Version 2.1 Active as of 17th December 2020 — Minor changes due to Brexit
Previous: Version 2.0 Active as of 18th April 2019
PingPong (PINGPONG UX LIMITED) of Craufurd Hale LLP, Ground Floor, Arena Court, Crown Lane, Maidenhead, SL6 8QZ
Contact email: legal@hellopingpong.com
This Privacy Policy governs your use as a paying client or moderator (“You”) of the PingPong website and service ("Services") and your participation in research. Our Services enable You to contact users to hold Interviews, market research and product feedback sessions with them.
When You use the Services to connect with other users, Your profile information will be revealed to PingPong and users who have registered a tester account with PingPong (“Testers”), who You may invite to take part in Your usability study interviews ("Research"). We won't disclose Your full name, but Testers will be able to view some of Your personal information when You consent to this.
If you have any questions about PingPong's approach to privacy, please email us at legal@hellopingpong.com.
Please note that this Privacy Policy does not apply to any data that is collected by PingPong on Your behalf and at Your request in relation to You using our chargeable services, for example when sending Research invitations to Testers, taking part in Research with Testers via the Services. Such personal data is collected and processed on Your behalf by PingPong acting as Your data processor and such personal data is processed subject to the PingPong Terms and Conditions and the provisions of the Data Processing Agreement that You agreed to with us, when ordering the Services.
When You send an invitation to a Tester to take part in Research, You give Your consent for PingPong to create an audio and video recording and text transcription of the Research (a "Video"). This will be used to backup Your notes and will allow individuals within Your company or business group to watch the Video, either live or at a later date. This allows You to use Tester feedback to improve Your products or services.
By sending an invitation to a Tester, You accept that You are voluntarily taking part in a study being facilitated by PingPong for the purpose of product and process improvement within Your business group ("Purpose"). You understand that Your participation will be recorded and that any personal information You provide and which is used by PingPong as a data controller will be collected and used in accordance with this Privacy Policy.
Your Personal Data is collected to allow us to provide our Product, as well as for user database management, managing contacts and sending messages, analytics, managing our hosting and backend infrastructure, handling payments, registration and authentication and displaying content from external platforms.
PingPong does not collect any "special category data" (as defined by Article 9(2) of the GDPR) from You when using our Services.
The Services have been built to connect You with the best matched Testers for Your interviews. Better matches means You are happier and more payouts are made to Testers. We analyse the data You provide us, along with Your Usage Data, to automatically profile Your account and match You to appropriate Testers.
PingPong use cookies in the Services to distinguish You from other users. This helps us to provide You with a good experience when You use our Services and also allows us to improve the Services. For more information about cookies please read our Cookie Policy.
PingPong cares about keeping Your information confidential. We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Your Personal Data. Please be aware that, although we endeavor provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.
Processing of Your Data is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
PingPong uses others to help us provide our Services (for example, maintenance, analysis, audit, payments, fraud detection, marketing and development). These organisations and individuals will have access to Your information as is reasonably necessary to perform their individual tasks on our behalf, and will not disclose or use Your information for other purposes.
We may process your Personal Data if one of the following applies:
In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Our Services are global and Your information (including Personal Data) may be stored and processed in any country where we have operations or where we engage service providers, and we may transfer Your information to countries outside of your country of residence, which may have data protection rules that are different from those of Your country of residence.
The personal data that we collect from You may therefore be transferred to, and stored at, a destination outside the European Economic Area ("EEA") or the UK. It may also be processed by staff operating outside the EEA or UK who work for us or for one of our suppliers or partners. Such staff or subcontractors may be engaged in, among other things, the fulfilment of Your order, the processing of Your payment details or the provision of support services. By submitting Your Personal Data, You agree to this transfer, storing or processing outside of the EEA or the UK.
We will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy. In particular, this means that Your Personal Data will only be transferred to a country that provides an adequate level of protection (for example, where the European Commission has determined that a country provides an adequate level of protection) or where the recipient is bound by standard contractual clauses according to conditions provided by the European Commission (“Standard Contractual Clauses”).
The Services are accessible via the internet and may potentially be accessed by anyone around the world. Other users may access our Services from outside the EEA or the UK. This means that where You chose to post Your data within the Services, it could be accessed from anywhere around the world and therefore a transfer of Your data outside of the EEA or the UK may be deemed to have occurred. You consent to such transfer of Your data for and by way of this purpose.
All information You provide to us is stored on our secure servers. Any credit card information or payment transactions will be encrypted using SSL technology. Where we have given You (or where you have chosen) a password which enables You to access certain parts of the Services, You are responsible for keeping this password confidential. We ask You not to share any password with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will endeavour to protect Your Personal Data, we cannot guarantee the security of Your data transmitted to the Services. Any transmission is at Your own risk. Once we have received Your information, we will use strict procedures and security features to try to prevent unauthorised access.
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Therefore:
We may be allowed to retain Personal Data for a longer period whenever You have given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation (including law enforcement requests), meet regulatory requirements, maintain security, prevent fraud and abuse, resolve disputes, enforce our contracts with you, or fulfil your request to “unsubscribe” from further messages from us.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
You can stop all ongoing collection of information by the Product easily by deleting your account via your account settings page. Please note that if you have participated in Interviews, we may not be able to erase all your data immediately.
You have the right under Data Protection Law, free of charge to:
You can make a request in relation to any of the above rights by contacting us as set out at the end of this Privacy Policy. We will respond to such queries within 30 days and deal with requests we receive from you, in accordance with the provisions of Data Protection Law.
Please note that where we process Your Personal Data for marketing purposes, if You change Your mind about being contacted in the future, You can also “opt out” at any time by clicking the “unsubscribe” link at the bottom of any email. Once You “opt out”, You will no longer receive any marketing emails from us. We will continue to communicate with You regarding Your service billing and support via email
Any requests to exercise Your rights can be directed to PingPong through the contact details provided at the beginning of this Privacy Policy. We will respond to such queries within 30 days and deal with requests we receive from You, in accordance with the provisions of Data Protection Law.
Children under the age of 18 are strictly prohibited from using the Services. If You suspect or become aware that a child has used the Services, please contact us immediately so that we can delete their account and information.
By using the Services, you are consenting to our processing of Your information as set forth in this Privacy Policy now and as amended by us. "Processing," means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information.
If you have any complaints about our use of Your Personal Data in addition to contacting us, You may contact the following applicable data protection supervisory authority: Individuals located in the EU should contact our lead supervisory authority: the Hungarian National Authority for Data Protection H-1125 Budapest, Szilágyi Erzsébet fasor 22/C or https://www.naih.hu/general-information.html
Please revisit this page periodically to stay aware of any changes to this Policy, which we may update from time to time. If we modify the Policy, we will make it available through the Service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Service after the revised Policy has become effective indicates that you have read, understood and agreed to the current version of the Policy. If You object to any of the changes to the Privacy Policy, You must cease using the Services. Unless stated otherwise, the then-current Privacy Policy applies to all Personal Data PingPong holds about You from the date of the change.
