Short version:
- Our Customer will ask you some questions. We collect and analyze your responses on their behalf.
- We will not share any information that identifies you with anyone else than our Customer.
- We may share anonymized responses with the research community.
- We do not collect data from any third-party about you (social media or other); only your replies and when you replied.
- In case decisions that affect you will be made, they will be made by our Customer; not us.
- We respect all your GDPR rights, including the right to be forgotten.
Introduction
Testil.io is a complete online, cloud based platform with pre-set IPIP questionnaires, offered by Psycholate (Athens, Greece, Lykourgou 1, 10551 Athens) to our Customers, allowing them to run questionnaires assessing behavioural traits related to work behaviours.
Psycholate is committed to respect your privacy and applicable data protection and privacy laws, including the European General Data Protection Regulation (‘GDPR’). This Privacy Statement (the “Statement”) intends to inform you about the way we collect, use, share and secure personal data (i.e. any data related to an identifiable natural person (a “data subject”), either directly or indirectly), which you provide toTraitForward. This Privacy Statement also describes your choices regarding use, access and correction of personal data.
By completing the questionnaires within TraitForward, you confirm that you have read and fully understood this Statement, that you have provided your free and explicit consent to our Customer to process your personal data, and that you have the authority to provide the Customer with all information submitted by you via TraitForward.
How TraitForward works
Our Customer (e.g. a prospective or current employer of yours or a private or public research institute) has created an Account within TraitForward by purchasing our Services. In this way our Customer has access to questionnaires integrated in TraitForward.
Our Customers are solely responsible to determine the criteria/standards/qualities of hiring, qualifications or any other standards of a survey or a questionnaire. Customers are solely responsible for the ultimate decisions relating to hiring or research and they have warranted, in our written agreement, that decision making shall not be based solely on the result of a questionnaire of TraitForward.
Roles at the processing of your personal data
For the purposes of the GDPR and applicable data protection and privacy laws, the Customer is the Data Controller, because the Customer defines the purpose and the scope of the processing activities. Customer is responsible to respect all applicable data protection and privacy laws, including the GDPR as well as local law, depending on the place of establishment.
Psycholate is a Data Processor and a Data Controller in part.
Psycholate, by administering, managing, operating and maintaining the platform (TraitForward), processes personal data you provide by using TraitForward and completing the questionnaires, on behalf of and under the instructions of the Customer, who defines the personality assessment criteria and qualities, as well as the purpose of the processing. In that respect, Psycholate acts as a Data Processor.
Moreover, Psycholate, will anonymize your personal data, publish and utilize them, for further research, aiming at improving the understanding of personality and other psychological constructs. In this case, no personal information is included in any analysis whatsoever and research results are delivered or published in an anonymous form. Anonymized Data refers to the set of information that is stored right after deleting any personal data that could be used to identify you as an individual (e.g, name, email address). Psycholate is responsible for the anonymization process. In that respect, Psycholate is a Data Controller. Psycholate shall anonymize and use your data only after your explicit consent. Psycholate may share research results based on the processing of anonymized data with third parties for research purposes and without remuneration.
What data is collected?
We only collect the data you provide to us by responding to the various questions that are presented to you. These questions have been either chosen or approved by the Customer for its own purposes. We also collect the time you complete a questionnaire and the timezone as set in your computer. No other indirect or third-party sources of information are used.
Psycholate may also use your email address to communicate with you in case of a technical issue.
Psycholate collects only anonymized data in the way described above for research purposes.
Purposes of the Processing
Customer processes your personal data for research purposes or for hiring purposes. Customer is solely responsible (i) for the legality of the purposes of the processing, ii) for the necessity of the processing to serve these purposes, iii) to inform any and all data subjects, whose personal data is processed by using TraitForward, about the scope, the purpose, the duration and the means of the processing, their rights with respect to the processing iv) to acquire the consent of the data subjects, whose personal data is being processed by using TraitForward.
Psycholate processes anonymized data for research purposes in the way described above.
It is explicitly stated that your details will not be used by Psycholate in any marketing or advertising campaign aimed at selling you goods or services.
Data retention:
We shall retain identifiable data for a period of 18 months or less, according to our Customer’s policy.
Psycholate, after termination of the Subscription Services Agreement, either returns or deletes your personal data at the choice of the Customer, or, as instructed by the Customer, during the Subscription Services Agreement.
Psycholate retains anonymized data indefinitely for research purposes.
Security of the Processing
Psycholate implements the appropriate technical and organizational security measures to protect personal data, including internal security procedures that restrict access to and disclosure of personal data. Psycholate’s personnel is bound by confidentiality and access to personal data is limited to those personnel that is necessary for the provision of the Services. TraitForward is operated and retained solely in the European Economic Area.
Your rights
If you have not been properly informed and/or consented to the processing of your personal data by completing the questionnaires, please do not provide your personal data to TraitForward. If you have provided your consent, you may withdraw your consent at any time by contacting dpo@psycholate.com. Psycholate bears no responsibility about what effect the consent withdrawal may have at the selection process.
You may choose not to consent to the retention of anonymized data by Psycholate for research purposes. If you have provided your consent to Psycholate, but you wish to opt out (consent withdrawal), please send an email to dpo@psycholate.com, mentioning your objection and the email address you used to register.
Please be aware that any objection should be made before the expiration of the retention period. After that, your responses cannot be identified so as to be removed.
Under the GDPR you also have some further rights with regard to personal data you submit by completing the questionnaires, and Customer is responsible to address your requests and satisfy your rights. However, we shall assist insofar as this is possible the Customer/Data Controller to satisfy your requests.
You have the right to be informed about any processing of your personal data (the purpose, scope, duration and means, as well of data sharing), to request access to your personal data, and to receive your personal data or have it transmitted to another data controller;
You have the right to restrict processing of your personal data, for that period of time that allows the data controller to verify the accuracy of personal data or based on any other legitimate reason;
You have the right to request correction of your personal data on your behalf, in case such data is processed incompletely or inaccurately, provided that any modification may require the completion of an approval process;
You have the right to request deletion or destruction of your personal data, if processing is no longer necessary and further retention is not a legal requirement;
You have the right to lodge a complaint with a relevant supervisory authority.
In addition, you may have certain additional rights under other applicable data protection laws, which a data controller must respect.
If you have any questions regarding this Notice, you may contact us at dpo@psycholate.com . Psycholate will respond without delay.
