The provided data should be protected against unauthorized access, destruction or manipulation during transmission and storage and be stored in an anonymous form. In this case the data is not encrypted during transmission and storage, and not stored in an anonymous form. It is accessible to the software company. Potential respondents should be informed prior to the questionnaire about the responsible entity, who will get the data, and the general purpose of the survey. This can be done in a short form and a link to an extended version.
Further information is problematic due to methodological reasons.
This respects the respondents' autonomy who should provide data freely. Respondents should be asked for consent for the use of the cookie in a reasonable way. As far as reasonable, data should be encrypted during transmission and storage, and decryption should be limited to the responsible entity. E-mail addresses should be separated from the rest of the data. The software company should be obliged to provide the security mechanisms.