Testil.io is a complete online, cloud based platform with pre-set IPIP questionnaires, offered by Psycholate (Athens, Greece, Lykourgou 1) to our Customers, allowing them to run hiring or research projects. Also our Customers may create their own questionnaires or surveys by using Testil.io.
Psycholate is committed to respect your privacy and applicable data protection and privacy laws, including the European General Data Protection Regulation (‘GDPR’). This Privacy Statement (the “Statement”) intends to inform you about the way we collect, use, share and secure personal data (i.e. any data related to an identifiable natural person (a “data subject”), either directly or indirectly), which you provide to Testil.io. This Privacy Statement also describes your choices regarding use, access and correction of personal data.
By completing the questionnaires within Testil.io, you confirm that you have read and fully understood this Statement, that you have provided your free and explicit consent to our Customer to process your personal data, and that you have the authority to provide the Customer with all information submitted by you via Testil.io.
How testil.io works
Our Customer (e.g. a prospect or current employer of yours or a private or public research institute) has created an Account within testil.io by purchasing our Services. In this way our Customer has access to pre-set IPIP questionnaires integrated in testil.io. Our Customer may also construct his/her own questionnaire or survey by selecting hiring/research criteria, standards or qualities each time depending on his/her purposes, on the type of the job post or the research purpose/scope.
Our Customers are solely responsible to determine the criteria/standards/qualities of hiring, qualifications or any other standards of a survey or a questionnaire. Customers are solely responsible for the ultimate decisions relating to hiring or research and they have warranted, that decision making shall not be based solely on the result of a questionnaire or a survey or any other product of Testil.io.[PS1]
Roles at the processing of your personal data
For the purposes of the GDPR and applicable data protection and privacy laws, the Customer is the Data Controller, because the Customer defines the purpose and the scope of the processing activities. Customer is responsible to respect all applicable data protection and privacy laws, including the GDPR as well as local law, depending on the place of establishment.
Psycholate is a Data Processor and a Data Controller in part.
Psycholate, by administering, managing, operating and maintaining the platform (Testil.io), processes personal data you provide by using Testil.io and completing the questionnaires, on behalf of and under the instructions of the Customer, who defines the personality assessment criteria and qualities, as well as the purpose of the processing. In that respect, Psycholate acts as a Data Processor.
Moreover, Psycholate, will anonymize your personal data, publish and utilize them, for further research, aiming at improving the understanding of personality and other psychological constructs. In this case, no personal information is included in any analysis whatsoever and research results are delivered or published in an anonymous form. Anonymized Data refers to the set of information that is stored right after deleting any personal data that could be used to identify you as an individual (e.g, name, email address). In other words, information such as age group, demographic, gender, etc is stored together with your responses, provided that there is not a way to retrieve which set of data belong to which respondent. Psycholate is responsible for the anonymization process. In that respect, Psycholate is a Data Controller. Psycholate shall anonymize and use your data only after your explicit consent.[NV2] Psycholate may share research results based on the processing of anonymized data with third parties for research purposes and without remuneration.
What data is collected?
We only collect the data you provide to us by responding to the various questions that are presented to you. These questions have been either chosen or approved by the Customer for its own purposes. We also collect the time you complete a questionnaire and the timezone as set in your computer. No other indirect or third-party sources of information are used.
Psycholate may also use your email address to communicate with you in case of a technical issue.
Psycholate collects only anonymized data in the way described above for research purposes.
Purposes of the Processing
Customer processes your personal data for research purposes or for hiring purposes. Customer is solely responsible (i) for the legality of the purposes of the processing, ii) for the necessity of the processing to serve these purposes, iii) to inform any and all data subjects, whose personal data is processed by using Testil.io, about the scope, the purpose, the duration and the means of the processing, their rights with respect to the processing iv) to acquire the consent of the data subjects, whose personal data is being processed by using Testil.io.
Psycholate processes anonymized data for research purposes in the way described above.
It is explicitly stated that your details will not be used by Psycholate in any marketing or advertising campaign aimed at selling you goods or services.
We shall retain identifiable data for a period of 18 months or less, according to our Customer’s policy.[NV3]
Psycholate retains anonymized data indefinitely for research purposes, provided you have given your explicit consent.
Security of the Processing
Psycholate implements the appropriate technical and organizational security measures to protect personal data, including internal security procedures that restrict access to and disclosure of personal data. Psycholate’s personnel is bound by confidentiality and access to personal data is limited to those personnel that is necessary for the provision of the Services. Testil.io is operated and retained solely in the European Economic Area. Since December 2016, Psycholate is certified under the International Standards Organisation (ISO/IEC) 27001 standard for Information Security Management Systems.
If you have not been properly informed and/or consented to the processing of your personal data by completing the questionnaires, please do not provide your personal data to Testil.io. If you have provided your consent, you may withdraw your consent at any time by contacting firstname.lastname@example.org. Psycholate bears no responsibility about what effect the consent withdrawal may have at the selection process.[NV4]
You may choose not to consent to the retention of anonymized data by Psycholate for research purposes. If you have provided your consent to Psycholate, but you wish to opt out (consent withdrawal), please send an email to email@example.com, mentioning your objection and the email address you used to register.
Please be aware that any objection should be made before the expiration of the retention period. After that, your responses cannot be identified so as to be removed.
Under the GDPR you also have some further rights with regard to personal data you submit by completing the questionnaires, and Customer is responsible to address your requests and satisfy your rights. However, we shall assist insofar as this is possible the Customer/Data Controller to satisfy your requests.
You have the right to be informed about any processing of your personal data (the purpose, scope, duration and means, as well of data sharing), to request access to your personal data, and to receive your personal data or have it transmitted to another data controller;
You have the right to restrict processing of your personal data, for that period of time that allows the data controller to verify the accuracy of personal data or based on any other legitimate reason;
You have the right to request correction of your personal data on your behalf, in case such data is processed incompletely or inaccurately, provided that any modification may require the completion of an approval process;
You have the right to request deletion or destruction of your personal data, if processing is no longer necessary and further retention is not a legal requirement;
You have the right to lodge a complaint with a relevant supervisory authority.
In addition, you may have certain additional rights under other applicable data protection laws, which a data controller must respect.
If you have any questions regarding this Notice, you may contact us at firstname.lastname@example.org . Psycholate will respond without delay.