Data Processing Addendum

1. Parties

Customer: The company, organization, or individual using surveys.expert to create surveys and collect responses.

Processor: surveys.expert.

2. Roles

For survey responses collected by customers:

• Customer is generally the data controller or business.
• surveys.expert is generally the data processor or service provider.

For account, billing, product usage, and platform administration data:

• surveys.expert may act as an independent data controller.

3. Processing instructions

surveys.expert will process customer personal data only:

• to provide the service
• according to customer instructions
• as described in the Terms, Privacy Policy, and this Addendum
• as required by applicable law

4. Categories of personal data

Depending on customer use, processed data may include:

• respondent names
• email addresses
• phone numbers
• company information
• survey answers
• open-text responses
• uploaded files
• device/browser metadata
• timestamps
• IP address or approximate location

5. Categories of data subjects

Data subjects may include:

• customers
• survey respondents
• employees
• leads
• product users
• website visitors
• event attendees
• candidates
• other individuals invited to complete surveys

6. Purpose of processing

surveys.expert processes personal data to:

• host surveys
• collect responses
• store responses
• analyze responses
• generate AI insights
• provide exports
• provide dashboards and reports
• provide technical support
• maintain security and platform reliability

7. Confidentiality

surveys.expert will ensure that personnel authorized to process customer personal data are subject to confidentiality obligations.

8. Security measures

surveys.expert will maintain reasonable technical and organizational security measures designed to protect customer personal data.

Measures may include:

• access controls
• authentication
• encryption where appropriate
• logging and monitoring
• restricted employee access
• secure hosting infrastructure
• backup and recovery processes
• security review processes

9. Subprocessors

surveys.expert may use subprocessors to provide the service, including:

• hosting providers
• AI providers
• payment providers
• analytics providers
• email providers
• support tools
• security tools

surveys.expert remains responsible for subprocessors as required by applicable law and will use reasonable contractual protections with subprocessors.

10. International transfers

Customer personal data may be processed in countries outside the customer's country.

Where required, surveys.expert will use appropriate safeguards for international data transfers, such as contractual protections or legally recognized transfer mechanisms.

11. Assistance with data subject requests

Where reasonably possible, surveys.expert will assist customers with responding to data subject requests, including access, correction, deletion, restriction, objection, and portability requests.

If a respondent contacts surveys.expert directly about a customer-created survey, surveys.expert may direct the respondent to the customer.

12. Data deletion and return

Upon customer request or account termination, surveys.expert will delete or return customer personal data where reasonably possible, subject to:

• backup retention
• legal obligations
• fraud prevention
• security requirements
• dispute resolution

13. Personal data breach

If surveys.expert becomes aware of a confirmed personal data breach affecting customer personal data, surveys.expert will notify affected customers without undue delay, as required by applicable law.

14. Audits and information

surveys.expert may provide reasonable information about its data protection practices to help customers verify compliance.

For security and confidentiality reasons, audits may be limited to documentation, summaries, questionnaires, or third-party reports where available.

15. Customer responsibilities

Customer is responsible for:

• having a valid legal basis for collecting survey data
• providing privacy notices to respondents
• obtaining consent where required
• configuring surveys appropriately
• limiting sensitive data collection
• managing access permissions
• deleting data when no longer needed
• complying with laws that apply to customer's business and respondents

16. AI processing

When customers use AI features, survey content and responses may be processed by AI providers to generate questions, summaries, sentiment analysis, topic extraction, and recommendations.

Customer should not submit sensitive personal data to AI features unless legally permitted and appropriate safeguards are in place.

17. Contact

For data processing questions, contact:

support@surveys.expert