Survey Privacy Policy

DORA.report Privacy Policy for Survey Participants

Thank you for participating in our survey. We value your privacy and are committed to protecting your personal information. Below we outline how your data will be collected, used, stored, and protected.

Registered name: Guanciale Technologies LTD

This privacy notice tells you what to expect us to do with your personal information.

  • What information we collect, use, and why

  • Lawful bases and data protection rights

  • Where we get personal information from

  • How long we keep information

  • Who we share information with

  • How to complain

Contact details

Email

[email protected]

What information we collect, use, and why

If you opt-in for updates, we collect or use the following information for service updates:

  • Contact details

Survey data collection

In this survey, we may collect the following types of information:

  • Your responses to the survey questions.
  • (Optional) Personal information such as your email address or company name

How We Use The Data

The information provided in the survey will be used solely for research and analysis purposes, including:

  • Understanding industry readiness for DORA compliance.
  • Identifying common challenges and trends related to DORA.
  • (Optional) Contacting you to share the survey insights.

Your responses will not be shared publicly in a way that could identify you or your company without your explicit consent.

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Data Sharing

We will not sell, share, or distribute your personal information to third parties. The data may be shared internally within our research team or with trusted collaborators under strict confidentiality agreements, solely for the purposes stated above.

Where we get personal information from

  • Directly from you

How long we keep information

We will keep your personal data until you opt out of all communications such as marketing emails or newsletters, or up to two years after the latest email interaction.

Who we share information with

Data processors

Google

This data processor does the following activities for us: Email services

HubSpot

This data processor does the following activities for us: Customer Support

Sharing information outside the UK

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.

For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.

Organisation name: Google

Category of recipient: Storage provider

Country the personal information is sent to: United States, Europe

How the transfer complies with UK data protection law: Privacy Shield and Google Workspace SCCs

Organisation name: Hubspot

Category of recipient: Customer Relationship Management

Country the personal information is sent to: Germany

How the transfer complies with UK data protection law: UK GDPR

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Voluntary Participation

Participation in this survey is completely voluntary. You may choose not to answer specific questions or withdraw from the survey at any time.

By proceeding with the survey, you acknowledge that you have read and understood this privacy policy and agree to the collection and use of your data as described above.

Last updated

3 December 2024