate the effectiveness of technical and physical organisational measures properly for security of the treatment

RIGHTS ON THE DATA REGARDING YOU

You can access and obtain copies of data concerning you, oppose the processing of these data, ask for rectifying or have them erased. You also have the right to restrict the processing of your data.

Getting to know your rights on informatics and liberty

Exercising the rights

The Responsible for Data Protection is the person to contact for any request about exercising your rights for processing.

Submit a complaint to the CNIL (national commission on informatics and liberty)

If you feel, after contacting us, that your rights for data processing have not been respected, you can submit a complaint to the CNIL. (national commission on informatics and liberty)."