GDPR Compliance Statement
1. Commitment to Data Protection
At SurveyGauge, we prioritize the protection of personal data. Our operations are fully compliant with the General Data Protection Regulation (GDPR), ensuring transparency, accountability, and security in all data processing activities.
2. Data Processing Agreement (DPA)
We offer a comprehensive Data Processing Agreement (DPA) that outlines the responsibilities of both parties concerning data handling. This agreement ensures:
Purpose Limitation: Data is processed solely for specified, explicit purposes.
Data Minimization: Only data necessary for the intended purpose is collected.
Security Measures: Implementation of appropriate technical and organizational measures to safeguard data.
Sub-processor Management: Engagement of sub-processors only with prior consent and under strict contractual obligations.
3. Rights of Data Subjects
Under GDPR, individuals have the right to:
Access: Obtain confirmation on whether their data is being processed and access to that data.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of their data under certain conditions.
Restriction: Limit the processing of their data under specific circumstances.
Data Portability: Receive their data in a structured, commonly used format.
Objection: Object to data processing based on legitimate interests or direct marketing.
Requests can be made by contacting us at hello@surveygauge.com.
4. Data Security Measures
We implement robust security measures to protect personal data, including:
Encryption: Data is encrypted both at rest and during transmission.
Access Controls: Strict access controls to ensure only authorized personnel can access data.
Regular Audits: Periodic security assessments to identify and mitigate potential risks.
5. Data Breach Notification
In the unlikely event of a data breach, we commit to:
Timely Notification: Informing the relevant supervisory authority within 72 hours.
Affected Parties: Notifying affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
6. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. Upon expiration of the retention period, data is securely deleted or anonymized.
7. Contact Information
For any questions or concerns regarding our GDPR compliance, please contact:
SurveyGauge
Skibhusvej 52A
5000 Odense C
Denmark
Phone: (+45) 40 48 43 89
Email: hello@surveygauge.com