Echometer is a browser-based online tool (hereinafter also “service” or “Echometer tool”) that supports organizations in the implementation of a healthy feedback culture by initiating and accompanying a continuous improvement process through team retrospectives.
Our data protection provisions explain in detail which personal data is collected in the context of the use of our service via my.echometerapp.com in which way are processed.
Responsible within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the processing of personal data is
Echometer GmbH
Tondernstrasse 1
48149 Münster
E-mail: info@echometer.de
We only process personal data if this is permitted by law. Personal data will only be passed on to recipients whom we expressly designate in these data protection provisions.
As soon as the purpose of the processing no longer applies, personal data will be deleted or blocked for further use by technical and organizational measures. This also takes place when a prescribed storage period expires, unless there is a need for further storage of the personal data for the conclusion or fulfillment of a contract.
Unless we are legally obliged to store the data for a longer period of time or to pass it on to third parties (in particular law enforcement authorities), the decision as to which personal data we collect, how long it is stored and to what extent you may have to disclose it depends on which functions of our website or service are used in each individual case.
Links on our Internet pages and in our services may redirect to other Internet pages and services that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of the browser. We are not responsible for compliance with data protection regulations and the secure handling of personal data on these websites and services operated by third parties.
These data protection provisions use the terms of the legal text of the GDPR. You can find the definitions (Art. 4 GDPR) under, for example https://dejure.org/gesetze/DSGVO/4.html can be viewed.
We collect various types of data during your use of our website and our service.
The first type is data that you provide to us directly and knowingly. This includes the information you enter when you create an account for the service (name, email address and password) as well as data you create while using the service, e.g. feedback, retrospective interactions, actions created, etc. This data belongs to you. This data belongs to you. Echometer may use the email address and name to contact you directly for troubleshooting, sales outreach, feedback collection and proactive support purposes.
The second type is data that we collect automatically when you use our website and services. This data is only used to operate and improve our service. This is also our legitimate interest, which is why processing is permitted under Article 6(1)(f) GDPR.
By using our service, you give us permission to store this data and process it within the framework of this privacy policy. You may decide to withdraw this consent at any time, but this may reduce or even prevent the usability of our service for you.
In accordance with the European GDPR in accordance with Chapter 3, the following "data subject rights" apply:
Those affected have the right...
Note that we can change our privacy policy. Updates are made available directly on this page. In the event of significant changes, we will also inform you on the registration screen or by email. If you do not agree to future changes to this privacy policy, you must stop using our services and delete your account. We are obliged to inform you about the correction or deletion of personal data or the restriction of processing.
Cookies are text files that are stored or read by a website on end devices. They contain combinations of letters and numbers, e.g. to recognize the data subject when reconnecting to the cookie-setting website, to restore the previous settings, to enable the data subject to remain logged in to a customer account or to statistically analyze certain usage behavior.
We use cookies to:
If you have any questions about our privacy policy, security measures or the exercise of data subject rights, please contact us by e-mail at info@echometer.de.
We use the Telekom Open Cloud for our app, which is provided by:
Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn, Germany
Data protection officer: Dr. Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn, Germany, datenschutz@telekom.de
The Open Telekom Cloud offers Infrastructure as a Service from German high-security data centers.
Providing the hosting infrastructure in which Echometer runs.
Contract performance according to Art. 6 para. 1 letter b DSGVO.
The recipient of the collected data is Telekom Deutschland GmbH.
There is no transmission to third countries.
We use the product analytics tool "PostHog" in our app, which is provided by:
PostHog Inc, 2261 Market Street #4008, San Francisco, CA 94114
Data Protection Officer: Charles Cook (VP Operations), privacy@posthog.com
PostHog is a platform for product development and analysis that makes it possible to roll out new features sequentially as part of release management, ensure their stability and analyze their use. Session recordings are created to analyze user behavior without tracking user input. Data is also processed for support and analysis purposes.
PostHog is used for release management and product support and analysis purposes.
The purposes described represent a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
The recipient of the collected data is PostHog Inc. and Echometer uses EU hosting only.
There is no transmission to third countries.
You can register for our service with your Google account. The registration takes place via a redirect to the website of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), where you can log in with your login.
Scope of processing of personal data: When you register via your Google account, your Google profile is linked to our service. We would like to point out that we have no influence on the processing of data at Google. Please note that you may have to explicitly log out of your Google account again after the takeover process. We receive the following information from Google: Last name, first name and email address Of the information provided to us by Google, we use: Name and email address This information is mandatory for the login to be able to identify them. For more information about Google, please see Google's privacy policy and terms of use.
Legal basis for the processing of personal data: The legal basis for the processing of personal data using your Google account is Art. 6 (1) lit. f DSGVO.
Purpose of data processing: Google is used for the purpose of making your login to our product as pleasant as possible.
Duration of storage: Data that was transferred via Google as part of the registration process will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
Possibility of objection and removal: As a user, you have the possibility to cancel the registration at any time. You can have the data stored about you changed at any time.
You can agree to extended product communication as part of your registration. This communication is handled via the CRM tool HubSpot, which is provided by:
HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141 United States
Data Protection Officer: Nicholas Knoop, Data Protection Officer
HubSpot is used for the purposes of individualized customer communication and market research.
The purposes described represent a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
The recipient of the collected data is HubSpot Inc.
The data will be stored according to HubSpots Data Processing Agreement submitted to HubSpot Inc.
Users can unsubscribe from this optional communication at any time by clicking the "Unsubscribe" button in the product emails.
In some places, Echometer offers AI-supported functions. These functions are provided through an integration with OpenAI Ireland Ltd (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, privacy@openai.com) is provided.
For these functions, it is explicitly pointed out that certain inputs and data are processed by OpenAI. No data other than this input and data is transmitted to OpenAI.
All AI-supported functions in Echometer are optional and require explicit activation and consent.
Provision of AI-supported functions at the request of a user
The purposes described constitute performance of a contract with the consent of the data subject within the meaning of Art. 6(1)(a) and (b) DSGVO.
The data is processed in the USA in accordance with the Data Processing Addendum of OpenAI (see https://openai.com/policies/data-processing-addendum). More information on processing can be found in the OpenAI Privacy Policy: https://openai.com/policies/privacy-policy
You can become a customer of Echometer in two ways:
As part of the Self-Checkout, Stripe is used for automatic billing and invoicing. Stripe is provided by:
Stripe Inc, Corporation Trust Center, 1209 Orange Street, Wilmington, New Castle, DE 19801, USA
Data Protection Officer: dpo@stripe.com, Privacy: privacy@stripe.com
Stripe is used for the purposes of handling the purchase process and billing.
The purposes described constitute performance of a contract with the consent of the data subject within the meaning of Art. 6(1)(a) and (b) DSGVO.
The recipient of the data collected is Stripe Inc.
The data will be processed in accordance with Stripe's data processing agreement (see Stripe Data Processing Agreement).
The extended product communication with users of the free Echometers variant is partly handled via the MixMax tool, which is provided by:
Mixmax Inc, 548 Market Street, PMB 60764, San Francisco, CA, 94104-5401, United States
Data Protection Officer: Jonathan Grant, Data Protection Officer (security@mixmax.com)
Mixmax is used for the purposes of individualized user communication and market research.
The purposes described represent a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
The recipient of the collected data is Mixmax Inc.
The data is saved according to MixMax's Data Processing Agreement to Mixmax Inc.
If data subjects use the paid version of the Echometer app, we process their data on behalf of the owner of the Echometer workspace (usually the employer) in addition to the information in this Privacy Policy. This data processing is governed by the SaaS contract and the data processing agreement signed between Echometer and the owner of the workspace.
In this context, Echometer acts only as a data processor, while the workspace owner acts as a data controller. For further information about this data processing, data subjects can therefore contact their workspace owner/employer, as this is the data controller for the processing of data within the workspace.