CONFIDENTIALITY CLAUSE

By answering our survey, you agree that the provided data will be analysed. Data will remain confidential at all times and it will not be shared with third parties. Publication of data will only happen in an aggregated way and will therefore remain anonymous, making sure that the provided information can never be linked to the subject who supplied it. It is also possible to sign a confidentiality agreement prior to data provision, upon email request to md@shecco.com.

 
PRIVACY STATEMENT

1. Introduction
sheccoBase is committed to protect your personal data and to respect your privacy. sheccoBase collects and further processes personal data pursuant to Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data.
This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure the protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights.
The information in relation to processing operation Surveys using SurveyGizmo tools undertaken by sheccoBase is presented below.

2. Why do we collect, store and process your data?
Purpose of the processing operation: sheccoBase collects and uses your personal information to carry out stakeholders’ surveys key to the production of the World Guide to Transcritical CO₂ Refrigeration.
The processing involves using personal data for the purpose of gathering feedback on the filled in surveys. Your personal data will not be used for an automated profiling or mailing list creation unless you consent to.

3. On what legal ground(s) do we process your personal data
We process your personal data, because:
- processing is necessary for the analysis of the survey for the purpose of our market research (World Guide to Transcritical CO₂ Refrigeration);
and
- you as the data subject have given consent to the processing of your personal data for one or more specific purposes linked to your contribution to our analysis work.

4. Which personal data do we collect and further process
In order to carry out this processing operation sheccoBase collects the following categories of personal data, which is necessary for your participation in our surveys: First Name, Family Name, Organisation, E-Mail Address, Phone Number.
Depending on the type of surveys, the above-mentioned personal data can be mandatory or optional.

5. How long do we keep your personal data?
sheccoBase only keeps your personal data for the time necessary to fulfil the purpose of the consultation and its follow-up actions. All personal data are deleted from the databases 1 year after the last action in relation to the consultation by default.

6. How do we protect and safeguard your personal data?
All personal data in electronic format (e-mails, etc.) are stored either on the servers of shecco or of SurveyGizmo. In order to protect your personal data, sheccoBase has put in place a number of technical and organisational measures in place. Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised access, taking into consideration the risk presented by the processing and the nature of the personal data being processed. Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to know for the purposes of this processing operation.

7. Who has access to your personal data and to whom is it disclosed?
Access to your personal data is provided to the sheccoBase staff responsible for carrying out this processing operation. 
SurveyGizmo maintains a data centre in the U.S. and a data centre in the EU. sheccoBase processes surveys via the EU server. Some legacy data is still hosted on the servers of SurveyGizmo U.S. While sheccoBase will thus not actively transfer your personal data to the U.S., your data in relation to previous surveys may still be hosted on U.S. servers. SurveyGizmo has been registered with the EU-U.S. Privacy Shield, which means that this company is considered as offering adequate protection for your personal data. For more information, see the SurveyGizmo privacy policy: https://www.surveygizmo.com/privacy/.
The information we collect will not be given to any third party, except to the extent and for the purpose we may be required to do so by law.

8. What are your rights and how can you exercise them?
You have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access, rectify or erase your personal data and the right to restrict the processing of your personal data. Where applicable, you also have the right to object to the processing or the right to data portability. You can exercise your rights by contacting the Data Controller (point 9 below). 

9. Contact information
If you would like to exercise your rights under Regulation (EU) 2018/1725, or if you have any comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your personal data, please feel free to contact the Data Controller, md@shecco.com.