Echometer is a browser-based online tool (hereinafter also “service” or “Echometer tool”) that supports organizations in the implementation of a healthy feedback culture by initiating and accompanying a continuous improvement process through team retrospectives.
Our data protection provisions explain in detail which personal data are used when you use our website www.echometerapp.com , www.agile-retrospective-ideas.com , www.echomat.org as well as in the context of your use of our service my.echometerapp.com in which way are processed.
Responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is:
Regina Protmann-Str. 38
Telephone: (0251) 13 12 67 04
We only process personal data if this is permitted by law. Personal data will only be passed on to recipients whom we expressly designate in these data protection provisions.
As soon as the purpose of the processing no longer applies, your personal data will be deleted or blocked for further use through technical and organizational measures. This also takes place when a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or fulfillment of a contract.
Unless we are legally obliged to store it for a longer period of time or to pass it on to third parties (in particular law enforcement authorities), the decision depends on which personal data we collect, how long it is stored and to what extent you may have to disclose it, on which functions of our website or our service you use in individual cases.
Please note that links on our websites and in our service can take you to other websites and services that are not operated by us but by third parties. Such links are either clearly marked by us or can be recognized by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and the safe handling of your personal data on these websites and services operated by third parties
These data protection provisions use the terms of the legal text of the GDPR. You can find the definitions (Art. 4 GDPR) under, for example https://dejure.org/gesetze/DSGVO/4.html members.
What data we collect
We collect various types of data during your use of our website and our service.
The first type is data that you make available to us directly and consciously. This includes the information that you enter when you create an account for the service (name, email address and password) as well as information that you create while using the service, such as: B. Feedback, interactions in the retrospective, created measures, etc. This data belongs to you. By using our service, you give us permission to store and process this data, as explained under "How we use data". You can decide at any time to withdraw this consent, but this will reduce or even prevent the usability of our service for you.
The second type is data that we collect automatically while you are using our website and services. This data is only used to operate and improve our service.
These are your rights
In accordance with the European GDPR, we would like to inform you about the rights that you have under Chapter 3 of the GDPR, your “data subject rights”:
you have the right
- for information about data processing acc. Art. 15 GDPR
- correction of data acc. Art 16 GDPR
- Submit a complaint to a supervisory authority in accordance with Art. 77 GDPR
- for deletion (also known as “right to be forgotten”) in accordance with Art. 17 GDPR
- to restrict processing in accordance with Art. 17 GDPR
- on data portability acc. Art. 20 GDPR
- Objection to the processing, provided that this takes place on the basis of Art. 6 Para. 1 Letter e or f GDPR.
Cookies are text files that are stored on or read from a website on your device. They contain combinations of letters and numbers in order, for example, to recognize the user and his / her settings when reconnecting to the cookie-setting website, to enable them to remain logged in to a customer account or to statistically analyze certain usage behavior.
- Save your preferences for our website
- Save your login status if you log in with an account on our website
When you access our website and use it for information purposes only, personal data is automatically collected. This involves the following information: browser type and browser version, operating system used, address of the previously visited website, address of the end device with which you access the website (IP address) and time of access to the website. This information is transmitted by your browser, unless you have configured it so that the transmission of the information is suppressed.
This personal data is processed for the purposes of the functionality and optimization of the website, as well as to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Article 6 (1) (f) GDPR.
How to reach us
If you have any questions about our data protection regulations or security measures that we use to secure your data, or you would like to assert your rights as a data subject, please feel free to send an email to email@example.com.
If you use a contact form on our website or send us an email, HubSpot as the marketing service provider will first process the personal data you provide there and then provide it to us for further processing. This information is transmitted by your browser or email client and stored in our information technology systems. The processing of this personal data is necessary to answer your request. In addition, your IP address and the date and time of the contact request are saved
The data processing serves to answer your request and to prevent misuse of the contact form and to ensure the security of our information technology systems. This processing is lawful because answering your request and protecting our information technology systems constitute legitimate interests within the meaning of Article 6 (1) (f) GDPR.
The personal data will be stored for as long as is necessary to answer your request. If your request leads to a later conclusion of a contract, it will be stored as long as this is necessary to carry out pre-contractual measures or to fulfill the contract.
Registration as a user in the Echometer tool
You can subscribe to our newsletter on our website. When you register, the data you provide (name and email address) will be forwarded to HubSpot, our marketing service provider. Your IP address and time of registration will be saved.
Your registration for the newsletter is only valid if you have confirmed your email address by clicking on the link in the confirmation email (so-called double opt-in procedure).
The processing of the personal data you have entered is used to send the newsletter. This processing is based on your consent in accordance with Art. 6 Para. 1 Letter a GDPR. The storage of the IP address and the time of registration serves the purpose of ensuring the security of our systems.
The personal data you enter will be stored until we cancel your subscription. We do not combine this personal data with other data sources. There is no data transfer to third parties. You are not obliged to provide this personal data, but it is unfortunately not possible to subscribe to our newsletter without providing it.
Integrated third-party providers
Google Analytics is used on our website and in our service, a web analytics service provided by Google Ireland Limited ("Google"). Use includes the "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices.
Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and the service, to compile reports on website activity and to provide other services related to Echometer related to website, service and internet usage.
Google Analytics is used for the purposes of economic optimization and the needs-based design of our website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. In addition, we have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Recipients / categories of recipients
The recipient of the data collected is Google.
Transmission to third countries
The personal data is transferred to the USA under the EU-US Privacy Shield based on the adequacy decision of the European Commission. You can use the certificate here recall.
Duration of data storage
The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month.
Data subject rights
You can prevent the effect of using Google Analytics at any time with future effect by preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website or the service to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and the service (including your IP address) and from processing this data by Google by doing this Browser add-on download and install. Opt-out cookies prevent the future collection of your data when you visit our website. In order to prevent the acquisition by Universal Analytics across different devices, you have to perform the opt-out on all used systems. If you click here, the opt-out cookie will be set: Deactivate Google Analytics
Google Tag Manager
When you visit our website, Google Tag Manager is loaded as a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) to manage website tags. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that serve, among other things, to measure traffic and visitor behavior, to record the impact of online advertising and social channels, to set up remarketing and targeting groups and to test and optimize websites.
The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not collect any personal data itself, Google Tag Manager triggers other tags, which in turn may be able to collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Google Tag Manager is used for the purpose of managing website tags and for measuring application requests and contact requests. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The data transfer to the USA is carried out in accordance with Implementing Decision (EU) 2016/1250 of the EU Commission (EU-US data protection shield).
We use the inbound marketing tool "HubSpot" on our website, which is provided by HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 United States. HubSpot is a web-based all-in-one marketing software that is used to implement and control inbound marketing. It helps us to arouse your interest in our products. A personal contact within HubSpot is created as soon as a previously anonymous website visitor fills out a HubSpot form. At this moment, a contact will be created based on your email address.
Purposes of processing
HubSpot is used for the purposes of individualizing advertising and for market research purposes.
The purposes described represent a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
Recipients / categories of recipients
The recipient of the data collected is HubSpot.
Transmission to third countries
The personal data are transferred to the USA under the EU-US Privacy Shield. You can use the certificate here recall. We have also concluded a contract processing contract with HubSpot and implement the strict requirements of the German data protection authorities when using HubSpot.
Facebook Ads - Custom Audiences
We use the remarketing function "Custom Audiences" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With Custom Audiences, we can target the users of our website with advertising by using personalized and interest-related Facebook ads (https://de-de.facebook.com/business/products/ads) when you visit the social network Facebook.
We use Facebook Custom Audiences in the "Facebook Custom Audiences from Website" variant (Facebook Pixel). An invisible pixel is integrated on our website. When a potential customer looks at certain products on our website, this invisible pixel forwards the data to Facebook. The next time the potential customer logs in to Facebook, he will receive targeted advertising for the product due to the integration of the pixel, which he previously viewed but may not have acquired.
This personal data is processed for the purpose of optimizing our offers and individualized advertising. This is also where our legitimate interests lie, which is why processing is permitted under Article 6 (1) (f) GDPR. The data transfer to the USA takes place according to the implementation decision (EU) 2016/1250 of the EU Commission (EU-US data protection shield). If you do not want Facebook to assign the information collected directly to your Facebook user account, you can deactivate the remarketing function "Custom Audiences" in the settings of your Facebook user account. To do this, you must be logged in to Facebook.
You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information (https://www.facebook.com/about/privacy/).
LinkedIn Insight Tag
We use a service on our website ("LinkedIn Conversion Tracking") from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The LinkedIn "Insight Tag" is used to support the service.
The LinkedIn Insight Tag enables the collection of data on visits by members to our website, including referrer URL, IP address, device and browser properties, time and page views. This data will be deleted within seven days.
LinkedIn does not pass on the personal data to us, but only offers aggregated reports on the website target group and the advertising performance.
The data processing serves to display personalized advertising and enables us to evaluate the use of our website. This is a legitimate interest in accordance with Art. 6 para. 1 letter f GDPR.
You can prevent cookies from being stored and read by setting your browser software accordingly. You can also prevent the collection of the data generated by the cookie and related to your use of the website on LinkedIn and the processing of this data by LinkedIn by setting an opt-out cookie that prevents the future collection of your data when you visit this website . To do this, click on this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Further information can be found in LinkedIn's data protection declaration (https://www.linkedin.com/legal/privacy-policy).
The purpose of processing is to analyze surfing and clicking behavior on the website in order to tailor it to your needs. The recipient of the data is Hotjar Ltd., Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. The legal basis is Article 6, Paragraph 1, Letter a of the GDPR
We also use Heap Analytics, a web analysis service from Heap Inc., 116 Natoma St., San Francisco, CA 94105, USA ("Heap Analytics").
Heap Analytics is used for the purposes of economic optimization and the needs-based design of our website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 Letter f GDPR.
We use the segment analysis service from Segment.io, Inc. from the USA. The segment is used to analyze user data in mobile devices and the Internet. The data is stored on Segment servers in the USA. Segment is certified in the USA according to the EU-US Privacy Shield.
The processing of your personal data that is collected when using Segment is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Your personal data processed by Segment will be automatically deleted after 14 months. Further information on data protection at Segment can be found under the following link: https://segment.com/product/gdpr/.