Privacy Policy of Endress+Hauser for remote user tests

Status: July 2021

In the following, we inform you in accordance with the applicable data protection regulations, among other things, about the type and scope of the personal data that we process as part of the user research studies (hereinafter referred to as “Study” or ”Studies”) in the course of the development process of the endress.com website (hereinafter “Website”), for what purposes and on what legal basis we process this data and your rights as a data subject.

A. General

1. Name and contact details of the responsible entity

Responsible for the processing of your personal data is

Endress+Hauser Group Services AG
Kägenstrasse 2, 4153 Reinach, Switzerland

(hereinafter also referred to as “we” or “us“).

EU representative of Endress+Hauser Group Services AG is:

Endress+Hauser InfoServe GmbH+Co. KG,
Colmarer Str. 6, 79576 Weil am Rhein, Germany
Phone: +49 7621-9751103
E-Mail: info.is@endress.com

The Data Protection Officer of the EU representative is:
Dr. Stefan Baum
Endress+Hauser InfoServe GmbH+Co. KG,
Colmarer Str. 6, 79576 Weil am Rhein, Germany
E-mail: s.baum@bhk-datenschutz.de

2. Types of data processed, categories of data subjects

2.1 Categories of affected persons

We only collect information about you if you signed up with TestingTime in order to participate in our Studies.

2.2 Nature of the data processed

We collect your personal data in the following ways:

Data that you share with us or TestingTime when signing up for participation in our Studies:

  • Data you enter when registering with TestingTime such as surname, first name, contact details, age, gender, country of residence etc.
  • Additional personal data such as your English level, the industry you work in, your role in your entity (e.g. Engineer, Head of Maintenance, Plant Manager), years of work experience etc.
  • Data concerning the user test invitation such as preferred date and time, preferred remote tool

Additional data we receive or generate ourselves or through Ginetta during your participation in our Studies:

  • Data gathered during the remote user tests, such as observations made during the guided user tests, your responses to questionnaires, insights from direct conversations etc.
  • Recording of the remote user test by audio and/or video as the case may be

3. Purpose of processing and legal basis

We use your personal data for the following purposes and based on the following legal bases:

Data that you share with us or TestingTime when signing up for participation in our Studies:

We process such data in order to plan, schedule and manage our Studies and the corresponding remote user tests. Furthermore, the conduct of our Studies is part of our continuous improvement and development process of our Website. The legal basis for the processing of such data is the fulfillment of contractual obligations you entered into with TestingTime and/or our legitimate interest as the case may be.

Additional data we receive or generate ourselves or through Ginetta during your participation in our Studies:

We process such data in order to plan, schedule and manage our Studies and the corresponding remote user tests. Furthermore, the conduct of our Studies is part of our continuous improvement and development process of our Website. The legal basis for the processing of such data is the fulfillment of contractual obligations you entered into with TestingTime and/or our legitimate interest as the case may be.

Furthermore, in case a user test will be recorded, you will be asked for consent to such recording by audio and/or video. Accordingly, the legal basis for such recordings is your consent.

4. Storage duration

We process and store your personal data as long as it is necessary for the purposes mentioned above and for the fulfillment of our legal obligations. We delete your personal data as soon as it is no longer required for the above-mentioned purposes. In any case, your personal data received or generated during your participation in our Studies will be deleted at the latest two years after go-live of the Website redesign in which you have been involved as a participant of our Study.

B. Data processing by third parties

In general, your data in the context of remote user tests with Endress+Hauser will be processed and shared with third parties as follows: After your self-registration on the TestingTime platform (Endress+Hauser Private Pool) as an endress.com test user, Endress+Hauser and its trusted UX agency Ginetta will have the possibility to check if your TestingTime profile meets the requirements of a searched test profile for an upcoming User Research Study. If a fit is given, En- dress+Hauser and Ginetta will send you through the TestingTime platform an email invitation with details about the Study and possible time slots the user test could be held. You will be able to choose your preferred video conferencing tool (Skype, Google Meet, MS Teams, Zoom) to be used in the user test. If you apply for this user test, you will be contacted by a researcher of Ginetta by the agreed date, time, and platform (video conference tool) to conduct the remote user test with you. Usually, this user test entails that you are being interviewed on website user needs and pains followed by a task that you will have to fulfill on a website prototype (Figma online interface design tool) observed and guided via screen sharing by the researcher of Ginetta.

5. Ginetta

(1) The UX agency leading and conducting the User Research Studies on behalf of En- dress+Hauser in the course of the development process of the endress.com website.

(2) Ginetta is a web design and communication consulting agency contracted by Endress+Hauser. Contact details: GINETTA AG, Rieterstrasse 6 8002 Zürich, +41 79 336 60 00, ciao@ginetta.net

6. Figma

(1) Figma is a technology company developing an online tool for interface design. It provides a web-based suite of design, prototyping, and collaboration features that help teams create, test, and share design systems across the organization. During the remote user tests test users will be asked to access a design prototype on the Figma platform.

(2) Figma is a third-party provider located in San Francisco, CA, USA. The privacy policy of Figma can be found at: https://www.figma.com/privacy/

7. YouTube

(1) YouTube is a company that operates a video sharing platform, allowing users to upload, view, and share videos, including movies, music clips, and amateur content. It provides a forum for people to connect, inform, and inspire others across the globe. The company acts as a distribution platform for original content creators as well as large and small advertisers. The platform might be used by the Ginetta research team to record your participation in the remote user test if you gave your consent to do so.

(2) YoutTube is a third-party provider, a subsidiary of Google, located in San Bruno, CA, USA. The privacy policy can be found at: https://policies.google.com/privacy

C. Rights of the data subjects

8. Your rights

If your personal data is processed, you are a data subject and you have the following rights:

a) Data subject rights

The data subject has the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed; if this is the case, he or she has a right of access to such personal data. Under certain legal conditions, you have the right to rectification, the right to restriction of processing and the right to erasure (“right to be forgotten”) of your per- sonal data. In addition, you have the right to receive the data you have provided in a structured, common and machine-readable format (right to data portability), provided that the processing is carried out with the help of automated processes and is based on consent or on a contract.

b) Revocation of consent

If the processing is based on consent, you can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

c) Right of appeal

You have the possibility to lodge a complaint with us or with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. In Switzerland, you can contact the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH-3003 Bern.

d) Right of objection

In addition to the aforementioned rights, you have the right to object as follows:

Right to object on a case-by-case basis

  • You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of “data processing in the public interest” and “data processing on the basis of a balance of interests”; this also applies to a profiling based on this provision.
  • If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to object to processing of data for advertising purposes

  • In individual cases, we process your personal data for the purpose of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

E. Final provisions

9. Security

We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation and unauthorized access. All our employees and all third parties involved in data processing are obliged to comply with the requirements of the applicable data protection laws and the confidential handling of personal data.

10. Changes to our privacy policy

We reserve the right to change our security and data protection measures, insofar as this becomes necessary due to technical development, the expansion of our services or legal changes. In these cases, we will also adapt our data privacy policy accordingly. Please therefore note the current version of our data privacy policy.