Source: https://www.testingtime.com/en/privacy-policy/
Timestamp: 2019-04-22 21:55:16+00:00

Document:
We appreciate your visit to our website and your interest in our company, TestingTime AG, Weststrasse 50, 8003 Zurich, Switzerland, (hereinafter ‘TestingTime’) and its products.
(1) In the following section, TestingTime provides information about the collection of personal data when using the website. It is generally possible to use our website without providing personal data. However, if you would like to take advantage of particular services on this website, personal data may need to be processed. Personal data is all data that relates to you personally, e.g. name, address, email addresses, user behaviour.
Further data is only collected by TestingTime if the user has provided a declaration of consent. By providing a declaration of consent to TestingTime, the user agrees to the processing of their registered personal data within the framework of the scope specified in the consent form. The declaration of consent can be submitted during the test user’s registration process. The declaration of consent can be withdrawn at any time.
If a customer asks for personal data that is not yet saved in the TestingTime database for a specific product study, TestingTime will request the missing information from the test user by email. A response to the email by the test user is voluntary.
If the missing data is personal data that merits greater protection pursuant to Art. 9 GDPR, TestingTime will obtain an additional declaration of consent from the test user.
Note that the selection of test users for a study depends on whether the individual test user has provided a response to a particular question. This results in an increase in the likelihood of being selected as a test user for a study.
If a test user is selected for a study and confirms their registration for the study, TestingTime will forward the profile information they saved during registration as well as some personal information (‘screening’) related to the study (see example).
If a customer invites a new member or admin to his/her TestingTime team, he/she must have the person’s approval to share their email address with TestingTime and to eventually be contacted by TestingTime’s employees.
You can contact our data protection representative at info@datenschutzpartner.eu or via our postal address with the addition ‘Data Protection Representative’.
(3) When you contact TestingTime by email, the data you provide is stored by TestingTime for the purpose of answering your questions. The personal data collected for the purpose of contacting you includes your contact information, such as your first and last name, post code, phone number and email address. This information is used only for the purpose of contacting you and will not be processed in any other way. TestingTime deletes data obtained in this context once storage is no longer necessary or, if there is a legal obligation to retain it, restricts the processing of it.
(4) If TestingTime makes use of third-party service providers for individual functions within the service or would like to use your data for promotional purposes, you will be informed about the relevant processes in detail. This includes being informed of the criteria for the storage duration.
It is possible to object to cookies being set at any time by changing the settings in your internet browser. Cookies that have been set can be deleted. However, if you deactivate cookies, it may mean that you cannot use all functions of the website to the full extent.
You have the possibility of registering on the TestingTime website by providing personal data. The scope and nature of the personal data transmitted is determined by the particular input mask used for registration. The personal data you submit is collected and stored exclusively for internal use by TestingTime and for our own purposes.
When you register, your IP address is stored as well as the date and time of registration. This serves to prevent misuse of our services. The data is not transferred to third parties. An exception is made if there is a legal obligation to transfer data.
The registration of data is necessary in order for us to provide content and services. Registered persons have the possibility of having their stored data deleted or amended at any time. You can obtain information about the stored data concerning you at any time.
(2) You have the right to complain to a data protection supervisory authority about the processing of your personal data by TestingTime.
(1) If you have agreed to your data being processed, you can withdraw your consent at any time. Once you have expressed the withdrawal of your consent to TestingTime, TestingTime will no longer be permitted to process your personal data.
(2) If TestingTime bases the processing of your personal data on a balancing of interests, you can object to the processing. This is the case in particular if processing is not necessary for the purpose of fulfilling a contract with you, which is set out by TestingTime in each case in the description of functions below. When withdrawing your consent in this way, TestingTime requests an explanation of why it should not process your personal data in the way it does. If the objection is justified, TestingTime will examine the matter and either cease or adapt the data processing, or present you with compelling and legitimate reasons for why TestingTime will continue to process it.
(2) The IP address transmitted as part of the Google Analytics service is not combined with any other Google data.
(3) You can prevent cookies from being stored on your computer by changing your browser settings; however, in this case, you may not be able to use all of the website’s functions to the full extent. You can also prevent the storage of data created by the cookie and related to your use of the website (incl. your IP address) and Google’s processing of this data by downloading and installing the plug-in available via the following link: http://tools.google.com/dlpage/gaoptout.
(4) This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that further processing of IP addresses takes place in a truncated form, which prevents personal identification. Wherever the data collected from you does identify you personally, it is immediately excluded and the personal data deleted at once.
(5) TestingTime uses Google Analytics in order to be able to analyse usage of the website and make regular improvements. Using the statistics obtained, TestingTime can improve the website and make it more engaging for you as a user. In the exceptional cases when personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR.
(1) TestingTime uses the Google AdWords service in order to draw attention to attractive offers on external websites by means of advertising media (‘Google AdWords’). In connection with this, the success of individual advertising measures can be determined on the basis of the advertising campaign data. TestingTime uses this to track interest, to show you ads that may be of interest to you, to make this website more engaging for you and to achieve a fair calculation of advertising costs.
(2) These advertising materials are delivered by Google using ad servers. In this context, TestingTime uses ad server cookies, which allow certain performance parameters to be measured, such as ad impressions or the number of clicks by users. If you reach this website by clicking on a Google ad, Google AdWords stores a cookie on your computer. These cookies generally become void after 30 days and are not designed to identify you personally. The analysis data stored in this cookie usually includes the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (flagging that the user would not like to be contacted any more).
(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on their computer is still valid, Google and the customer can recognise that they clicked on the ad and were redirected to this page. Each AdWords customer is allocated a different cookie. Thus, cookies cannot be tracked across AdWords customers’ websites. As part of the advertising measures described, TestingTime itself does not collect or process any personal data but, instead, occasionally receives statistical analysis provided by Google. Using this analysis, TestingTime can identify which of the advertising measures used are particularly effective. TestingTime does not receive any additional data from the use of advertising materials, and the user cannot be identified on the basis of this information.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. TestingTime has no influence on the amount of data that is collected by Google through the use of this tool, nor on how the data will be used, and is therefore unable to provide any information in this regard. Through the integration of AdWords conversion tracking, Google is informed that you have accessed a particular part of our website or clicked on a TestingTime ad. If you are registered with a Google service, Google can connect your visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider will detect and store your IP address.
(5) You can prevent your participation in this tracking process in various ways: a) by changing the relevant setting in your browser software (specifically, rejecting third-party cookies will result in you not receiving ads from third-party providers); b) by deactivating cookies for conversion tracking by changing the settings in your browser so that cookies from the domain ‘www.gooogleadservices.com’ are blocked, https://www.google.com/settings/ads (it should be noted that this setting will be deleted if you delete your cookies); c) by deactivating interest-based advertising from providers who are signed up to the ‘About Ads’ self-regulation campaign using the link http://www.aboutads.info/choices (it should be noted that this setting will be deleted if you delete your cookies); d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser using the link http://www.google.com/settings/ads/plugin. You may consequently not be able to use all functions of this service to the full extent.
(1) TestingTime has Facebook components integrated on its website.
(2) The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
(3) Every time you access an individual page of this website that has a Facebook component (Facebook plug-in) integrated on it, the plug-in will cause the internet browser to automatically download and display the corresponding Facebook component on your computer. A complete overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific page of this website you have visited.
(4) If you are logged into Facebook at the same time, Facebook recognises which specific pages of this website you visit every time you access the website and for the entire duration of each visit to the website. This information is collected by the Facebook components and connected with your Facebook account by Facebook. If you click on one of the Facebook buttons integrated on our website, such as the ‘Like’ button, or if you post a comment, Facebook connects this information with your personal Facebook user account and stores this personal data.
(5) Facebook will be informed via the Facebook components whenever you visit this website, as long as you are also logged into Facebook at the time that you access it; this applies regardless of whether or not you click on the Facebook components. If you do not wish this information to be transmitted to Facebook in this way, you can prevent it by logging out of your Facebook account before accessing the website.
(6) Facebook’s published Data Policy, which can be accessed at https://www.facebook.com/about/privacy/, provides information about how personal data is collected, processed or used by Facebook. Furthermore, it explains the settings options that Facebook offers to protect your privacy. There are also various applications available that enable you to prevent data from being transmitted to Facebook.
The following table shows which tools are used by TestingTime to operate the website and carry out sales and marketing activities.
Switzerland TestingTime’s official websites are hosted by cyon in Switzerland.
USA The TestingTime server is operated by Heroku. The computer centre is located in Ireland.
USA TestingTime uses an mLabs database. All personal data is stored with mLabs. The computer centre is located in Ireland.
Dublin, Ireland TestingTime writes its log files to the servers of Logentries. The log files are automatically deleted after 7 days.
USA TestingTime uses AWS to store profile pictures of test users. The computer centre is located in Ireland.
Atlanta, GA 30308 USA TestingTime uses Mandrill to send automated and personal emails to test users and customers.
Niederlande TestingTime uses Messagebird to send automated and personal text messages to test users and customers.
USA TestingTime uses ActiveCampaign to send customers newsletters and track websites visited. This allows conclusions to be drawn automatically about a visitor’s buying intentions and target-oriented content to be delivered.
Germany TestingTime uses Unbounce to enable downloads of marketing material (e.g. white papers) via dedicated landing pages. A typical Unbounce page requires personal data so that the requested marketing material can be delivered by email.
USA TestingTime uses Zendesk to answer support requests. Requests sent to help@testingtime.com are automatically forwarded to Zendesk.
USA TestingTime uses Mailchimp to carry out test user recommendation campaigns.
USA TestingTime uses Workable to advertise vacancies and manage applications.
Switzerland TestingTime uses Bexio for bookkeeping and accounting.
1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA TestingTime uses the Google Suite as an internal office solution for email, calendar, documents and data storage.
Personal data is stored for the duration of the relevant legal retention period. After this period expires, the data is routinely deleted as long as there is no necessity for initiating or fulfilling a contract.
Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which TestingTime receives consent for a particular purpose. If processing of personal data is required to fulfil a contract to which you are party, the processing is then based on Art. 6(1)(b) GDPR. The same applies for processing operations that are necessary for carrying out pre-contractual measures. Where TestingTime is subject to a legal obligation that requires personal data to be processed, the processing will be based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary in order to protect your vital interests or those of another natural person. In such case, the processing will be based on Art. 6(1)(d) GDPR. Finally, processing operations may also be based on Art. 6(1)(f) GDPR. This is the legal basis for operations which are not covered by any of the aforementioned legal bases if the processing is required to serve the legitimate interests of TestingTime or a third party, as long as your interests, fundamental rights and freedoms do not override them. The legitimate interests of TestingTime consist of carrying out our business operations.

References: Art. 9
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6