Handling of respondents personal data

Normally, respondents to Extellio surveys are completely anonymous. However, they can choose to waive their anonymity in various ways in the survey. This applies if they, contrary to request, provide personal data in a free text answer in a survey or if they provide their contact information with their own consent, either because they want to be contacted by an Extellio customer, or because they register with a client panel. Depending on the agreement, either the customer or Extellio acts as personal data controller for this personal data.

When Extellio is personal data controller

If there is no written personal data processor agreement between Extellio and the customer, Extellio is personal data controller. This means that the Extellio privacy policy applies and is shown in the survey for the respondent. Extellio will not share any respondent’s personal data with the customer unless the respondent explicitly requests it. Any personal data will be deleted in accordance with the Extellio archiving policy. In short:

When the customer is personal data controller

If there is a written personal data processor agreement with the customer, the customer is the personal data controller and Extellio is the personal data processor. This means that the customer's privacy policy applies and is shown in the survey for the respondent. The customer has the right to see the respondents' personal data. The personal data processor agreement governs how the personal data is handled by Extellio. Unless otherwise stated, sign-up to the Client panel and contact requests are handled according to the same routines as if Extellio were responsible for personal data. However, personal data provided in free text responses will not be deleted on an regular basis unless the customer purchases that service from Extellio.