Echometer is a survey tool (hereinafter also called “service”) that supports organizations in implementing a healthy feedback culture by initiating and accompanying a continuous improvement process in the organization.
Responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is:
Regina Protmann-Str. 38
Telephone: (0251) 13 12 67 04
Please note that links on our website and in our survey tool may lead you to other websites and services that are not operated by us but by third parties. Such links are either clearly identified by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and safe handling of your personal data on these websites and services operated by third parties.
These data protection provisions use the terms of the legal text of the GDPR. You can find the definitions (Art. 4 GDPR) under, for example https://dejure.org/gesetze/DSGVO/4.html members.
Cookies are text files that are saved or read from a website on your device. They contain combinations of letters and numbers, e.g. to recognize the user and his or her settings when you connect to the cookie-setting website again, to enable you to remain logged in to a customer account or to statistically analyze a certain usage behavior.
General information on data processing
We only process personal data if this is permitted by law. Personal data will only be passed on to recipients whom we expressly designate in these data protection provisions.
As soon as the purpose of processing no longer applies, your personal data will be deleted or protected by technical and organizational measures (e.g. pseudonymization, encryption). This also takes place if a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or performance of a contract.
Unless we are legally obliged to store it for a longer period or to pass it on to third parties (in particular law enforcement agencies), the decision depends on which personal data we collect, how long it will be stored and to what extent you may have to disclose it. depends on which functions of our website or our survey tool you use in individual cases.
What data we collect
We collect various types of data while you are using our website and survey tool.
The first type is data that you provide to us directly and consciously. This includes the information you enter when you create an account for the service (name, email address, and password), and information that you create while using the service, such as: For example, the surveys you create, your responses to surveys, actions taken, etc. This data is yours. By using our service, you give us permission to store and process this data, as explained under "How we use data". You can decide at any time to withdraw this consent, but this will reduce or even prevent the usability of our service for you.
The second type is data that we collect automatically while you are using our website and services. This data is only used to operate and improve our service.
These are your rights
In accordance with the European GDPR, we would like to inform you about the rights that you have under Chapter 3 of the GDPR, your “data subject rights”:
you have the right
- for information about data processing acc. Art. 15 GDPR
- correction of data acc. Art 16 GDPR
- Submit a complaint to a supervisory authority in accordance with Art. 77 GDPR
- for deletion (also known as “right to be forgotten”) in accordance with Art. 17 GDPR
- to restrict processing in accordance with Art. 17 GDPR
- on data portability acc. Art. 20 GDPR
- Objection to the processing, provided that this takes place on the basis of Art. 6 Para. 1 Letter e or f GDPR.
- Save your preferences for our website
- Save your login status if you log in with an account on our website
How to reach us
If you have any questions about our data protection regulations or security measures that we use to secure your data, or you would like to assert your rights as a data subject, please feel free to send an email to email@example.com.
When you access our website and use it for information purposes only, personal data is automatically collected. This involves the following information: browser type and browser version, operating system used, address of the previously visited website, address of the end device with which you access the website (IP address) and time of access to the website. This information is transmitted by your browser, unless you have configured it so that the transmission of the information is suppressed.
This personal data is processed for the purposes of the functionality and optimization of the website, as well as to ensure the security of our information technology systems. This is also our legitimate interest, which is why processing is permitted under Article 6 (1) (f) GDPR.
Google Analytics is used on our website and in our service, a web analytics service provided by Google Ireland Limited ("Google"). Use includes the "Universal Analytics" operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices.
Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and the service, to compile reports on website activity and to provide other services related to Echometer related to website, service and internet usage.
Google Analytics is used for the purposes of economic optimization and the needs-based design of our website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. In addition, we have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Recipients / categories of recipients
The recipient of the data collected is Google.
Transmission to third countries
The personal data is transferred to the USA under the EU-US Privacy Shield based on the adequacy decision of the European Commission. You can use the certificate here recall.
Duration of data storage
The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month.
You can prevent the effect of using Google Analytics at any time with future effect by preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website or the service to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and the service (including your IP address) and from processing this data by Google by doing this Browser add-on download and install. Opt-out cookies prevent the future collection of your data when you visit our website. In order to prevent the acquisition by Universal Analytics across different devices, you have to perform the opt-out on all used systems. If you click here, the opt-out cookie will be set: Deactivate Google Analytics
Google Tag Manager
When you visit our website, Google Tag Manager is loaded as a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) to manage website tags. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that serve, among other things, to measure traffic and visitor behavior, to record the impact of online advertising and social channels, to set up remarketing and targeting groups and to test and optimize websites.
The Google Tag Manager tool, which implements the tags, is a cookie-free domain and does not collect any personal data itself, Google Tag Manager triggers other tags, which in turn may be able to collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Google Tag Manager is used for the purpose of managing website tags and for measuring application requests and contact requests. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The data transfer to the USA is carried out in accordance with Implementing Decision (EU) 2016/1250 of the EU Commission (EU-US data protection shield).
We use the inbound marketing tool "HubSpot" on our website, which is provided by HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 United States. HubSpot is a web-based all-in-one marketing software that is used to implement and control inbound marketing. It helps us to arouse your interest in our products. A personal contact within HubSpot is created as soon as a previously anonymous website visitor fills out a HubSpot form. At this moment, a contact will be created based on your email address.
Purposes of processing
HubSpot is used for the purposes of individualizing advertising and for market research purposes.
The purposes described represent a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
Recipients / categories of recipients
The recipient of the data collected is HubSpot.
Transmission to third countries
The personal data are transferred to the USA under the EU-US Privacy Shield. You can use the certificate here recall. We have also concluded a contract processing contract with HubSpot and implement the strict requirements of the German data protection authorities when using HubSpot.
Facebook Ads - Custom Audiences
We use the remarketing function "Custom Audiences" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With Custom Audiences, we can target the users of our website with advertising by using personalized and interest-related Facebook ads (https://de-de.facebook.com/business/products/ads) when you visit the social network Facebook.
We use Facebook Custom Audiences in the "Facebook Custom Audiences from Website" variant (Facebook Pixel). An invisible pixel is integrated on our website. When a potential customer looks at certain products on our website, this invisible pixel forwards the data to Facebook. The next time the potential customer logs in to Facebook, he will receive targeted advertising for the product due to the integration of the pixel, which he previously viewed but may not have acquired.
This personal data is processed for the purpose of optimizing our offers and individualized advertising. This is also where our legitimate interests lie, which is why processing is permitted under Article 6 (1) (f) GDPR. The data transfer to the USA takes place according to the implementation decision (EU) 2016/1250 of the EU Commission (EU-US data protection shield). If you do not want Facebook to assign the information collected directly to your Facebook user account, you can deactivate the remarketing function "Custom Audiences" in the settings of your Facebook user account. To do this, you must be logged in to Facebook.
You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information (https://www.facebook.com/about/privacy/).
LinkedIn Insight Tag
We use a service on our website ("LinkedIn Conversion Tracking") from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The LinkedIn "Insight Tag" is used to support the service.
The LinkedIn Insight Tag enables the collection of data on visits by members to our website, including referrer URL, IP address, device and browser properties, time and page views. This data will be deleted within seven days.
LinkedIn does not pass on the personal data to us, but only offers aggregated reports on the website target group and the advertising performance.
The data processing serves to display personalized advertising and enables us to evaluate the use of our website. This is a legitimate interest in accordance with Art. 6 para. 1 letter f GDPR.
You can prevent cookies from being stored and read by setting your browser software accordingly. You can also prevent the collection of the data generated by the cookie and related to your use of the website on LinkedIn and the processing of this data by LinkedIn by setting an opt-out cookie that prevents the future collection of your data when you visit this website . To do this, click on this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Further information can be found in LinkedIn's data protection declaration (https://www.linkedin.com/legal/privacy-policy).
The purpose of processing is to analyze surfing and clicking behavior on the website in order to tailor it to your needs. The recipient of the data is Hotjar Ltd., Level 2, St Julian's Business Center, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. The legal basis is Article 6, Paragraph 1, Letter a of the GDPR
The newsletter is sent via "MailChimp", a newsletter distribution platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The names and email addresses of our newsletter recipients are stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp can use this data to optimize or improve its own services. However, MailChimp does not use the data of our newsletter recipients to write them down or to pass them on to third parties.
We also use Heap Analytics, a web analysis service from Heap Inc., 116 Natoma St., San Francisco, CA 94105, USA ("Heap Analytics").
Heap Analytics is used for the purposes of economic optimization and the needs-based design of our website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 Letter f GDPR.
We use the segment analysis service from Segment.io, Inc. from the USA. The segment is used to analyze user data in mobile devices and the Internet. The data is stored on Segment servers in the USA. Segment is certified in the USA according to the EU-US Privacy Shield.
The processing of your personal data that is collected when using Segment is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Your personal data processed by Segment will be automatically deleted after 14 months. Further information on data protection at Segment can be found under the following link: https://segment.com/product/gdpr/.
If you use a contact form on our website or send us an email, HubSpot as the marketing service provider will first process the personal data you provide there and then provide it to us for further processing. This information is transmitted by your browser or email client and stored in our information technology systems. The processing of this personal data is necessary to answer your request. In addition, your IP address and the date and time of the contact request are saved
The data processing serves to answer your request and to prevent misuse of the contact form and to ensure the security of our information technology systems. This processing is lawful because answering your request and protecting our information technology systems constitute legitimate interests within the meaning of Article 6 (1) (f) GDPR.
The personal data will be stored for as long as is necessary to answer your request. If your request leads to a later conclusion of the contract, storage will take place as long as this is necessary to carry out pre-contractual measures or to fulfill the contract. We do not combine this personal data with other data sources.
Social media plugins
Social media plugins are currently not used.
Setup account / registration
So far, you are only authorized to set up an account if you work with us as part of our pilot phase. In all other cases, when you click on “Register” you will be directed to a form where you can leave your contact details so that we can contact you as soon as registration is possible for the public.
You can subscribe to our newsletter on our website. When you register, the data you provide (name and email address) will be forwarded to HubSpot, our marketing service provider. Your IP address and time of registration will be saved.
Your registration for the newsletter is only valid if you have confirmed your email address by clicking on the link in the confirmation email (so-called double opt-in procedure).
The processing of the personal data you have entered is used to send the newsletter. This processing is based on your consent in accordance with Art. 6 Para. 1 Letter a GDPR. The storage of the IP address and the time of registration serves the purpose of ensuring the security of our systems.
The personal data you enter will be stored until we cancel your subscription. We do not combine this personal data with other data sources. There is no data transfer to third parties. You are not obliged to provide this personal data, but it is unfortunately not possible to subscribe to our newsletter without providing it.