PRIVACY POLICY
Below we describe our privacy policy in both clear, accessible language and technical-legal terms.
Last update of this privacy policy: October 2022
Privacy policy: in a nutshell
AskForce.One collects data for the purpose of providing a voice to a particular target group on current issues that would concern that target group and its employer, organization and/or company. The content of the app is created in a participatory manner with the target audience and in collaboration with representatives of organizations or departments working for and with this target audience. In the first place, the collected data goes back to the target group itself, by sharing the results of the survey through the app. The sharing of this data is done analytically only. In addition, the data are also used for further research and to formulate recommendations based on them in the interest of the target audience and future organizations. The latter are stored in an anonymous manner.
We are committed to collecting this data in a way that respects users’ privacy and complies with all data protection standards.
Why we collect your data
We collect your email address as a form of personal identification, in case you get another phone and in case we need to contact you about the app (e.g. for a technical problem).
Through the app, we also collect information about your opinions so that we can share the target group’s collective views on issues. Results of questions are available every day on the app. We also communicate results on a regular basis through infographics distributed through the company or organization’s usual channels. Analysis and processing of the data is always done at an aggregate level; this also means that we never analyze individual users’ answers, nor do we communicate about individual users’ answers or results.
We also actively ask users and representatives of organizations or departments working for and with this target group to suggest questions or tips for use in the app. In doing so, we apply both scientific and ethical guidelines about what questions can be asked and how these questions are asked.
If data collected within the app is shared with third parties, this is always done within the framework of a processing agreement with clear agreements on data management, data processing and reporting on the results. We only provide data to third parties at the aggregated level. Personal data is never passed on to third parties.
Storage of your data
We track responses to questions so that we can analyze trends over time. For example, are there fluctuations in staff wellbeing throughout the year, e.g. during vacations or busier periods.
All information you provide to us is stored securely on servers within the European Union. We have very strict controls on who can see this data. Your personal data is stored separately from answers to app questions to preserve your anonymity.
The moment you sign up for the app, you give us permission to store your data. All your data will be stored as long as you use the app. If you delete the app, your data will only be kept in aggregate for as long as the contract with your employer runs.
If you wish to withdraw your consent to the use of your data, please contact us at privacy@askforce.one.
Your Rights
All rights regarding the privacy of your data can be read in our full privacy policy below. You also have the right to exercise these rights by contacting us at privacy@askforce.one.
You can also complain to the Data Protection Authority if you think we’re doing something wrong, but we’d rather you email us first. We really want to get this right and are happy to correct our mistakes.
https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen
Who owns AskForce.One
The app and all data from the app are owned and operated by AskForce.One. Main goal is to develop and deploy a sustainable, participatory and flexible research tool. There are no entities with outside control.
Privacy policy: technical-legal version
1. Introduction
This privacy policy (“Privacy Policy”) is part of the Terms and Conditions (“Terms and Conditions”) for the use of AskForce.One (“we”, “us”, “our”) made available to you (“you”, “your”).
Unless we provide otherwise in this Policy, we decide the purposes and manner of processing personal data collected about you when you register and use the App. Our details are listed in Article 1 of the Terms. We are committed to protecting and respecting your privacy in relation to the App. We strive optimally to be in line with the recent amendments and the European Regulation 2016/679 of May 25, 2018, as well as the Belgian law of July 30, 2018. For more info, see
https://www.ejustice.just.fgov.be/cgi_loi/change_lg.pl?language=nl&la=N&table_name=wet&cn=2018073046 (fgov.be)
https://eur-lex.europa.eu/legal-content/NL/TXT/HTML/?uri=CELEX:32016R0679&from=NL (europa.eu)
This Privacy Policy and the Terms and Conditions explain the types of personal data collected, the purposes for which it is collected and processed, its legal basis and the organizations or types of organizations, if any, to which we may disclose your personal data. It is necessary that you agree to the Terms, including the Privacy Policy, and that we collect, process, share and store personal data as described in order to provide the App to you.
Embedded Content
The App may from time to time contain links to and from external third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check these policies and any relevant terms of service before providing personal information to these websites. We are not responsible for the content of other websites or services.
2. What personal data do we collect?
2.1 We may collect, store and use personal data as described in the table in Appendix A of this Privacy Policy, and process it for the purposes and on the legal basis specified in that table. Personal data will be stored in accordance with Article 5 of this Privacy Policy.
3. Data collected for third parties or used by third parties.
We ourselves always have the final decision-making authority around questions asked via the App, even if questions are suggested by users themselves or by the representatives of organizations or departments working for and with this target group. All questions are hereby checked against a framework of scientific and ethical guidelines endorsed by the AskForce.One steering committee.
We also often analyze and process data ourselves around questions or topics suggested by third parties. This may include asking questions based on characteristics (e.g., we may ask different questions of employees with different job functions) or we may assign questions to different groups to study comparisons (e.g., divide all users into two random groups to study the impact of question wording).
- If data collected within the app is shared with third parties, this is always done within the framework of a processing agreement with those third party(ies) with clear agreements around data management, data processing and reporting on the results. In doing so, we only provide data to third parties at the aggregate level. Personal data is never passed on to third parties. The organizations with which we have a data processing agreement are listed in Appendix B of this Privacy Policy, along with the name of the study (if relevant) and a link to the third party’s privacy policy.
4. How we use your personal data
4.1. We will only process (collect, use, store, share, …) your personal data in accordance with your consent and/or for the necessary performance of the contract (see art. 6, 1, a) and b) AVG). In addition, your personal data may be processed in order to comply with a legal or regulatory obligation or from a legitimate interest.
4.2 The table in Appendix A of this Privacy Policy provides further information on the legal basis on which we will process your personal data.
5. Where and how long we store your personal data
5.1 All information you provide to us is stored on secure servers located in the European Union.
5.2 AskForce.One has an agreement with our processor/supplier company Inuits setting out the terms and conditions in terms of technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage in the App.
5.3 Your personal data will be stored as long as you use the App and no longer than strictly necessary from the moment you stop using the App Or when the agreement with the client, your employer is terminated.
5.4 If you withdraw your consent to the processing of “sensitive” personal data about you, we will delete “sensitive” personal data that we hold about you unless we can demonstrate that another legal basis applies. Sensitive personal data includes, inter alia, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, data concerning health or data concerning a natural person’s sex life or sexual orientation.
5.5 Please note that the use of the Internet or mobile networks is not completely secure, so we cannot guarantee the security of your data transmitted between your device(s) and the App. Any such transmission is at your own risk.
6. Your rights
6.1 Under the law, you have a number of rights. The first right is to receive confirmation as to whether or not we are processing your personal data and certain other information, as we have set out in this Privacy Policy.
6.2 The table in Appendix C at the end of this Privacy Policy explains the following rights that the Law gives you with respect to your personal data, and any exceptions to those rights:
- Right of access
- Right of rectification
- Right to erasure
- Right to request restriction of processing that affects you
- Right to data portability
- Right to object to processing
- Right to ask us not to process your personal data for direct marketing purposes.
- Right not to be subject to automated individual decision-making, including profiling.
6.3 You can exercise these rights (subject to any exceptions) by sending an email to privacy@askforce.one
7. Changes to our Privacy Policy
We may change this Privacy Policy. Any changes we make to our Privacy Policy in the future will be posted on this page and, if applicable, communicated to you via the App.
8. Regulatory and contact information
Our full company and registration details are set forth in Section 1 of the Terms.
Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to privacy@askforce.one
For more information on data protection and the protection of personal data, please visit the Data Protection Authority website: https://www.gegevensbeschermingsautoriteit.be
9. Complaints
You may file a complaint with the Data Protection Authority if you believe that there has been a breach of law in connection with your personal data.
Contact details Data Protection Authority.
Press Street 35
1000 Brussels
+32 (0)2 274 48 00
+32 (0)2 274 48 35
contact(at)apd-gba.be
https://www.gegevensbeschermingsautoriteit.be
https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen
10. General
This Privacy Policy is governed by Belgian law and any of us may bring legal proceedings before the Ghent courts in respect of any dispute arising out of or in connection with these Terms.
ANNEX A – YOUR PERSONAL INFORMATION
|
Personal data collected |
Purpose |
Legal basis for processing* |
|
If you decide to register as a user of the App, you will be asked to provide your email address |
|
Performance of a contract; compliance with a legal obligation ; legitimate interests |
|
Information about your device, mobile device or other hardware used to access the App and your visits to and use of the App (including your operating system, length of visit, page views) |
|
Performance of a contract; legitimate interests |
|
Information related to time taken to respond to questions, links you clicked; questions or feedback you submitted through the app, length of time spent on the App |
|
Performance of a contract; compliance with a legal obligation ; legitimate interests |
|
Email address, answers to questions and other information you provide by filling out forms on the App. This includes information you provide when registering to use the App, posting material or requesting further services. We may also ask you for information when you report a problem with the App. |
|
the performance of a contract; To comply with a legal obligation; legitimate interests |
|
If you log into the App through a social networking profile, we may collect, store and use your email data from that social networking profile or feed |
|
Performance of a contract ; compliance with a legal obligation; legitimate interests |
|
Correspondence between you and us based on your provided email address |
|
Performance of a contract ; compliance with a legal obligation; legitimate interests |
|
Details of your answers to questions via the App |
|
|
|
Answers to questions containing personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, data concerning health, or data concerning a natural person’s sex life or sexual orientation. |
|
Permission |
*Legal basis for processing.
Consent means the processing of your personal data when you have given your consent through a statement or a clear opt-in to the processing for a specific purpose. Consent is only valid if it is a free, specific, informed and unambiguous indication of what you want. You can withdraw your consent at any time by contacting us at privacy@askforce.one
Legitimate or legitimate interest means that the processing is necessary for the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular where the data subject is a child. You can learn more about how we balance our legitimate interests against the potential impact on you with respect to specific activities by contacting us.
Performance of a contract means processing your data when necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Fulfillment of a legal obligation means processing your personal data when necessary to fulfill a legal obligation incumbent upon us.
For all grounds of lawfulness: see Article 6 AVG.
ANNEX B – THIRD PARTIES
|
Name organisation |
Project |
Link to privacy policy |
|
|
|
|
ANNEX C – YOUR RIGHTS
|
Right |
Exception |
|
Right of access: To obtain confirmation from us as to whether or not personal data about you is being processed and, if so, to access the personal data and the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; d) if possible, the intended period for which the personal data will be stored or, if that is not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where personal data are not collected from the data subject, any available information on their source; h) the existence of automated decision-making, including profiling and (4) and, at least in those cases, meaningful information on the logic involved, as well as the importance and intended consequences of such processing for the data subject. |
|
|
Right of correction: to obtain from us without undue delay the correction of inaccurate personal data relating to you. We must notify each recipient to whom the corrected personal data has been provided, unless this proves impossible or involves a disproportionate effort. We will notify you of these recipients if you request this information. |
|
|
Right to erasure: to obtain from us the erasure of your personal data without undue delay where: a) the personal data is no longer necessary in relation to the purposes for which it was collected or is otherwise processed; b) you object to the processing based on a legitimate interest where there are no compelling legitimate grounds for the processing; c) the personal data have been processed unlawfully; d) the personal data must be deleted in order to comply with a legal obligation to which we are subject. We must notify any recipient to whom the deleted personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. We will notify you of these recipients if you request this information. |
Processing is necessary for either compliance with a legal obligation which requires processing under the law of the Union or the Member State to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority; or the establishment, exercise or defense of legal claims. |
|
Right to request the restriction of processing applicable to you: to obtain from us a restriction of processing where: a) the accuracy of the personal data is disputed by you, for a period that allows us to verify the accuracy of the personal data; b) the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use; c) we no longer need the personal data for the purposes of the processing, but are required by you for the establishment, exercise or defense of legal claims; d) you object to the processing based on a legitimate interest, pending verification of whether our legitimate grounds prevail over yours. We must provide notice to any recipient to whom the restricted personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. We will notify you of these recipients if you request that information. |
Where processing is restricted under this right, such personal data, with the exception of storage, will only be processed: with your consent; or for the establishment, exercise or defense of legal claims; or for the protection of the rights of another natural or legal person; or for reasons of substantial public interest of the Union or of a Member State. |
|
The right to data portability: to receive the personal data you provide, in a structured, commonly used and machine-readable format, and the right to transfer that data to another data controller without hindrance, wherever: a) the processing is based on consent or is necessary for the performance of a contract to which you are a party or to take steps at your request prior to the conclusion of a contract; and b) the processing is carried out by automated means. You have the right to have the personal data transferred directly from us to another controller, insofar as this is technically possible. The exercise of this right does not affect the right to erasure. |
This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. |
|
The right to object to processing: to object at any time, based on your specific situation, to the processing of your personal data based on processing necessary for the purposes of legitimate interests pursued by us or a third party (except where your interests or fundamental rights and freedoms requiring the protection of personal data prevail), including profiling. |
When: we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject; or for the establishment, exercise or defense of legal claims. |
|
The right not to be subject to automated individual decision-making, including profiling: not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on you or similarly significantly affects you. |
If the decision: a) is necessary for the conclusion or performance of a contract between you and us; b) is authorized by the law of the Union or the Member State to which we are subject, which also provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or c) is based on the explicit consent of the data subject. In the cases referred to in points (a) and (c), we shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, and at least the right to human intervention on our part to express his or her point of view and challenge the decision. |
|
The right to ask us not to process your personal data for direct marketing purposes: to object at any time to the processing of your personal data for such marketing, including profiling insofar as it relates to such direct marketing. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You may also exercise this right at any time by contacting us at privacy@askforce.one
|
|