OPINATOR is GDPR compliant. We take the protection of personal data very seriously and we always observe the rules laid down in the applicable data protection laws.
1.1 Brief description of Our Services
OPINATOR is a powerful online software platform to create feature-rich digital forms, which can be used by any type of organization to interact with customers, members or end-users across many types of digital channels.
OPINATOR is provided under a “Software as a Service” (SaaS) model. Our customers can only access and use the software with valid accounts. Every account has a set of users, which can access and use the software self-service with a browser through the Internet.
All data processed and stored by our online software platform is hosted in best-of-class data centers operated by Amazon Web Services, Inc. (“AWS”).
1. 2 Data collection through the OPINATOR software platform
As explained above, OPINATOR is self-service software. This implies that users of our customers’ accounts are solely responsible for the forms that they create with OPINATOR and for the data that they show and gather when interacting with their own customers, members, or end-users, which may include personal data.
Our customers, through the users, that they assign to access and use their account, own and control how they use our software and all the information and data that they generate, distribute, report, manage, process or store in OPINATOR. Our associates, employees or collaborators do not pro-actively access our customers’ data and any exposure to customers’ data is only in connection to providing our services.
We will process data for our customers as part of our services only upon their request and following their instructions strictly, always taking care to comply with the applicable laws. Nevertheless, it’s the sole responsibility of our customers to ensure that they comply with all applicable laws when using our services themselves. This includes taking the appropriate measures when processing personal data, preventing unsolicited communications, deleting data when no longer required, and responding to any personal data right enforcement request.
We may anonymize and aggregate data and use such anonymized and aggregated data for our business purposes. However, unless required by law, we will never transfer data to a third-party without the written permission of the customer.
In summary, we basically provide software technology and it’s our customers who decide and control how they prefer to use it according to their own purposes and needs.
1.3 Other forms of data collection
We only collect and process the data that we need to conduct our business in a responsible manner and as required by law. Therefore, we collect data from customers, suppliers, employees, etc. according to the usual and normal business needs, from performing the marketing and sales of our products and services, to managing our accounting and payroll according to the applicable norms. We also maintain databases of customer and user information, used for internal purposes such as technical support and marketing activities.
In our website (web.opinator.com), which we use both to inform about our products and services, as well as to provide login access to the OPINATOR online software platform, we collect and process aggregate information of visitors and users (such as the domain, accessed account, forms, and other publicly available information). We use this information to improve our products and services and to customize the content shown to each visitor or user. Cookies are used to help analyze the user experience and to provide customized content.
We shall collect your personal data through the provided contact form (https://web.opinator.com/contact-us/), which shall be used according to the purpose of your contact and where the provided information shall be kept only for the time necessary to respond and/or solve your inquiry. In any case, we may keep a record of your contact and the personal information related to the allowed period as provided by the corresponding laws and regulations for compliance reasons.
We shall also collect your personal data through the provided newsletter sign-up form (https://www.opinator.com/opi/OPINATOR_Newsletter_SIGNUP), which shall be used for commercial purposes, such as of sending you our newsletters and/or contacting you to present our services. Your information will be kept as long as you don’t instruct us not to use and/or store it. In any case, we may keep a record of your contact and the personal information related to the allowed period as provided by the corresponding laws and regulations for compliance reasons.
As explained above, all data processed and stored by our online software platform is hosted in best-of-class data centers operated by Amazon Web Services, Inc. (“AWS”). Accordingly, as described by the GDPR, AWS is to be considered as a sub-processor. Other sub-processors, depending on the use that our customers make of our software platform, may include email and messaging platforms. The list of possible sub-processors is, therefore:
- AWS (aws.amazon.com), operated by Amazon Web Services, Inc., located in 1200 12th Avenue South, Suite 1200, Seattle, WA 98144, USA.
- MailChimp (www.mailchimp.com), operated by The Rocket Science Group, LLC, located in 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA.
- Esendex (esendex.com), operated by Esendex Limited, located in 20 Wollaton Street, Nottingham, NG1 5FW, UK
If you are an EU or Swiss citizen and have an inquiry or question regarding your personal data, we urge you to contact the organization responsible for interacting with you with our software. Please be aware that it’s our customers who decide and control how they use our software and they are solely responsible for the interaction forms that they create and the data that they gather and process with OPINATOR. If the organization responsible for your personal data is unresponsive to your inquiry, you may contact us by email at email@example.com.
Updated June 12, 2020