Privacy Policy
Dear website visitor,
We appreciate your visit to our website and your interest in our company, TestingTime AG, Rieterstrasse 6, 8002 Zürich, Switzerland, (hereinafter ‘TestingTime’) and its products.
We know that your personal data is important and we are committed to protecting it. This privacy policy (the ‘Privacy Policy’) aims to explain to you which personal data we collect about you, for which purposes/on what legal bases, and how we process it, including who we share it with.
We collect personal data about you in the following instances:
- When you visit our website
- When you register on our website
- When you are shortlisted for a study
- When you submit an application for recruitment
Below you will find an overview of the personal data collected in each occasion, the applicable legal bases, and details on the data recipients.
1. Collection of personal data when visiting our website
(1) When the website is used purely to obtain information, i.e., if you do not register or submit information to TestingTime in any other way (e.g. via email), the personal data collected by TestingTime is the following, as sent by your browser to the TestingTime server:
- IP address
- date and time of request
- time zone difference from Greenwich Mean Time (GMT)
- content of request (specific page)
- access status/HTTP status code
- volume of data transmitted in each case
- website the request comes from
- your browser
- your operating system and interface
- language and version of browser software
Legal basis: The legal basis for processing is our legitimate interest to present you with our website and services.
Purpose of processing: This personal data is required for technical reasons in order to display the website and guarantee stability and security.
Storage: This information is stored in the server’s log files.
(2) Our website uses cookies. Cookies are data files that are stored on your computer system by the internet browser. Cookies help simplify the usage of websites for users. For more information, please review our Cookie Policy.
2. Collection of personal data when you contact us via email or subscribe to our newsletter
When you contact TestingTime by email or subscribe to our newsletter, we collect the following personal data:
- First and last name
- Employer
The data you provide is stored by TestingTime for the purpose of answering your questions. The personal data collected for the purpose of contacting you includes your contact information, such as your first and last name, employer and email address. This information is used only for the purpose of contacting you and will not be processed in any other way. TestingTime deletes data obtained in this context once storage is no longer necessary or, if there is a legal obligation to retain it, restricts the processing of it.
Legal basis: The legal basis for processing is our legitimate interest to provide you information and present you with our website and services. If you subscribed to our newsletter, you consented to the use of your data for the following purposes.
Purpose of processing: The processing of this personal data is necessary in order for us to contact you and to provide you information, such as answering questions, updates on our products and services and marketing information. You can opt out from our newsletter at any time.
Storage: The personal data you submit is collected and stored for internal use by TestingTime and for our own purposes. Please see Section 12 for a list of the storage and processing tools we use.
3. Collection of personal data when you register on our website as a test user
You have the possibility of registering on our website by providing the following personal data:
- First and last name
- Date of birth
- Gender
- Country
- Postal code
- Time zone
- Languages
- Education level
- Employment status
- Operating system
- Email (requires validation)
- Mobile phone number (requires validation)
In addition to the above, your IP address as well as the date and time of registration are stored to prevent misuse of our services.
Legal basis: The legal basis for processing is your intent to conclude a contract with us.
Purpose of processing: The processing of personal data is necessary in order for us to take specific steps before entering into a contract with you as a test user, to contact you and to provide you information, updates on our products and services and marketing information. You can opt out from our newsletter at any time.
Storage: The personal data you submit is collected and stored for internal use by TestingTime and for our own purposes. Please see Section 12 for a list of the storage and processing tools we use.
4. Collection of personal data when you are shortlisted for a study
If a customer company asks for personal data that is not yet saved in the TestingTime database for a specific product study, TestingTime will request the missing information from the test user by means of an email containing a screening link. A response to the screening questions by the test user is voluntary. I
Note that the selection of test users for a study depends on whether the individual test user has provided a response to a particular question. This results in an increase in the likelihood of being selected as a test user for a study.
Legal basis: The legal basis for processing is your intent to conclude a contract.
Purpose of processing: The processing of personal data is necessary in order for us to take specific steps before entering into a contract with you as a test user.
Storage: TestingTime will forward this personal data to the customer. We rely on the principle of data minimisation and only share the data necessary for the performance of the study. Please see Section 12 for a list of the storage and processing tools we use.
5. Collection of personal data when you are selected to participate in a study
If you are selected to participate in a study, we will send you a short reminder with the details.
For you to request a payout and for us to approve payment of your accumulated earnings, you must provide us with your IBAN or PayPal information.
Legal basis: The legal basis for processing is the performance of a contract.
Purpose of processing: The processing of personal data is necessary so that we can send you your earnings for successful study participation, to be able to contact you, and to provide you with information, such as answering questions, updates on our products and services, and marketing information. You can unsubscribe from our newsletter at any time.
Storage: TestingTime will forward this personal data to the customer. Please see Section 12 for a list of the storage and processing tools we use.
6. Collection of personal data for recruitment of our employees
If you submitted an application to work at TestingTime, we ask you to provide the following personal data:
- First and last name
- Date of birth
- Nationality
- Gender
- Home address
- Phone number
- Languages
- Education information
- Employment status
- Financial information
- Employment information
- Passport / ID
- Social security card
- Certificates
In addition to the above, your IP address is stored to prevent misuse of our services.
Legal basis: The legal basis for processing is your intent to conclude a contract with us for recruiting purposes.
Purpose of processing: The registration of personal data is necessary in order for us to enter into a contract for recruiting purposes.
Storage: The personal data you submit is collected and stored for internal use by TestingTime and for recruitment and service delivery purposes.
7. Your data protection rights
You have certain rights on the basis of the applicable data protection law. We will respond to your request without undue delay, at the latest within one calendar month after receipt. Please note that we may ask you to verify your identity before responding to such requests.
Right to access | You have a right to request a copy of the Personal Data held by us as a data controller, which we will provide to you in an electronic form. |
Right to amendment | You have the right to ask us to correct our records if you believe they contain incorrect or incomplete information about you. |
Right to access | If you have provided your consent to the collection, processing and transfer of your Personal Data, you have the right to fully or partly withdraw your consent. This includes cases where you wish to opt out from marketing messages. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another Legal Basis for the processing. To stop receiving emails from us, please click on the "unsubscribe" link in the email you received from us or contact us. |
Right to erasure | You have the right to request that we delete your Personal Data when it is no longer necessary for the Purposes for which it was collected, or when it was unlawfully processed. |
Right to restriction of processing | You have the right to request the restriction of our processing of your Personal Data where you believe it to be inaccurate, our processing is unlawful, or where we no longer need to process it for the initial Purpose, but where we are not able to delete it due to a legal obligation or because you do not want us to delete it. |
Right to portability | You have the right to receive or to request that we transmit your personal data to another data controller in a common format such as Excel, where this is data which you have provided to us and where we are processing it by automated means on the Legal Basis of your consent or in order to perform our contractual obligations (e.g. to provide our Services). |
Right to object to processing | Where the legal basis for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate legal basis for the processing which override your interests, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim. |
Right to lodge a complaint with a supervisory authority | You have the right of appeal to a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. In Switzerland, you can contact the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH-3003 Bern |
8. Use of Google Analytics
(1) TestingTime uses Google Analytics, a web analysis service provided by Alphabet Inc. (‘Google’). Google Analytics uses cookies, text files that are stored on your computer and that make it possible to analyse your use of the website. The information created by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address is truncated by Google beforehand within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide the operator of the website with other services related to the use of the website and internet usage.
(2) The IP address transmitted as part of the Google Analytics service is not combined with any other Google data.
(3) You can prevent cookies from being stored on your computer by changing your browser settings; however, in this case, you may not be able to use all of the website’s functions to the full extent. You can also prevent the storage of data created by the cookie and related to your use of the website (incl. your IP address) and Google’s processing of this data by downloading and installing the plug-in available via the following link: http://tools.google.com/dlpage/gaoptout.
(4) This website uses Google Analytics with the extension ‘_anonymiseIp()’. This means that further processing of IP addresses takes place in a truncated form, which prevents personal identification. Wherever the data collected from you does identify you personally, it is immediately excluded and the personal data deleted at once.
(5) TestingTime uses Google Analytics in order to be able to analyse usage of the website and make regular improvements. Using the statistics obtained, TestingTime can improve the website and make it more engaging for you as a user. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.
(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.
Terms of Service: http://www.google.com/analytics/terms/us.html,
overview of Data privacy: http://www.google.com/analytics/learn/privacy.html,
and Privacy Policy: http://www.google.com/policies/privacy.
9. Use of Google AdWords
(1) TestingTime uses the Google AdWords service in order to draw attention to attractive offers on external websites by means of advertising media (‘Google AdWords’). In connection with this, the success of individual advertising measures can be determined on the basis of the advertising campaign data. TestingTime uses this to track interest, to show you ads that may be of interest to you, to make this website more engaging for you and to achieve a fair calculation of advertising costs.
(2) These advertising materials are delivered by Google using ad servers. In this context, TestingTime uses ad server cookies, which allow certain performance parameters to be measured, such as ad impressions or the number of clicks by users. If you reach this website by clicking on a Google ad, Google AdWords stores a cookie on your computer. These cookies generally become void after 30 days and are not designed to identify you personally. The analysis data stored in this cookie usually includes the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (flagging that the user would not like to be contacted any more).
(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on their computer is still valid, Google and the customer can recognise that they clicked on the ad and were redirected to this page. Each AdWords customer is allocated a different cookie. Thus, cookies cannot be tracked across AdWords customers’ websites. As part of the advertising measures described, TestingTime itself does not collect or process any personal data but, instead, occasionally receives statistical analysis provided by Google. Using this analysis, TestingTime can identify which of the advertising measures used are particularly effective. TestingTime does not receive any additional data from the use of advertising materials, and the user cannot be identified on the basis of this information.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. TestingTime has no influence on the amount of data that is collected by Google through the use of this tool, nor on how the data will be used, and is therefore unable to provide any information in this regard. Through the integration of AdWords conversion tracking, Google is informed that you have accessed a particular part of our website or clicked on a TestingTime ad. If you are registered with a Google service, Google can connect your visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.
(5) You can prevent your participation in this tracking process in various ways: a) by changing the relevant setting in your browser software (specifically, rejecting third-party cookies will result in you not receiving ads from third-party providers); b) by deactivating cookies for conversion tracking by changing the settings in your browser so that cookies from the domain ‘www.gooogleadservices.com’ are blocked, https://www.google.com/settings/ads (it should be noted that this setting will be deleted if you delete your cookies); c) by deactivating interest-based advertising from providers who are signed up to the ‘About Ads’ self-regulation campaign using the link http://www.aboutads.info/choices (it should be noted that this setting will be deleted if you delete your cookies); d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser using the link http://www.google.com/settings/ads/plugin. You may consequently not be able to use all functions of this service to the full extent.
(6) The legal basis for processing your data is our legitimate interest. You can find further information on Google’s Privacy Policy here: http://www.google.com/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
10. Use of Facebook
(1) We use Facebook Ads for test user acquisition and we have a link to our Facebook presence integrated on our website.
(2) The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
(3) Facebook’s published Data Policy, which can be accessed at https://www.facebook.com/about/privacy/, provides information about how personal data is collected, processed or used by Facebook.
11. Use of LinkedIn
We use functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our pages that contains functions of LinkedIn, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you click the “Recommend Button” of LinkedIn and are logged into your account at LinkedIn, it is possible for LinkedIn to assign your visit to our website to you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.
For more information, please refer to the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy
12. Service providers and international transfers
The following table shows which tools of which service providers are used by TestingTime to operate the website and carry out sales and marketing activities. These service providers may be located outside of Switzerland and the EEA. Where this is the case, we rely on the contractual clauses approved by the EU commission to ensure an adequate protection of your Personal Data abroad and conduct, where there is reason to doubt the adequacy of protection, an impact assessment prior to such transfer.
Tool | Company | Usage |
---|---|---|
Nine Internet Solutions AG | Nine Internet Solutions AG Badenerstrasse 47 8004 Zurich Switzerland | TestingTime’s public WordPress content websites are hosted by Nine Internet Solutions AG in Switzerland. https://www.nine.ch/en/privacy-policy |
Hotjar | Hotjar Ltd Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta | TestingTime uses Hotjar to optimize the usability of the website. https://www.hotjar.com/legal/policies/privacy |
mongoDB Atlas | MongoDB Inc. 1633 Broadway 38th Floor New York, NY 10019 USA | TestingTime uses mongoDB Atlas. All personal data is stored with mongoDB Atlas. The data center is located in Ireland. https://www.mongodb.com/cloud-terms-and-conditions |
AWS | Amazon 410 Terry Ave. North Seattle, WA 98109-5210 USA | TestingTime uses AWS to store profile pictures of test users. The computer centre is located in Ireland. https://aws.amazon.com/privacy |
Cloudflare | Cloudflare LLC 101 Townsend St, San Francisco, CA 94107 USA | TestingTime uses Cloudflare to protect the website from DDoS attacks. https://www.cloudflare.com/privacypolicy |
SendGrid | SendGrid, Inc. 1801 California Street, Suite 500 Denver, Colorado 80202 USA | TestingTime uses SendGrid to send automated and personal emails to test users and customers. https://sendgrid.com/policies/privacy/ |
Messagebird | Messagebird Baarsjesweg 285 1058 AE Amsterdam Netherlands | TestingTime uses Messagebird to send automated and personal text messages to test users and customers. https://www.messagebird.com/en/legal/privacy |
BambooHR | BambooHR 335 S 560 W Lindon, Utah 84042 USA | TestingTime uses BambooHR for all internal and external HR activities. https://www.bamboohr.com/privacy |
Zendesk | Zendesk 1019 Market St San Francisco, CA 94103 USA | TestingTime uses Zendesk to answer support requests. Requests sent to help@testingtime.com are automatically forwarded to Zendesk. https://www.zendesk.de/company/customers-partners/privacy-policy |
Bexio | bexio AG Alte Jonastrasse 24 8640 Rapperswil-Jona Switzerland | TestingTime uses Bexio for bookkeeping and accounting. https://www.bexio.com/de-CH/datenschutz |
G Suite (Gmail, Calendar, Documents, Drive) | Google 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA | TestingTime uses the Google Suite as an internal office solution for email, calendar, documents and data storage. https://policies.google.com/privacy |
HubSpot | HubSpot Inc. 25 First Street Cambridge, MA 02141 USA | TestingTime uses HubSpot to send automated and personal emails to customers as well as for marketing communications (e.g. newsletters) to subscribers. https://legal.hubspot.com/privacy-policy |
Lookback | Lookback Inc. 470 Ramona St. Palo Alto, CA 94301 USA | TestingTime uses Lookback to conduct user research studies with test users and customers to improve TestingTime’s product and services. https://lookback.io/privacy |
AdobeSign | Adobe Inc. 345 Park Avenue San Jose, CA 95110-2704 USA | TestingTime uses Adobe to collect digital signatures for NDAs and contracts. https://www.adobe.com/privacy.html |
Xodo Sign | Apryse Technologiepark-Zwijnaarde 122 Zwijnaarde, 9052 Belgium | TestingTime uses Xodo Sign to automatically collect digital signatures for NDAs and other legal documents from test users. www.xodosign.com |
Zoom | Zoom Video Communications Inc. 55 Almaden Boulevard, Suite 400, 500, 600 San Jose, CA 95113 USA | TestingTime uses Zoom to host webinars for customers. https://zoom.us/privacy |
Yokoy | Yokoy Group AG Technoparkstrasse 1 8005 Zurich Switzerland | TestingTime uses Yokoy for the employee expense management. https://www.yokoy.ai/en/privacy-policy |
Asana | Asana 1550 Bryant St Suite 200 San Francisco, CA 94103 USA | TestingTime uses Asana for project management. https://asana.com/terms#privacy-policy |
Hotjar | Hotjar Ltd, Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta | TestingTime uses Hotjar to improve the usability of the website. https://www.hotjar.com/legal/policies/privacy |
Mixpanel | MIXPANEL S.L. Avenida Diagonal, 442 - P. 3 PTA. 1 08037, Barcelona, Spain | TestingTime uses Mixpanel to improve the usability of the website. https://mixpanel.com/legal/privacy-policy/ |
13. Data Protection Officer
As part of the Norstat Group, TestingTime has a Data Protection Officer and an EU Representative, who are responsible for ensuring that the legislation is being followed. The DPO can be contacted at dpo@norstatgroup.com with any questions or concerns you may have. The EU Representative is TestingTime Deutschland GmbH, Widdersdorfer Str. 246, 50825 Köln, Deutschland (help@testingtime.com).
State: July 2022