1. Controller

The party responsible for data processing on this website within the meaning of the GDPR is:

2. Which data we process and why

a) Account and sign-in (hosts)

When you create a survey, we store your email address and your name. The email address is used solely for passwordless sign-in via a login link. There is no password. The legal basis is Art. 6(1)(b) GDPR (performance of the user relationship).

b) Taking part in a survey (guests)

As a guest, you provide your name, your answers and, optionally, an email address in order to take part in a survey. You do not need your own account for this. If you were invited, your email address originates from the inviting host (Art. 14 GDPR). The purpose is to conduct and evaluate the survey. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in conducting the survey).

c) Sending emails

We send sign-in and invitation links by email. In doing so, the respective email address is processed in order to deliver the message. The legal basis is Art. 6(1)(b) or (f) GDPR.

d) Server log files

When the website is accessed, technically necessary data that your browser transmits automatically is processed (in particular IP address, date and time of access, the resource requested and the browser type). This serves to deliver and technically secure the website. The legal basis is Art. 6(1)(f) GDPR. This data is automatically deleted after 7 days.

3. No tracking

We do not use any analytics, tracking or marketing cookies, nor any third-party services for audience measurement. We use only technically necessary cookies for sign-in and for displaying the website.

4. Retention period

We store account and survey data until you delete it or your account is deleted. After the event, a survey is automatically archived once the tariff-based retention period has elapsed. When it is archived, the personal participant data (name, display name and email address) is automatically removed or anonymised; only the no-longer-identifiable survey outline (title, questions and quantities) is kept. The host can also permanently delete a survey – whether active or archived – at any time. Participant data can be removed from the survey by the host at any time; it is then deleted together with the associated answers. Server log files are automatically deleted after 7 days.

5. Recipients of the data

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes the data exclusively on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR. Login and invitation emails are sent via SMTP through the same server. No transfer to third countries outside the EU/EEA takes place.

6. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). To exercise these rights, please contact michael@malura.de. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).