Privacy policy
1. Who is responsible
The data controller for this website is [to be filled in: titular] , tax number [to be filled in: nif] , registered at [to be filled in: adreca] .
For any question about your personal data, you can write to [to be filled in: correu] .
2. Two different roles, depending on who you are
NBN Surveys is a tool for creating surveys. That means there are two kinds of data, and they are not treated the same way:
- Your account data. If you registered in order to create surveys, we decide how your data is handled and we are therefore the data controller.
- Survey answers. When an organization creates a survey and collects answers, that organization decides what it asks and why. They are the controller and we act as a data processor: we store the data on their behalf and make no other use of it.
If you answered a survey and want to know what happens to your answers, you should contact the organization that created it. If you don't know how to reach them, write to us and we will help you find them.
3. What data we collect
From people who create surveys:
- Name and email address.
- Password, always stored encrypted: nobody can read it, not even us.
- Language and appearance preferences.
- Details of your organization and the collaborators you invite to it.
From people who answer surveys:
- The answers they give.
- Their email address, only if the survey requires identification. If the survey is anonymous, no data that could identify the respondent is stored.
- The IP address and the date of the response, for security reasons and to prevent duplicate answers.
4. What we use it for, and on what legal basis
- To provide the service (create your account, store surveys, send verification codes). Legal basis: performance of the contract you accept when registering.
- To collect answers. Legal basis: the consent of the respondent, who freely decides whether to take part.
- To keep the service secure (prevent abuse, detect errors). Legal basis: our legitimate interest in protecting the service.
We do not carry out automated profiling and we do not make automated decisions about people.
5. How long we keep it
- Account data: for as long as the account exists. If you delete it, the data is deleted.
- Survey answers: kept for as long as the organization that created the survey keeps them. When the organization deletes the survey or the answers, they are deleted from our system.
- Backups: backup copies may retain data for a limited period after deletion, until they are overwritten in the normal backup cycle.
6. Who we share it with
We do not sell or transfer personal data to third parties. Only the providers needed to run the service have access:
- The hosting provider, where the application and database live.
- The email provider, used to send invitations and verification codes.
All of them act as data processors, under contract and with the safeguards required by law. Data is hosted within the European Union.
7. Your rights
You may exercise the following rights at any time:
- Access: find out what data we hold about you.
- Rectification: correct it if it is wrong.
- Erasure: ask us to delete it.
- Restriction: ask us to pause its use temporarily.
- Objection: object to a specific use.
- Portability: receive it in a readable format to take with you.
To exercise them, write to [to be filled in: correu] . We will reply within one month at the latest.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Cookies
This site only uses technical cookies, needed for it to work: keeping your session open and remembering the language you chose. We do not use advertising or third-party analytics cookies, which is why no cookie consent banner is required.
9. Minors
The service is not aimed at children under 14. If an organization wants to survey minors, it is their responsibility to obtain consent from whoever holds parental responsibility or guardianship.
10. Changes to this policy
If we change this policy, we will publish the new version on this page and update its date. If the change is significant, we will notify registered users by email.