GDPR

GDPR is the European General Data Protection Regulation (GDPR), which became uniformly effective in all Member States on May 25, 2018. It is a set of regulations designed to protect EU citizens' personal data and enforces rules on data privacy and how organizations collect, store and use personal data.

Among other things, GDPR stipulates that the collection of personal data can only start once the researcher (the author of the survey) has received the individual's explicit consent to the collection itself.

The individual (respondent) must also be clearly informed what data will be collected and for what purpose. When collecting personal and survey data, we follow the principle of data minimisation, i.e. we collect only the data we need to fulfil the purpose of the survey. This data may not be used for any other purpose of which the respondent has not been informed and has not given their explicit consent. This means that the author of the survey may only use the data obtained for the purpose of the survey and not pass it on to any third parties. Nor may the data be combined with other data in their possession.

Consent may be withdrawn at any time by the individual (respondent) and the authorisation to process the data will cease. The respondent has the right to erasure (right to be forgotten), modification and access to the data. On this basis, the respondent may request the author of the survey to delete or modify their personal or survey data and to give them access to the data collected.

The full regulation is available here >>

The data controller, who in the context of the GDPR is the author or editor of the survey, determines how personal data is processed, and the data processor processes personal data on behalf of the controller. Data subjects are the persons whose personal data is collected or used.

Individuals’ rights (respondents)

• Right of access: the respondent may request to see what personal data is collected with the survey, for what purpose, for how long, etc. and obtain a copy of this information (Article 15).
• Right to rectification: the respondent may request a change or correction of personal data in the survey (Article 16).
• Right of erasure: the respondent has the right to delete data (“Right to be forgotten”) under certain conditions (Article 17).

Responsibility of editors

Authors or editors of surveys (1KA account holders) are the so-called data controllers that collect data; 1KA is the processor of this data. The editor or survey author is the owner of the survey, which is responsible for all information and data generated and collected using the 1KA tool. At the same time, they are also responsible for the fullfilment of all the requests made by respondents for their surveys (request for erasure, access, rectification of personal or survey data).