Data Protection Information on the Client Satisfaction Survey (NPS Survey)

Data Protection Information on the Client Satisfaction Survey (NPS Survey)

Data Controller

TLC GmbH TAX
Meierottostr. 8, 10719 Berlin
info@tlc.ag

Purposes and legal bases of processing

We conduct a satisfaction survey in order to continuously improve the quality of our services.

Your personal data is processed in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interest. Our legitimate interest lies in better understanding the satisfaction of our clients, adapting our service to the needs of our clients and taking targeted measures to improve its quality.

If you have given a low rating in the survey, we reserve the right to contact you to clarify possible problems, provided you have not objected to this. Our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is to recognise any dissatisfaction at an early stage, to understand its causes and to react to them in a targeted manner.

Processed personal data

  • Your rating (e.g. 0-10 on the NPS scale)

  • Optional: Your written feedback

  • Your email address (if individualised)

The provision of the aforementioned personal data is neither legally nor contractually required and is voluntary. Processing is anonymised or pseudonymised as far as possible.

Recipient of the data

The recipient of the data is a processor from the online survey sector, specifically SurveyMonkey Europe UC, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (SurveyMonkey). An order processing contract has been concluded with SurveyMonkey in accordance with Art. 28 GDPR.

Storage duration

We process your personal data for the duration for which the respective purpose of use requires a corresponding storage. The survey results are stored until the survey has been fully evaluated and then anonymised or deleted.

Third country transfer

A transfer of personal data by SurveyMonkey to the US parent company, SurveyMonkey Inc., cannot be ruled out in individual cases. The data exporter within the meaning of the order processing contract concluded is SurveyMonkey Europe UC, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (SurveyMonkey). SurveyMonkey Inc. is certified under the EU-U.S. Data Privacy Framework. For this framework, there exists an adequacy decision of the European Commission in accordance with Art. 45 GDPR. Further information on data protection at SurveyMonkey can be found at https://www.surveymonkey.com/mp/legal/privacy/.

Your rights as a data subject

  • Right of access: In accordance with Art. 15 GDPR, you can request information about which of your personal data we process.

  • Right of rectification: If the information concerning you is not (or no longer) correct, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

  • Right of erasure: You can request the erasure of your personal data in accordance with Art. 17 GDPR.

  • Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

  • Right to data portability: In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties.

  • Right to lodge a complaint: If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 para. 1 GDPR.

Your right to object (Art. 21 GDPR)

At any time for reasons resulting from your particular situation, you have the right to object to your personal data being processed in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.