TestingTime Privacy Policy

We appreciate your visit to our website and your interest in our company, TestingTime AG, Weststrasse 50, 8003 Zurich, Switzerland, (hereinafter ‘TestingTime’) and its products.

1. Information on the collection of personal data

(1) In the following section, TestingTime provides information about the collection of personal data when using the website. It is generally possible to use our website without providing personal data. However, if you would like to take advantage of particular services on this website, personal data may need to be processed. Personal data is all data that relates to you personally, e.g. name, address, email addresses, user behaviour.

Further data is only collected by TestingTime if the user has provided a declaration of consent. By providing a declaration of consent to TestingTime, the user agrees to the processing of their registered personal data within the framework of the scope specified in the consent form. The declaration of consent can be submitted during the test user’s registration process. The declaration of consent can be withdrawn at any time.

If a customer asks for personal data that is not yet saved in the TestingTime database for a specific product study, TestingTime will request the missing information from the test user by email. A response to the email by the test user is voluntary.

If the missing data is personal data that merits greater protection pursuant to Art. 9 GDPR, TestingTime will obtain an additional declaration of consent from the test user.

Note that the selection of test users for a study depends on whether the individual test user has provided a response to a particular question. This results in an increase in the likelihood of being selected as a test user for a study.

If a test user is selected for a study and confirms their registration for the study, TestingTime will forward the profile information they saved during registration as well as some personal information (‘screening’) related to the study (see example).

(2) The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is TestingTime AG, Weststrasse 50, 8003 Zurich, Switzerland, contact@testingtime.com (hereinafter ‘TestingTime’)

You can contact our data protection representative at info@datenschutzpartner.eu or via our postal address with the addition ‘Data Protection Representative’.

VGS Datenschutzpartner UG
Am Kaiserkai 69
20457 Hamburg
Germany
https://datenschutzpartner.eu/

(3) When you contact TestingTime by email, the data you provide is stored by TestingTime for the purpose of answering your questions. The personal data collected for the purpose of contacting you includes your contact information, such as your first and last name, post code, phone number and email address. This information is used only for the purpose of contacting you and will not be processed in any other way. TestingTime deletes data obtained in this context once storage is no longer necessary or, if there is a legal obligation to retain it, restricts the processing of it.

(4) If TestingTime makes use of third-party service providers for individual functions within the service or would like to use your data for promotional purposes, you will be informed about the relevant processes in detail. This includes being informed of the criteria for the storage duration.

2. Collection of personal data when visiting our website

(1) When the website is used purely to obtain information, i.e. if you do not register or submit information to TestingTime in any other way, the only personal data collected by TestingTime is that sent by your browser to the TestingTime server. If you would like to look at the website, TestingTime collects the following data, which is required for technical reasons in order to display the website and guarantee stability and security. This is stored in the server’s log files. (The legal basis is Art. 6(1)(f) GDPR):

  • your IP address
  • date and time of request
  • time zone difference from Greenwich Mean Time (GMT)
  • content of request (specific page)
  • access status/HTTP status code
  • volume of data transmitted in each case
  • website the request comes from
  • your browser
  • your operating system and interface
  • language and version of browser software

 

(2) TestingTime uses cookies. Cookies are data files that are stored on your computer system by the internet browser. When the website is accessed, the cookies can be transmitted to TestingTime, allowing the user to be classified. Cookies help to simplify the usage of websites for users.

It is possible to object to cookies being set at any time by changing the settings in your internet browser. Cookies that have been set can be deleted. However, if you deactivate cookies, it may mean that you cannot use all functions of the website to the full extent.

(3) Registration

You have the possibility of registering on the TestingTime website by providing personal data. The scope and nature of the personal data transmitted is determined by the particular input mask used for registration. The personal data you submit is collected and stored exclusively for internal use by TestingTime and for our own purposes.

When you register, your IP address is stored as well as the date and time of registration. This serves to prevent misuse of our services. The data is not transferred to third parties. An exception is made if there is a legal obligation to transfer data.

The registration of data is necessary in order for us to provide content and services. Registered persons have the possibility of having their stored data deleted or amended at any time. You can obtain information about the stored data concerning you at any time.

3. Your rights

(1) If your personal data is processed, you are a data subject within the meaning of GDPR and you have the following rights vis-à-vis TestingTime as the controller:

  • the right to information
  • the right to rectification and erasure
  • the right to restriction of processing
  • the right to object to processing
  • the right to data portability

 

(2) You have the right to complain to a data protection supervisory authority about the processing of your personal data by TestingTime.

4. Objection to the processing of your data

(1) If you have agreed to your data being processed, you can withdraw your consent at any time. Once you have expressed the withdrawal of your consent to TestingTime, TestingTime will no longer be permitted to process your personal data.

(2) If TestingTime bases the processing of your personal data on a balancing of interests, you can object to the processing. This is the case in particular if processing is not necessary for the purpose of fulfilling a contract with you, which is set out by TestingTime in each case in the description of functions below. When withdrawing your consent in this way, TestingTime requests an explanation of why it should not process your personal data in the way it does. If the objection is justified, TestingTime will examine the matter and either cease or adapt the data processing, or present you with compelling and legitimate reasons for why TestingTime will continue to process it.

(3) You can, of course, object to the processing of your personal data for promotional or data analysis purposes at any time. To do so, inform TestingTime via the following contact details: contact@testingtime.com

5. Use of Google Analytics

(1) TestingTime uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics uses cookies, text files that are stored on your computer and that make it possible to analyse your use of the website. The information created by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address is truncated by Google beforehand within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about website activities and to provide the operator of the website with other services related to the use of the website and internet usage.

(2) The IP address transmitted as part of the Google Analytics service is not combined with any other Google data.

(3) You can prevent cookies from being stored on your computer by changing your browser settings; however, in this case, you may not be able to use all of the website’s functions to the full extent. You can also prevent the storage of data created by the cookie and related to your use of the website (incl. your IP address) and Google’s processing of this data by downloading and installing the plug-in available via the following link: http://tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that further processing of IP addresses takes place in a truncated form, which prevents personal identification. Wherever the data collected from you does identify you personally, it is immediately excluded and the personal data deleted at once.

(5) TestingTime uses Google Analytics in order to be able to analyse usage of the website and make regular improvements. Using the statistics obtained, TestingTime can improve the website and make it more engaging for you as a user. In the exceptional cases when personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.

(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/us.html, overview of Data privacy: http://www.google.com/analytics/learn/privacy.html, and Privacy Policy:
http://www.google.com/policies/privacy

6. Use of Google AdWords

(1) TestingTime uses the Google AdWords service in order to draw attention to attractive offers on external websites by means of advertising media (‘Google AdWords’). In connection with this, the success of individual advertising measures can be determined on the basis of the advertising campaign data. TestingTime uses this to track interest, to show you ads that may be of interest to you, to make this website more engaging for you and to achieve a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google using ad servers. In this context, TestingTime uses ad server cookies, which allow certain performance parameters to be measured, such as ad impressions or the number of clicks by users. If you reach this website by clicking on a Google ad, Google AdWords stores a cookie on your computer. These cookies generally become void after 30 days and are not designed to identify you personally. The analysis data stored in this cookie usually includes the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (flagging that the user would not like to be contacted any more).

(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on their computer is still valid, Google and the customer can recognise that they clicked on the ad and were redirected to this page. Each AdWords customer is allocated a different cookie. Thus, cookies cannot be tracked across AdWords customers’ websites. As part of the advertising measures described, TestingTime itself does not collect or process any personal data but, instead, occasionally receives statistical analysis provided by Google. Using this analysis, TestingTime can identify which of the advertising measures used are particularly effective. TestingTime does not receive any additional data from the use of advertising materials, and the user cannot be identified on the basis of this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. TestingTime has no influence on the amount of data that is collected by Google through the use of this tool, nor on how the data will be used, and is therefore unable to provide any information in this regard. Through the integration of AdWords conversion tracking, Google is informed that you have accessed a particular part of our website or clicked on a TestingTime ad. If you are registered with a Google service, Google can connect your visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.

(5) You can prevent your participation in this tracking process in various ways: a) by changing the relevant setting in your browser software (specifically, rejecting third-party cookies will result in you not receiving ads from third-party providers); b) by deactivating cookies for conversion tracking by changing the settings in your browser so that cookies from the domain ‘www.gooogleadservices.com’ are blocked, https://www.google.com/settings/ads (it should be noted that this setting will be deleted if you delete your cookies); c) by deactivating interest-based advertising from providers who are signed up to the ‘About Ads’ self-regulation campaign using the link http://www.aboutads.info/choices (it should be noted that this setting will be deleted if you delete your cookies); d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser using the link http://www.google.com/settings/ads/plugin. You may consequently not be able to use all functions of this service to the full extent.

(6) The legal basis for processing your data is Art. 6(1)(f) GDPR. You can find further information on Google’s Privacy Policy here: http://www.google.com/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

7. Use of Facebook

(1) TestingTime has Facebook components integrated on its website.

(2) The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

(3) Every time you access an individual page of this website that has a Facebook component (Facebook plug-in) integrated on it, the plug-in will cause the internet browser to automatically download and display the corresponding Facebook component on your computer. A complete overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific page of this website you have visited.

(4) If you are logged into Facebook at the same time, Facebook recognises which specific pages of this website you visit every time you access the website and for the entire duration of each visit to the website. This information is collected by the Facebook components and connected with your Facebook account by Facebook. If you click on one of the Facebook buttons integrated on our website, such as the ‘Like’ button, or if you post a comment, Facebook connects this information with your personal Facebook user account and stores this personal data.

(5) Facebook will be informed via the Facebook components whenever you visit this website, as long as you are also logged into Facebook at the time that you access it; this applies regardless of whether or not you click on the Facebook components. If you do not wish this information to be transmitted to Facebook in this way, you can prevent it by logging out of your Facebook account before accessing the website.

(6) Facebook’s published Data Policy, which can be accessed at https://www.facebook.com/about/privacy/, provides information about how personal data is collected, processed or used by Facebook. Furthermore, it explains the settings options that Facebook offers to protect your privacy. There are also various applications available that enable you to prevent data from being transmitted to Facebook.

8. Use of other tools and software

The following table shows which tools are used by TestingTime to operate the website and carry out sales and marketing activities.

Tool Company Usage
cyon cyon GmbH
Brunngässlein 12
4052 Basel
Switzerland
TestingTime’s official websites are hosted by cyon in Switzerland.

https://www.cyon.ch/legal/privacy

Heroku SalesForce
The Landmark @ 1 Market St.
Suite 300
San Francisco, CA 94105
USA
The TestingTime server is operated by Heroku. The computer centre is located in Ireland.

https://www.salesforce.com/company/privacy

mLabs ObjectLabs Corporation
660 York St. Suite 101
San Francisco, CA 94110
USA
TestingTime uses an mLabs database. All personal data is stored with mLabs. The computer centre is located in Ireland.

https://mlab.com/company/legal/privacy

Logentries Logentries
The One Building, 2nd Floor
1 Grand Canal Street Lower
Dublin 2
Dublin, Ireland
TestingTime writes its log files to the servers of Logentries. The log files are automatically deleted after 7 days.

https://www.rapid7.com/privacy-policy

AWS Amazon
410 Terry Ave. North
Seattle, WA
98109-5210
USA
TestingTime uses AWS to store profile pictures of test users. The computer centre is located in Ireland.

https://aws.amazon.com/privacy

Mandrill The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308 USA
TestingTime uses Mandrill to send automated and personal emails to test users and customers.

https://mailchimp.com/legal/privacy

Messagebird Messagebird
Baarsjesweg 285
1058 AE Amsterdam
Niederlande
TestingTime uses Messagebird to send automated and personal text messages to test users and customers.

https://www.messagebird.com/en/legal/privacy

ActiveCampaign ActiveCampaign
1 N Dearborn, 5th Floor Chicago, IL 60601
USA
TestingTime uses ActiveCampaign to send customers newsletters and track websites visited. This allows conclusions to be drawn automatically about a visitor’s buying intentions and target-oriented content to be delivered.

https://www.activecampaign.com/privacy-policy

Unbounce Unbounce Germany GmbH
Friedrichstraße 68
10117 Berlin
Germany
TestingTime uses Unbounce to enable downloads of marketing material (e.g. white papers) via dedicated landing pages. A typical Unbounce page requires personal data so that the requested marketing material can be delivered by email.

https://unbounce.com/privacy

HotJar Hotjar Ltd
Level 2, St Julians Business Centre
3, Elia Zammit Street
St Julians STJ 3155, Malta
TestingTime uses HotJar to optimise the usability of the website. HotJar makes sporadic recordings of website visitors. The recordings are later analysed by us internally to optimise the website. To deactivate HotJar on your browser, visit the following web page: https://www.hotjar.com/legal/compliance/opt-out

https://www.hotjar.com/legal/policies/privacy

Zendesk Zendesk
1019 Market St
San Francisco, CA 94103
USA
TestingTime uses Zendesk to answer support requests. Requests sent to help@testingtime.com are automatically forwarded to Zendesk.

https://www.zendesk.de/company/customers-partners/privacy-policy

Mailchimp The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308
USA
TestingTime uses Mailchimp to carry out test user recommendation campaigns.

https://mailchimp.com/legal/privacy

Workable Workable
156 2nd St, Suite 221
San Francisco, CA 94106
USA
TestingTime uses Workable to advertise vacancies and manage applications.

https://www.workable.com/privacy

Bexio bexio AG
Alte Jonastrasse 24
8640 Rapperswil-Jona
Switzerland
TestingTime uses Bexio for bookkeeping and accounting.

https://www.bexio.com/de-CH/datenschutz

G Suite
(Gmail, Calendar, Documents, Drive)
Google
1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA
TestingTime uses the Google Suite as an internal office solution for email, calendar, documents and data storage.

https://policies.google.com/privacy

9. Routine deletion and blocking of personal data

Personal data is stored for the duration of the relevant legal retention period. After this period expires, the data is routinely deleted as long as there is no necessity for initiating or fulfilling a contract.

10. Legal basis of processing

Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which TestingTime receives consent for a particular purpose. If processing of personal data is required to fulfil a contract to which you are party, the processing is then based on Art. 6(1)(b) GDPR. The same applies for processing operations that are necessary for carrying out pre-contractual measures. Where TestingTime is subject to a legal obligation that requires personal data to be processed, the processing will be based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary in order to protect your vital interests or those of another natural person. In such case, the processing will be based on Art. 6(1)(d) GDPR. Finally, processing operations may also be based on Art. 6(1)(f) GDPR. This is the legal basis for operations which are not covered by any of the aforementioned legal bases if the processing is required to serve the legitimate interests of TestingTime or a third party, as long as your interests, fundamental rights and freedoms do not override them. The legitimate interests of TestingTime consist of carrying out our business operations.

 

Version: May 2018