Privacy and cookie policy - Effectory

Privacy Policy

This Privacy Policy explains how Effectory B.V. and Effectory Deutschland GmbH (“Effectory”, “we” or “our”) collect, store and use your personal data. This Privacy Policy applies to all of our services, which includes our website, https://www.effectory.com, and all its sub-domain names (the “Website”) and our in-house developed software hosted on https://my.effectory.com and related sub-domain names (the “Platform”).

We are committed to protecting your personal data. The processing of your personal data is subject to the rules of the General Data Protection Regulation ((EU) 2016/679) (the “GDPR”), as well as the national implementation acts of the GDPR. We follow these guiding principles to protect your privacy:

We only process personal data that is necessary.
We use personal data for the purposes specified.
We only keep personal data for the duration of the purpose.
We are transparent about our processing of your personal data.
We do not share your personal data with third parties, other than described in this Privacy Policy.
We are independently audited to prove our compliance.

Who are we
Scope
Subprocessors
Third parties
How is your data secured?
International data transfers
Data retention
Your rights
Cookies
Third party sites
Changes to this Privacy Policy
Contact us

1. Who are we

Effectory B.V. is an Amsterdam-based company, having its address at Rokin 16, 1012 KR Amsterdam, the Netherlands, registered with the trade register under no. 72541644, Effectory Deutschland GmbH is a Munich-based company, having its address at Karlsplatz 3, 80335, München, Germany, registered with the trade register under no. HRB164901. You may contact us by filling out the contact form available at https://support.effectory.com/hc/en-us/requests/new.

With regard to the processing of your personal data, we act as the “processor” (see Respondents through Customers below) or the “controller” (see Helpdesk through Job applicants below) within the meaning of the GDPR. If we are the processor, it means we process data on behalf of our customer, i.e. your employer. If we are the controller, it means we process data for our own purposes. This means that we have certain statutory obligations and responsibilities with respect to our data processing activities. This Privacy Policy informs you on how Effectory meets these obligations and responsibilities.

2. Scope

This Privacy Policy applies to the following situations:

using our Platform as an employee of one of our customers (a “Respondent”), for example after being invited to fill out a survey via our Platform;
using our Platform as an employee of a customer, other than in the role of Respondent (a “User”);
using our Platform, acting on behalf of our customer;
contacting our helpdesk (by phone, email or online on https://support.effectory.com);
visiting our Website;
receiving communication from Effectory as a recipient (a “Recipient”); and
applying for a job at Effectory.

Respondents

For the processing of personal data as described in this section, our customer, i.e. your employer, is the controller and Effectory is the processor, acting solely upon the instructions of your employer.

Your employer decides on the purposes for which it uses our Platform and which personal data of Respondents is being processed and provided to us:

to invite you to fill out a survey in the response period; and
to calculate meaningful results in the reporting phase.

For example: name, employee number, (work) email address, date of birth, gender, date of employment, manager/supervisor (yes or no), level of education, salary scale, type of employment, number of hours (FTE), organizational chart.

Unless otherwise determined, your employer relies on legitimate interests as its legal basis to conduct employee surveys to understand what is going on among its employees for the purpose of improving the organization management (“employer excellence”) and optimizing the performances of the organization. Participating in a survey is voluntary, unless otherwise stated.

More specific information agreed with your employer, about how we handle your data and your confidentiality towards your employer can be found in the privacy statement on the online introduction page of your questionnaire on our Platform and on the Effectory support website (https://support.effectory.com).

Our customer, i.e. your employer, has authorized Effectory to use the external parties (data sub processors) referred to in section 3 to perform our services.

Our customer, your employer, determines how long your personal data will be retained securely by Effectory. In general, your personal data will be stored securely for the duration of the contract between your employer and Effectory, unless otherwise instructed by your employer.

Users

Your employer decides the purposes for which it uses our Platform, as well as the personal data that is being processed and provided to us. Your employer relies on legitimate interests as its legal basis. Before you can access our Platform, your employer has already created an account for you and provided us with certain personal data about yourself, for example: name, employee number, (work) email address, date of birth, gender, date of employment, manager/supervisor (yes or no), level of education, salary scale, type of employment, number of hours (FTE), organizational chart.