At Agreeder, we’re serious about the security of the data on our servers and the protection of the privacy of our users.
As a basic principle, the Swiss Federal Data Protection Act (FADP) applies to the processing of your personal data. In certain circumstances, for example if you access our offers from a Member State of the European Union, the European Data Protection Regulation 2016/679 (GDPR) may also apply.
Your data at Agreeder
When you use Agreeder, you send pieces of data to Agreeder; this can be a name, an e-mail address, or information relating to your agreed. Other data is generated implicitly by your use of Agreeder, e.g. log data. We use this information for internal analytical purposes to improve the product for you. We do not share any of these information with other companies. We do not sell your data to third parties.
Agreeder records certain requests and transactions in log files. This log data is used for troubleshooting, statistics, analytics, quality assurance, and to monitor system security and can be analyzed to that end. Agreeder can publish anonymous statistics under the condition that no personally identifiable information can be derived from such statistics: for example: how many Agreeds have been created last year.
Agreeder also uses Google Analytics to compile usage statistics. This service is provided by Google, Inc. Their privacy policies can be found at http://www.google.com/privacy. Agreeder anonymizes IP addresses before they are sent to Google Analytics.
Agreeder’s paid services (Premium Agreeder) are ad-free.
Agreeder employs third party tools to provide you with the convenience you are used to from elsewhere on the internet to sign in to Agreeder with one click (so called “social login”). Some of these tools can track your actions when you interact with them. At Agreeder you can sign in with Google, Facebook or your email/password. Please refer to the terms of the respective providers for further guidance:
- Google https://policies.google.com/privacy
- Facebook https://www.facebook.com/policy.php
Outdated and completed Agreeds
You can delete any Agreed manually at any time using the admin link. When deleting an Agreed, that agreed’s information will be deleted from the Agreeder application databases but may be archived in some other form for internal analytical purposes to improve the product for you. Log data will not be deleted. Furthermore, outdated agreeds are automatically deleted from time to time, but no earlier than 30 days after the last vote has been submitted. Agreeds created with premium accounts will not be deleted automatically as long as the subscription remains active. Should the subscription expire, the deletion rules mentioned above apply to all agreeds associated to the account after 30 days of expiry.
Agreeder can delete user-accounts if they remain inactive (i.e. not accessed) for 1 year or longer.
Agreeder implements several mechanisms to prevent unauthorized access to agreeds, accounts, or other data. To access a agreed, you use the unique link which Agreeder provides and which contains a random access code. This link is an important element to prevent unauthorized access to a poll. You should send this link only to authorized people, i.e., the people you wish to participate in your poll.
User-accounts are protected by passwords. You should choose a secure password and ensure its confidentiality to prevent unauthorized access to your account.
Inviting from Agreeder
As an option, you can contact and invite people to participate in a agreed from Agreeder. In this case, Agreeder needs to know the e-mail addresses of the people to be contacted. You can enter these e-mail addresses in the corresponding form. Agreeder stores these e-mail addresses in your user-account for your convenience; Agreeder will be able to offer you the same contacts again next time you use the service. You can have Agreeder delete all stored e-mail addresses any time using the corresponding function in your user-account.
General remark: Like all other personal information, Agreeder will not share participants’ e-mail addresses with third parties. Agreeder will not send any e-mail communication to participants’ e-mail addresses without a without a lawful ground.
As an alternative (or complement) to the Agreeder contacts, you can use your existing Google contacts to gain access to the e-mail addresses of the people to be contacted. In this case, you authorize Agreeder to access your Google contacts. Your Google contacts will still be stored at Google. Please note also: The process of accessing your Google contacts is set up (thanks to OAuth) to make sure that Agreeder at no time has access to your Google password.
Communication between you and Agreeder
If you send Agreeder a message, this message can be stored to process it, to compile statistical information, to improve our services and support, or to get in touch with you.
For user surveys and market research
We use the data you provide exclusively to improve the user experience and to further develop our products. The results consist solely of aggregated and anonymous data.
Location of data
The Agreeder databases are located on cloud servers in Frankfurt.
Transfer of Personal Data abroad
We are entitled to transfer your Personal Data abroad, including to third party companies (designated service providers) insofar as this is expedient for the Data Processing described in this Privacy Statement. The recipients will be obliged to protect Your Data to the same extent as ourselves. If the level of data protection in a particular country is lower than that applicable in Switzerland, we will ensure under contract that the level of protection for your Personal Data is equivalent to that applicable in Switzerland. We shall ensure this through one or more of the following measures:
- by concluding EU Model Clauses with the appointed service providers, cf. https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_de
- by ensuring that the appointed service providers are certified under the Swiss-US or EU-US Privacy Shield (where the data recipient is based in the USA or stores the data there), cf. https://www.privacyshield.gov/
- through the appointed service providers having in place Binding Corporate Rules (BCR) that are recognised by a European data protection authority, cf. https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/binding-corporate-rules_en
Sharing personal information
Agreeder may share personal information with other companies or individuals only in the following limited circumstances: (i) Agreeder has your consent; (ii) Agreeder has good faith that there is a legal obligation to share the data; (iii) Agreeder needs to access or share the data to protect the security of the service or of others users’ data; (iv) Agreeder needs to access or share the data to protect Agreeder’s rights and property or to enforce the Terms of Service.
We shall only retain Your Data for as long as is legally necessary or in accordance with the purpose for which they were Processed. If we carry out analyses, we shall store Your Data until the analysis has been concluded. If we store Your Data on the basis of a contractual relationship with you, these data will remain stored for at least the duration of the contractual relationship and at most for the duration of the limitation periods within which any claims may be brought by or against us, or for the duration of statutory or contractual duties of retention.
We shall only process your Personal Data in accordance with principles of data protection and if there is a legal basis to do so. If in furtherance of the establishment or implementation of our contract, it shall serve as the legal basis. Otherwise, we have an interest in continuously improving our Offers, adjusting our Offers in line with your needs and showing you advertising that may be of interest to you. This is necessary in order to develop our Offers further, as well as to be able to finance and guarantee the security of our Offers. We act on the presumption that our interests are predominant. If you have consented to data Processing, this consent will apply.
Right of erasure
In accordance with applicable European legislation you can delete your account and the events you own from the system in the account section. It is however possible that another user invites, or informs, you about a agreed again in the future. If you don’t want this either we can block your email address.
You have the right to exercise Your Data protection rights at any time and to request information as to whether and which Personal Data relating to you has been processed by us. You may also arrange for your Personal Data to be corrected, blocked or cancelled at any time in writing, enclosing appropriate proof of your identity, by contacting the following address: [email protected]
We reserve the right to exchange correspondence with you in this regard.
Please note that we may be required to retain your Personal Data in part even after a request for blocking or cancellation under the terms of our statutory or contractual retention requirements (such as for accounting purposes) and in such an eventuality will only block your Personal Data insofar as necessary for this purpose. In addition, the cancellation of your Personal Data may have the effect that you are no longer able to acquire or use the services registered by you. Under certain circumstances, you have the right to require us to provide you or a third party specified by you with your personal data in a commonly used format.
You may object at any time by email to the processing of Your Data for marketing and advertising purposes.
In addition, you have the right to make a complaint concerning the data processing in question with the competent supervisory authority. You can do this with the supervisory authority at your place of residence, at your place of work or at the place of the alleged data breach.
If you have questions regarding data protection, need information or want your data to be deleted please contact our data protection office via email: [email protected]