Privacy & Cookie Policy
ADMINISTRATOR, COLLABORATORS, EXTERNAL PARTICIPANTS AND PANELLISTS
e-Survey is committed to complete transparency in the processing of your personal information, and to the comprehensive protection of your privacy
The English version is provided for convenience only and is not legally valid. In case of conflict between the French version and the English translation, the French version will control.
Context
“GDPR” AND “PD”
Our privacy policy is part of a legal context marked by the General Data Protection Regulation (GDPR) applicable since 25 May 2018 and the amended French Data Protection Act of 6 January 1978.
This regulation specifies that Personal Data (“PD” or “personal information”) is any information relating to an identified or identifiable natural person. In other words, a piece of data - whatever its nature - becomes “PD” as soon as a link can be made between this data and an individual (identified or identifiable).
Two types of “PD” can be distinguished:
- information that makes it possible to identify an individual directly (e.g. their first and last names) or indirectly (e.g. their identifier on a website); this information is then considered to be “nominative”;
- any other information that is not “nominative” and does not make it possible to identify an individual, but which is associated with “nominative” information that makes it possible to identify them (e.g. a review that an Internet user leaves on a site is not “PD” on its own, but it becomes such when it is recorded in a file with their identifier; the latter often makes it possible to link their review to their e-mail address, or even their first and last names).
There is a lot of “nominative” information that can be used to identify an individual. Apart from their first and last names, it includes: their login ID on a website, their e-mail address, their telephone number or their IP address. Sometimes, it is even the combination of several pieces of information that makes it possible to make them “nominative” and therefore to identify the person, such as, for example, their date of birth (DD/MM/YYYY) combined with their postal code of residence.
Furthermore, data collected from professionals (e.g. clients, prospects, suppliers, partners, etc.) are also considered as “PD” under the GDPR, as long as they relate to a natural person (an individual) and not to a legal person (a company).
In short, only fully anonymised information that cannot be traced back to an identified or identifiable individual - even indirectly from an identifier - does not constitute “PD”.
OUR EXPERTISE IN DATA COLLECTION
The MIS Group, owner and publisher of our e-Survey solution (available at e-survey.io), has specialised in data collection for market research and scientific purposes since 2001.
For more than 20 years, the MIS Group has been assisting large national and international companies, small businesses, research and consultancy firms, public institutions and universities/business schools with their research.
In addition, as part of these activities, our institute MIS Group has developed its own online consumer panel.
Our expertise in data collection is therefore widely recognised.
About our expertise
OUR COMMITMENTS
The reliability of the data we collect, its confidentiality and protection are our priorities.
It is fundamental for us to implement and maintain all the technical and organisational measures necessary to guarantee the reliability, confidentiality and protection of data, particularly in order to maintain a trusting and lasting relationship with all our users: our clients and the participants in our studies (external participants and members of our panel).
In addition, we are members of the international association ESOMAR, which aims to promote good practices among market research professionals. ESOMAR has therefore established an international code of ethical practice, which we are committed to respecting scrupulously: the ICC/ESOMAR Code.
Finally, in order to be as transparent as possible with our users about how we use their data, we have drawn up this privacy and cookies policy. It defines:
- all personal data (PD) that we collect from our users, from our e-Survey solution;
- the reasons (purposes) for which we collect the data;
- the recipients of this data;
- as well as all the technical and organisational measures we have taken to guarantee the confidentiality and protection of this data.
Information collected, legal basis and purposes
TYPES OF USERS
Users of our platform (creation of surveys):
- Administrators : U1
- Collaborators : U2
Survey respondents:
- External participants (all respondents, excluding those from the MIS Group panel): U3
- The panellists (the members of the MIS Group panel): U4
ON THE ADMINISTRATORS (U1)
Any user who registers themselves on our survey platform is considered an “Administrator”.
Click to read more details
As an administrator, when you register, we use the form to collect the following:
-
STEP 1
- your e-mail address* (with a strong password); STEP 2
- your title (Mr, Mrs, Other)*;
- your first name*;
- your last name*;
- your profile*;
- your country*;
- your phone number.
Required information:
Information followed by an * is mandatory because it allows us to link each administrator account to a dedicated e-mail address and to an identifiable individual, in order to avoid the creation of false and/or duplicate accounts (the same e-mail address cannot be used for multiple Administrator accounts).
In addition, your e-mail address is used as a login ID to our platform.
An administrator logs in to our platform using a username (email address) and a password.
The password you choose must be strong:
Finally, the e-mail address also allows us to contact you by e-mail to send you important information (such as important updates) and/or news.
With respect to our emails, we use the “First Name” information to personalise our messages, and the “Profile” information to target our messages to you and only send you emails that we believe are relevant to your profile.
You can opt out of receiving our emails from your e-Survey account:
“My Account” area, “My Profile” section
Optional information:
The phone number is optional. It may be useful for technical support purposes, so that we can contact you urgently in the event of a malfunction in your account or in one of your surveys, for example.
No commercial canvassing will be carried out by telephone (no commercial calls or SMS).
U1.2. Information collected from the “My Profile” form
In the “My account” area, under the heading “My profile”, you will find a form containing all the information recorded when you registered on our survey platform.
You can also use this form to:
- set the language of your Administrator account (French/English/Italian) and your Time Zone;
- opt out from receiving e-mails from us.
U1.3. Information collected from the “My contributors” form
In the “My account” area, under “My contributors / Contributors Management”, you can manage your team and enter its name.
The principle here is to create a team in which you invite collaborators, in order to build and manage surveys with several people (feature reserved for PREMIUM administrators).
See below for information on “Collaborator” accounts.
If you are a PREMIUM administrator, you will also find under “My contributors / Contributors Management” a list of all the collaborators you have registered, including:
- their title (Mr, Mrs, Other);
- their first name;
- their last name;
- their e-mail address;
- their profile;
- their status: invite pending (collaborator registered by the administrator but not confirmed) or invite confirmed (confirmed collaborator).
- the date and time of their last activity on the platform.
U1.4. Information collected from the “Billing information” form
In the “My Account” area under “Billing Information”, you can fill in the information that will then be automatically copied in the “Payment” form (see below) and on your e-Survey invoices.
This is the contractual information of the natural or legal person who is in charge of the various transactions you carry out on e-Survey (PREMIUM subscription, adding additional collaborators, purchasing answers from the panel of respondents, etc.).
It is possible to register a natural person other than the administrator in the billing information.
The information to be entered in this “Billing Information” form is as follows:
- company name (if it is a legal person/company);
- first name of the contact person*;
- last name of the contact person*;
- postal address*;
- postal code*;
- city*;
- country*;
- EU VAT number (in the case of a legal person/company domiciled in the EU).
Information followed by an * must be filled in before you can carry out any transaction on e-Survey.
However, if you do not plan to carry out any transactions on e-Survey, there is no need to fill out this form.
U1.5. Information collected from the “Payment” form
The “Payment” form automatically retrieves all the information from the “Billing Information” form if the latter has been filled in.
This is a form identical to the “Billing Information” form, to which you are redirected before each transaction.
For this, and for the entry and verification of your bank details, you are redirected to the secure payment infrastructure of STRIPE: : stripe.com/gb
Furthermore, for each transaction you make on e-Survey / STRIPE, an invoice is automatically generated by us. It can then be downloaded from the “Billing Information” section under the form.
U1.6. Session information
In addition to the information entered in the various forms detailed above, we automatically collect from all Administrator accounts, on the basis of legitimate interest, the following session information:
- IP address used during the last activity on the survey platform: at each new activity, the new IP address recorded overwrites the previous information;
- Date and time of last activity on the survey platform: at each new activity, the new date and time recorded overwrites the previous information.
ON THE COLLABORATORS (U2)
Any user who has been registered on our survey platform by an administrator is considered a “Collaborator”.
Click to read more details
As a collaborator, when your administrator registers you, they will enter the following information under “My contributors / Contributors Management”:
- your title (Mr, Mrs, Other)*;
- your first name*;
- your last name*;
- your e-mail address*.
All this information is required, and must be entered by your administrator to validate your registration.
Regarding your e-mail address, if you already have an e-Survey account (administrator or collaborator), your administrator cannot register you again with the same e-mail address (in this case, the validation of the registration is automatically blocked and your administrator is informed).
Thereafter, once the registration is validated, you will receive an e-mail with a link allowing you to confirm your wish to join e-Survey and to finalise the creation of your Collaborator account (by creating your password).
A collaborator logs in to our platform using a username (email address) and a password.
The password you choose must be strong:
Your e-mail address will only be used as a login identifier on our survey platform.
You will not receive any e-mails from us with the purpose of presenting you our new products, for example.
The only exceptions that may require us to contact you by e-mail are emergencies such as a malfunction in your account. In this case, our technical support team will contact you.
U2.2. Session information
As with Administrator accounts, we automatically collect the following session information from all Collaborator accounts on a legitimate interest basis:
- IP address used during the last activity on the survey platform: at each new activity, the new IP address recorded overwrites the previous information;
- Date and time of last activity on the survey platform: at each new activity, the new date and time recorded overwrites the previous information.
ON EXTERNAL PARTICIPANTS (U3)
Any user participating in a survey that has been created with our platform (accessible at e-survey.io), and who is not a member of the MIS Group panel, is considered an “External Participant”.
Click to read more details
As an external participant, when you participate in a survey, we collect:
- Your answers to the questions.
We do not control the questions our clients have created in their surveys before they are published.
However, if you participate in a survey of one of our clients on our website and discover abuse (e.g. a question that may violate your privacy), we request you to report it to us immediately by clicking on the “Report Abuse” link at the bottom of the survey.
See the summary below and the section on “Responsibilities” for more details.
U3.2. Session information
In addition to the answers entered in the surveys, we automatically collect from all external participants, on the basis of legitimate interest, the following session information:
- IP address used for participation;
- Dates and times of participation: dates and time spent on the Introduction and Conclusion of the survey;
- Media used for participation (PC, tablet or smartphone);
- Internet browser used during participation.
This session information is collected automatically by us for security purposes: to identify robot intrusions and to ensure the protection of the servers (see below for the summary of the purposes).
With the exception of the dates/times of participation and the equipment used during participation (media), none of this session information is accessible by our clients (see below for a summary of recipients).
The dates and times of participation, as well as the equipment used during participation (media), are made accessible to the client concerned by the survey (administrator and collaborators) as this information can be used by the latter for market research or scientific purposes (e.g. analysing responses according to the time or moment of participation, analysing drop-outs according to the equipment used, etc.).
ON THE PANELLISTS (U4)
Any user who is a Member of the MIS Group panel and participates in a survey that has been created with our platform (accessible at e-survey.io) is considered a “Panellist”.
Click to read more details
Your Panellist ID is the ID assigned to you by your panel site (a site belonging to MIS Group) when you register with it.
Each member of the MIS Group panel has a unique identifier.
This ID is automatically imported into the e-Survey survey from your Panellist account, as soon as:
- you access, from your panel site, a survey created by one of our clients on our platform (and therefore hosted on our site).
The Panellist ID is imported by us on the basis of legitimate interest, and is only accessible by us: under no circumstances can e-Survey Clients access this information (see below for the summary of recipients).
U4.2. Identification information
In the same way as the Panellist ID, the identification information is automatically imported into the survey from your Panellist account, as soon as:
- • you access, from your panel site, a survey created by one of our clients on our platform (and therefore hosted on our site).
Specifically, the identification information that is imported is (and only):
- your gender (Male, Female, Other), which is determined from the title you entered in your panellist account;
- your age (in years), which is automatically calculated from the year of birth you entered in your Panellist account;
- your postal code of residence (5 digits), which is retrieved from the postal address you entered in your Panellist account.
Please note that these three pieces of information do not directly or indirectly constitute nominative information, and therefore do not, on their own, allow us to trace your identity.
This identification information, imported from your Panellist account, is processed by us on the basis of legitimate interest, in order to monitor the distribution of survey participants by gender, age group and region or county, in the case of surveys with quotas.
In the same way as the Panellist ID, this identification information is only accessible by us: under no circumstances can e-Survey Clients access it (see below for the summary of recipients).
U4.3. Information collected from the surveys (answers)
As with external participants, when you participate in a survey, we collect:
- Your answers to the questions.
Please note: we are not responsible for the questions asked and answers collected from the surveys of our clients (administrators and collaborators), as it is the clients who initiate these collections and determine the objectives/purposes thereof. We do not control the questions our clients have created in their surveys before they are published.
However, if you participate in a survey of one of our clients on our website and discover abuse (e.g. a question that may violate your privacy), we request you to report it to us immediately by clicking on the “Report Abuse” link at the bottom of the survey.
See the summary below and the section on “Responsibilities” for more details.
U4.4 Session information
In addition to the imported information and the answers entered in the surveys, we automatically collect from all panellists, on the basis of legitimate interest, the following session information:
- IP address used for participation;
- Dates and times of participation: dates and time spent on the Introduction and Conclusion of the survey;
- Media used for participation (PC, tablet or smartphone);
- Internet browser used during participation.
This session information is collected automatically by us for security purposes: to identify robot intrusions and to ensure the protection of the servers (see below for the summary of the purposes).
With the exception of the dates/times of participation and the equipment used during participation (media), none of this session information is accessible by our clients (see below for a summary of recipients).
SUMMARY
In the table below, we detail all the information we collect from all our users, as well as:
- The legal basis for the collection of this information;
- The purposes of this information;
- The recipients of this information;
- The rights of access and updating of this information by the users concerned.
| Information collected | Legal basis | Purposes | Recipients | Rights of access and updating of information |
|---|
ON THE ADMINISTRATORS (U1)
|
REGISTRATION / MY PROFILE E-mail address |
User consent |
|
e-Survey (MIS Group) only | Yes, at any time |
|
REGISTRATION / MY PROFILE Title, First name and Last name |
User consent | Attach the Administrator account to an identifiable individual | e-Survey (MIS Group) only | Yes, at any time |
|
REGISTRATION / MY PROFILE Profile |
User consent |
|
e-Survey (MIS Group) only | Yes, at any time |
|
REGISTRATION / MY PROFILE Country |
User consent | Obtain statistics on e-Survey users | e-Survey (MIS Group) only | Yes, at any time |
|
REGISTRATION / MY PROFILE Phone number (optional) |
User consent | Communicate urgent information in the event of a malfunction observed on the account | e-Survey (MIS Group) only : technical support | Yes, at any time |
|
MY PROFILE Language and Time Zone |
User consent | Adapt the content of the survey platform to the user | e-Survey (MIS Group) only | Yes, at any time |
|
MY team Team Name |
User consent | Create a team to group several e-Survey users, and allow them to share surveys | e-Survey (MIS Group) only | Yes, at any time |
|
BILLING / PAYMENT Company name |
Contract |
|
|
Yes, at any time |
|
BILLING / PAYMENT First and Last names of the contact person |
Contract |
|
|
Yes, at any time |
|
BILLING / PAYMENT Postal address, Postal code, City and Country |
Contract |
|
|
Yes, at any time |
|
BILLING / PAYMENT EU VAT Number |
Contract |
|
|
Yes, at any time |
|
SESSION IP address used during the last activity on the survey platform |
Legitimate interest | Security : identify robot intrusions and to ensure the protection of the servers | e-Survey (MIS Group) only | No |
|
SESSION Date and time of last activity on the survey platform |
Legitimate interest | Identify dormant accounts | e-Survey (MIS Group) only | No |
ON THE COLLABORATORS (U2)
ON EXTERNAL PARTICIPANTS (U3)
ON THE PANELLISTS (U4)
The table above exhaustively lists the information collected at our initiative and for which we act as the Data Controller with regard to the GDPR (see below for the distribution of roles, in the “Responsibilities” section).
The amount of this information is kept to a minimum.
Regarding the information collected at the initiative of our clients (administrators and collaborators) from the surveys they create on our platform, we cannot anticipate them and therefore list them in detail. It is our clients themselves who act as the Data Controllers for this under the GDPR (see below for the distribution of roles in the “Responsibilities” section).
To reiterate, if you participate in a survey of one of our clients on our website and discover abuse (e.g. a question that may violate your privacy), we request you to report it to us immediately by clicking on the “Report Abuse” link at the bottom of the survey.
If necessary, we undertake to check the survey concerned as soon as possible, and to take all appropriate steps with our client to make adjustments to said survey if necessary.
Retention and deletion of information
In the table below, we detail all the information we collect from all our users, as well as:
- The place where we host this information;
- How long we keep this information;
- The right of the data subjects to have this information deleted.
| Information collected | Hosting | Retention period | Right to deletion of information |
|---|
ON THE ADMINISTRATORS (U1)
|
REGISTRATION / MY PROFILE E-mail address, Title, First name, Last name, Profile, Phone number, Country, Language and Time zone MY TEAM Team Name BILLING / PAYMENT Company name, First and Last name of contact person, Postal address, Postal code, City, Country, EU VAT number SESSION IP address used, Date and time of last activity on the survey platform |
France (secure OVH server) |
After deletion of an Administrator account, the data will be retained for 90 days by e-Survey (MIS Group) before being permanently destroyed (in order to allow a reintegration of the data in case of improper manipulation by the user). |
Yes, at any time by clicking on the link “Permanently delete my account” (“My account” area, “My profile” section) |
ON THE COLLABORATORS (U2)
ON EXTERNAL PARTICIPANTS (U3)
ON THE PANELLISTS (U4)
All the information listed above and collected at our initiative is hosted in France, on secure OVH servers. The company OVH acts as a data processor for our website, as part of its outsourced data hosting activity:
OVH
French SASU (single-member simplified joint stock company) with a capital of €10,174,560
Registered office:
2 rue Kellermann
59100 Roubaix
Lille Companies Register 424 761 419 00045
APE 2620Z
In addition, access to all of our OVH servers, as well as to all of the folders and files they contain, is limited to only MIS Group personnel who need to process the data they contain.
For example:
- only account managers and staff of the IT department working for MIS Group on behalf of our e-Survey solution have access to the files containing the information collected from the Administrator and Collaborator accounts;
- only research managers and staff of the IT department working for MIS Group on behalf of our e-Survey solution have access to the responses collected from the surveys created on our platform.
The information to which our clients (administrators and collaborators) have access is limited to only the responses collected from their surveys and the session information linked to them.
As a reminder, our clients have the option of exporting these responses and session information outside our survey platform. Where applicable, they are required to inform the participants of this in advance, to specify how long the data will be retained and what security measures have been taken to guarantee their confidentiality and protection: secure hosting of the data, limiting access to the data, etc.As a reminder, our clients have the option of exporting these responses and session information outside our survey platform. Where applicable, they are required to inform the participants of this in advance, to specify how long the data will be retained and what security measures have been taken to guarantee their confidentiality and protection: secure hosting of the data, limiting access to the data, etc.
Exercising your rights
REMINDERS
If you have an Administrator account on e-Survey, you can exercise your rights to access, update and delete your information at any time from your “My Account” area.
You can also exercise your right to object to receiving e-mails from us from your “My account” area, “My profile” section.
If you have a Collaborator account on e-Survey, you must contact the administrator of your team on e-Survey to exercise your rights.
Lastly, if you participate in e-Survey surveys (external participant or panellist), you must contact the e-Survey Client (administrator or collaborator of the survey) to exercise your rights, if the latter has given you the possibility to do so (e.g. by providing you with an e-mail address to contact).
FURTHER INFORMATION AND COMPLAINTS
If you have any questions about exercising your rights of access, update, deletion and portability of your data, please send an e-mail to our Data Protection Officer (DPO MIS Group) at this address: dpo@misgroup.io
We undertake to reply to you as soon as possible and within 1 month at most.
If you feel that we are not responding correctly to your request and/or that we are not respecting your rights, you can file a complaint with the CNIL (French data protection authority) using this form: cnil.fr/fr/plaintes
Lastly, for further information on your rights, you can also consult the following link on the CNIL website : cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-personnelles
Responsibilities
GENERAL INFORMATION
If you have an Administrator account on e-Survey, you (and your company) act as the “Data Controller” according to the distribution of roles defined by the General Data Protection Regulation (GDPR) in the following cases:
- you are the Data Controller of the information (responses and related session information) collected from the surveys you have created from the platform, and therefore have to fulfil your legal obligations in relation to the processing of this information vis-à-vis the participants (external participants and panellists);
- you are the Data Controller of the information you provide about your collaborators on the survey platform, and must therefore fulfil your legal obligations in relation to the processing of this information vis-à-vis your collaborators.
e-Survey (MIS Group) acts as the data processor here.
Conversely, e-Survey (MIS Group) is the Data Controller for the information we collect from you (administrator) at our own initiative: from the registration form, the My Account area, the session information, etc.
SUMMARY
| Information collected | Data Controller | Data Processors |
|---|
ON THE ADMINISTRATORS (U1)
|
REGISTRATION / MY PROFILE E-mail address, Title, First name, Last name, Profile, Phone number, Language and Time zone MY TEAM Team Name BILLING / PAYMENT Company name, First and Last name of contact person, Postal address, Postal code, City, Country, EU VAT number SESSION IP address used, Date and time of last activity on the survey platform |
e-Survey (MIS Group)
Contact : dpo@misgroup.io |
OVH: data hosting / servers STRIPE: secure payment infrastructure (for retrieving billing information) |
|
TRANSACTION Bank details |
e-Survey (MIS Group)
Contact : dpo@misgroup.io |
STRIPE: secure payment infrastructure (for the entry and verification of bank details) |
ON THE COLLABORATORS (U2)
ON EXTERNAL PARTICIPANTS (U3)
ON THE PANELLISTS (U4)
Cookies
GENERAL INFORMATION
A cookie is a text file placed temporarily in the memory of your Internet browser. Cookies cannot run programs or introduce viruses to your computer or phone. They are uniquely assigned to you and can only be read by a web server of the domain that deposited them.
The use of cookies is extremely limited on our website e-survey.io, as the MIS Group only uses this website for market research and scientific purposes.
Under no circumstances is our website e-survey.io used for advertising purposes or for selling prospecting files, for example.
More specifically, our website e-survey.io only uses a technical cookie (PHPSESSID) and third-party audience measurement cookies (Google Analytics) that are necessary for its operation and that do not require your consent.
However, you can technically block these cookies by using the settings in your Internet browser.
TECHNICAL COOKIE:
| Entity depositing the cookie | Purpose of the cookie | Consent before depositing the cookie |
|---|---|---|
| e-Survey / MIS Group (PHPSESSID) | Functional : optimise your browsing on the site e-survey.io, by retaining your information and preferences from one page to the next. | Not requested : technical cookies do not require consent.
The PHPSESSID cookie is kept for only as long as you browse the site (retention period: Session). |
AUDIENCE MEASUREMENT COOKIES:
| Entity depositing the cookies | Purpose of the cookies | Consent before depositing the cookies |
|---|---|---|
| Google Analytics (_ga, _gat, _gid) |
Audience measurement: to generate statistics related to your browsing on the site e-survey.io which will then be analysed in order to understand and improve your use of the site. | Not requested: audience measurement cookies are allowed by default on this site as they are configured to collect information anonymously with a lifetime of 13 months : cnil.fr/en As a reminder, you can technically block these cookies by using your Internet browser settings. |
Contact
If you have any questions about this Privacy and Cookie Policy, please contact our Data Protection Officer (DPO MIS Group) at this address: dpo@misgroup.io
Changes to this policy
We reserve the right to modify it, but we undertake to keep you systematically informed of these modifications, so that you can take note of them before continuing your use of our site (platform and surveys).
Legal representative: Mr Nicolas KELLER
Responsible for the drafting (in French): Mr. Michaël SAULNIER
Responsible for the translation (in English): TRADUTEC