Asset Publisher

Information on data protection when conducting surveys

With the following information, we would like to give you an overview of the processing of your personal data in the context of the use of our survey tool - e.g. for the implementation of surveys, votes or feedback - of the Konrad-Adenauer-Stiftung e.V. Further information on the processing of your personal data can be found under https://www.kas.de/en/notes-on-data-protection.

 

Responsibility for data processing

Controller (Art. 4 para. 7 GDPR) is the

Konrad-Adenauer-Stiftung e.V.

Klingelhöfer Straße 23

10785 Berlin

Tel: +49 30 26996-0 (Zentrale)

Fax: +49 30 26996-3217 (switchboard)

E-mail: zentrale@kas.de

 

You can reach our data protection officer at

Konrad-Adenauer-Stiftung e. V.

– Datenschutzbeauftragter –

Klingelhöferstraße 23

10785 Berlin

E-mail: dsb@kas.de

 

Categories

Our surveys are conducted anonymously. Microsoft Forms cannot establish a connection between you and the results due to technical preferences by the Konrad-Adenauer-Stiftung e.V.

 

If you are asked for personal data within the survey, it is up to you to provide it and to provide it to the Konrad-Adenauer-Stiftung e.V. with your answers. In this case, we process a wide variety of data. The scope of the data depends on the questions asked and answered. In principle, all information you provide in the context of the respective survey is voluntary.

 

Internal surveys/feedback are usually carried out for employee surveys of the HR department, the works council or individual departments. External surveys/feedback are usually carried out for follow-up and quality control of our events.

 

As part of the preparation of the survey, the following categories of data are regularly processed:

  • First name, last name, e-mail address to be able to invite to the survey by e-mail

During the survey, the following categories of data are regularly processed:

  • Date and time of opening and sending of the questionnaire
  • If applicable, first name, last name, feedback on topics such as mobile working, planned renovation measures, working conditions, programs, projects, etc.
  • If applicable, first name, last name, feedback on our events, quality of the speakers, etc.

 

Purposes and legal bases

Data processing in the context of surveys, polls and feedback is an important method of gathering information that makes it possible to gain important insights. It can therefore serve the purpose of decision-making, adaptation and improvement of processes.

 

Participation in surveys is generally voluntary. The legal basis for the invitation to the survey by e-mail is the protection of our legitimate interests (Art. 6 para. 1 f) GDPR). If you decide to take part in the survey, the legal basis – insofar as personal data is processed – is your consent (Art. 6 para. 1 lit. a), Art. 9 para. 2 lit. a) GDPR). Consent given can be revoked at any time with effect for the future. You will not suffer any disadvantages if you do not participate, revoke or give your consent.

 

Retention of your data

Personal data collected in surveys will be deleted or anonymised after the purpose of the data processing has ceased to exist.

 

As a rule, this is done after the necessary evaluation/exploitation of the information. Exceptions to this only exist if we need the information for the defence or assertion of legal claims.

 

Recipients of your data

We only pass on your data within the scope of the purpose of KAS or to our service providers. We have concluded data protection-compliant contracts with them in accordance with Art. 28 GDPR.

 

To conduct our surveys, we use Microsoft Forms, a product of Microsoft Ireland Operations Limited ("Microsoft"), a subsidiary of Microsoft Inc. in the United States. The data of users from the European Union is processed in data centers within the European Economic Area (EEA). Nevertheless, it may be necessary for the provision of the service as well as for the support that data is processed at the headquarters of Microsoft Inc. in the USA.

 

Transfer of data to a third country

Data is transferred to entities in countries outside the European Union or the European Economic Area (so-called third countries) through the use of Microsoft Forms, as in individual cases data is transmitted outside the country or region in which it was originally collected. This means that data transfers take place between countries in which our service provider Microsoft has facilities. The transmission of data will be limited by us to the extent absolutely necessary.

 

The transfer of your personal data to a third country is carried out in compliance with appropriate safeguards within the meaning of the GDPR in order to be able to ensure compliance with the European level of data protection, in particular through the inclusion of so-called data protection rights. EU Standard Data Protection Clauses (SCC) into the contractual relationship with the recipient.

 

Microsoft has also certified itself according to the agreement between the EU and the USA (so-called Data Privacy Framework), which allows data transfer. To the extent that Microsoft´s website   www.Office.com and/or “Microsoft Forms" processes personal data or uses cookies, Microsoft is responsible for data processing. For the provision of the Microsoft Forms service, cookies from Microsoft are used on the survey page, over which we have no influence. For more information about privacy at Microsoft, see Microsoft Privacy Statement - Microsoft Privacy Policy.

 

Your rights as a data subject

In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent at any time at the above address. As a result, we are no longer allowed to continue the data processing based on this consent in the future.

 

In accordance with Art. 15 GDPR, you can request information about the data stored about you. In addition, under certain conditions, you can request the rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR) of your data. In accordance with Art. 18 GDPR, you may also have the right to restrict the processing of your data as well as the right to have the data provided by you (Art. 20 GDPR) available in a structured, commonly used and machine-readable format. In addition, you have the right to object in accordance with Art. 21 GDPR, provided that we process your data for the protection of legitimate interests. You may object to this processing for reasons relating to your particular situation. In this case, data processing will be suspended, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

 

You also have the option of filing a complaint with the above-mentioned data protection officer or with a data protection supervisory authority. A list of supervisory authorities with addresses can be found at: www.bfdi.bund.de.

 

Status: November 2023