Website Privacy Policy

Contents

• Introduction
• Who is processing your information
• How we process information
• How we share information
• How long do we process your information
• The data subject’s rights according to GDPR
• Contact us

1. Introduction

Questback is committed to data protection and your privacy. Protecting the privacy of individuals is extremely important to Questback as a provider of software as a service (SaaS) based feedback software. When it comes to processing personal data, we are aware of the importance of transparency for the individual whose data is being processed.

This Privacy Policy sets out the way Questback processes personal data of internet users visiting our website (hereafter “website user(s)” or “user(s)”), i.e. customers, members of the press, applicants or other visitors.

All terms herein have the meaning given under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereafter “GDPR”), all subsequent laws that relate to data protection and privacy, and all regulations relating thereto such as guidelines, recommendations, and policies of the relevant data protection authorities all as amended or replaced from time to time (hereafter “Data Protection Regulation“).

Supplementary information

If you are participating in a survey, you might be interested to obtain more information how we process data from survey participants (respondents) on behalf of our customers. You can find this information in our Survey Privacy Policy.

Who is processing your information

This website is operated by:

Questback AS

Bogstadveien 54, 0366 Oslo, Norway

Phone: +47 21 02 70 70,

Mail: dataprotection@questback.com

Web: www.questback.com

As the controller according to Art. 4 (7) GDPR, we ensure that user data is solely processed in accordance with the GDPR and related Data Protection Laws and Regulations.

We will share personal data collected through this website with other Questback companies (hereafter jointly “Questback”) to provide the best possible service, communication and support from local Questback representatives in your country. For more information on how we share your data click here.

How we process information

We collect personal data to gather information about our website users and their areas of interest, to customize website content for users, to tailor our marketing messages to our current and potential customer base, and to enhance our website. We will use this information only as described in this Privacy Policy or in the way we specify at the time of collection.

Request for information

If you submit a request for information about our products, services, publications, events or related subjects (e.g. newsletter, demos, whitepapers, downloads, invitations, pricing information, offers), we may collect and process your name, contact information, company/employer, your area of interest, country, website language and other personal data you provide. We will process this data to contact you, respond to your inquiries and provide requested information based on our legitimate interest to share information about Questback, our products and services and related topics. The provision of any personal data is voluntary. This data is not provided based on any legal or contractual obligation.

Request for support

If you submit a request for support, we may collect and process your name, contact information, user ID, company/employer, your area of interest, country, website language and other personal data you provide. We will process this data to contact you and respond to your request based on our legitimate interest to provide you with the support you need to use our products and services to the fullest extent.

Press inquiry

If you submit a request for information about Questback and/or its products and services, for an interview or public statement as a member of the press, we may collect and process your name, contact information, company/employer, country, website language and other personal data you provide. We will process this data to contact you and respond to your inquiry based on our legitimate interest to provide you with public information and statements on Questback, our products and services.

Website performance

We use cookies and similar tracking technologies (e.g. web beacon, pixels and other identifiers) to recognize you and/or your device on our website to monitor your behaviour and use of our website services. We use this information for our legitimate interest to improve the quality and performance of this website, offer customized content and enhance your user experience. Find more information on the use of cookies here.

Marketing

We use personal data from our website users, i.e. name, contact and professional information, for our legitimate interest to create accurate and up-to-date records of existing and potential customers in our systems. To improve the quality of our database, we supplement existing data with personal data (i.e. employer, job title, contact information) we retrieve from other available lawful sources, e.g. Customer Relationship Management (CRM) system, Social Media Platforms, publicly available registers and address vendors.

If you are an existing customer, customer employee or customer contractor, we may use your information to provide you with information about our products and services (e.g. releases, promotional activities, special offers, events etc.) due to our legitimate interest, that all of our marketing activities are tailored to your interests, and to ensure you receive such information at the right time and place. If you are none of the above, you will receive direct marketing messages from us only upon your express consent.

We also maintain an accurate list of individuals who wish not to receive marketing materials and other information from us to comply with data privacy regulation. Data subject is entitled to withdraw its consent at any time.

Advertising

We use cookies and similar ad technologies (e.g. web beacon, pixels and other identifiers) from advertising networks that collect information about you and your device. This technology serves our legitimate interest to enable the publication of customized marketing messages and ads to you on third party websites and social media platforms. Find more information on the use of cookies here.

Applications

If you chose to upload or otherwise submit your recruitment inquiry (application), we will collect and process the following personal data based on your consent: name, contact information and all other personal data which you provide voluntarily, including but not limited to cover letters, curriculum vitae, work experiences, certificates, reports, grades, diplomas, sample works, references, letters of recommendation, skills, salary request etc. We will process your personal data exclusively to receive and process applications and to make a decision about employment. Data subject is entitled to withdraw its consent at any time.

How we share information

We will not share your personal data with third parties unless stated otherwise in this Privacy Policy or required by statutory law or authorities. Your personal data will be used and accessed by one or more of the following recipients:

Questback companies

We will share your personal data with all members of the Questback Group.

The Questback AS group includes:

Questback AS, Bogstadveien 54, 0366 Oslo, Norway

Questback Sweden AB, Svevägen 59, 113 59, Stockholm, Sweden

Questback OY, Keilarantie 1, 02150 Espoo, Finland

Questback Deutschland GmbH, Kurfürstendamm 30, 10719 Berlin, Germany

Questback Nederland BV, Bogstadveien 54, 0366 Oslo, Norway

Questback UK Ltd, 2 Minster Court, London, United Kingdom

Our employees will process your personal data only to the extent necessary to respond to your inquiry, send requested information and content, get in contact with you or achieve any other purpose for data processing set forth in this Privacy Policy.

We value the concept of data minimization and make reasonable efforts to ensure that only those employees will access and process personal data that actually require such data to perform their tasks.

Questback resellers

If you are in a location where Questback does not maintain internal sales representation for its products, we may share your data, to the extent necessary, to respond to your inquiry, to get in contact with you or to achieve any other purpose for data processing set forth in this Privacy Policy with our resellers.

Suppliers

We may share personal data to hosting providers and other suppliers, as required, who offer hosting and supplementary services. These suppliers will process personal data only on a need-to-know basis and as instructed by Questback to ensure a secure, reliable and high-performance user experience on this website.

Marketing and CRM solutions

We process your personal data for marketing purposes only to the extent permitted by privacy laws and regulations. To deliver marketing messages and ads and to manage our customer relations we use cloud-based services and applications. Our suppliers for such services and applications process personal data only as instructed by Questback and for the purposes described in this Privacy Policy.

Webtracking

We share personal data with providers of website tracking tools to monitor the performance and usability of this website. For more information on website tracking click here.

Social networks

Our website uses social plugins (“plugins”) from social networks, i.e. facebook (facebook.com), twitter (twitter.com), LinkedIn (linkedin.com) and Instagram (instagram.com. These plugins can be recognized by their respective icons and/or logos.

We only use the share function (“share button”), which allows users to share our content to their profiles on social networks. In the event a user calls up the share function, his computer or device establishes a direct connection to the social network’s servers. Certain information is transmitted to the operator of the social network and, if logged in, integrated into the user’s profile. We have no influence on the type of data social networks actually collect with the help of this plugin. Such information may include session information, user ID, password, IP address and other personal data.

If the user is logged in to the social network, its operator can assign the visit to the user’s profile and identity. The social network is hereby enabled to create profiles on the user. If a user is neither logged in or a member of a social network, it is still possible for any network operator to obtain and store IP address and other data. Users that do not want social networks to collect personal data via social plug ins must log out of their social network accounts before using our website and/or and delete all relevant cookies.

How long do we process your information

We will keep your personal data for no longer than is necessary for the purpose described in this Privacy Policy unless there is a legal basis for such processing or Questback is obligated to keep personal data due to statutory retention duties. If you chose to unsubscribe from our services at all, we will delete your personal data immediately upon cancelling your subscription, except for personal data we need to ensure that you will not receive unsolicited messages in the future.

Personal data resulting from your application will be deleted no later than six months after completion of the recruitment process.

The data subject’s rights according to GDPR

Right to access

You have the right to know if we process your personal data and how these are processed. For example, you may have the right to see the purposes of the processing and the categories of personal data to which the processing relates. A request regarding the right to access shall be sent to dataprotection@questback.com.

Right to rectification

You as a registrant have the right to request correction of the information you consider to be incorrect or incomplete. This can be, for example, incorrect telephone numbers, surnames or the like. In such cases, taking into account the purpose of the processing, you have the right to submit additional information. A request regarding the right to rectification shall be sent to dataprotection@questback.com.

Right to be forgotten

Data subjects also have the right to request to be forgotten. This means that we, as data controllers, are obliged to delete personal data that meets the requirements set out in Article 17.1 GDPR within 30 days. Questbacks’ decisions regarding the right to be forgotten will be based on the criteria in the Article 29 Working Groups’ (nowadays European Data Protection Board) guidelines regarding the right to be forgotten. You can send us a request by contacting us at dataprotection@questback.com.

Right to restriction

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

• (a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify theaccuracy of the personal data;
• (b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
• (c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
• (d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to data portability

The right to data portability is one of the news in the GDPR. In practice, this means that you as a data subject have the right to obtain information about you in a structured, generally used and machine-readable format to submit to another personal data controller. Furthermore, the right to data portability means that you, as the registered person, have the right to instruct Questback to directly transfer the relevant information to the other data controller, provided that there are technical possibilities for this.

Right to object

The right to object means that you, as a data subject always have the right to object to the processing of your personal data. A precondition for exercising the right to object is that the legal basis for the processing of personal data is one of the following:

• (a) The treatment is necessary to perform a task of general interest;
• (b) The treatment is based on a balance of interests

Right to complain to the supervisory authority

You as a data subject have the right to complain to the Data Protection Authority if you feel that we have processed your personal data in an incorrect way.

Contact information to authorities:

Norway: Datatilsynet

Postboks 458 Sentrum

0105 Oslo

postkasse@datatilsynet.no

Sweden: Integritetsskyddsmyndigheten

Box 8114, 104 20 Stockholm

imy@imy.se

Finland: Tietosuojavaltuutetun toimisto

PB 800, 00531 Helsingfors

tietosuoja@om.fi

Germany: Bundesbeauftragter für Datenschutz und Informationsfreiheit – “BfDI”

53117 Bonn

poststelle@bfdi.bund.de

Netherlands: Autoriteit Persoonsgegevens

PO Box 93374

2509 AJ DEN HAAG

pers@autoriteitpersoonsgegevens.nl

United Kingdom: Information Comimissioner Office

Wycliffe House, Water Lane, Wilmslow SK9 5AF

https://ico.org.uk/global/privacy-notice/how-you-can-contact-us/

Contact us

If you wish to exercise your rights in accordance with what is stated in this Customer Personal Data Protection Policy or otherwise wish to get in touch regarding the processing of your Personal Data, please contact Questback by e-mail at dataprotection@questback.com.

Questback has appointed a Data Protection Officer as follows:

QUESTBACK DATA PROTECTION OFFICER

Arve Føyen, Lawyer, arvefoyen.com

E-mail: arve@arvefoyen.com

Mobile: +47 918 199 62

Address: Advokat Arve Føyen

Lomviveien 38, 1370 Fornebu, Norway

Copyright © 2024 Questback AS. All Rights Reserved.