GDPR: For more information on how ZEF processes personal data, see the Privacy Policy and the "DPA" agreement annex.
General information: When you as a customer use ZEF to collect and process personal data, you are the data controller and ZEF is the data processor.
Transfer of personal data: Under GDPR, personal data may be transferred outside the European Economic Area when the transfer takes place to a country with an adequate level of data protection (European Commission adequacy decision), when appropriate safeguards are in place, or when the transfer takes place under so-called binding corporate rules. ZEF is fully GDPR compliant in all situations where data is transferred outside the European Economic Area.
ZEF uses Google services for data storage. End-user data (respondents' responses and personal data) is stored in a Google Cloud SQL database on Google's servers located in Belgium. If emails are sent to end-users via ZEF, end-user data passes through the Mailgun service used for sending, where data is not transferred outside the European Union or European Economic Area.
Survey creators' data (ZEF survey tool user data) is stored in Google Firebase. Personal data stored by survey creators about themselves may be stored in the United States. User data may include the user's name, email address, phone number and profile picture. A comprehensive list of third-party data processors can be found at: https://zef.fi/third-party-data-processors/
Privacy of survey creators: Survey creators' data (ZEF survey tool users' data) is stored in Google Firebase; this personal data may be stored in the United States in addition to the EU/EEA area.
User data may include the user's name, email address, phone number and profile picture. A comprehensive list of third-party data processors can be found at: https://zef.fi/third-party-data-processors/
Privacy of respondents: ZEF uses Google services for data storage. Survey respondent data (respondents' responses and personal data) is stored in a Google Cloud SQL database on Google's servers located in Belgium.
If emails are sent to end-users via ZEF, end-user data passes through the Mailgun service used for sending, where data is not transferred outside the European Union or European Economic Area.
A comprehensive list of third-party data processors can be found at: https://zef.fi/third-party-data-processors/
All materials are intended for informational purposes only and should not be used as legal advice. If you are seeking legal advice, please consult your lawyer.