Last updated: November 27, 2020
1. Purposes and content
2. What personal data will be processed and why?
2.1 In order for you to create a user account we collect and process the name and e-mail address that you submit to us. We need this information to be able to provide you with the service of tracking your test performance, printing diplomas and notifying you when we have new or updated content for you.
2.2 You may also choose to submit your country of residence, gender and year of birth. This information is collected and processed in order for us to create statistics so we can analyse and understand how individuals of different countries, gender, and age perceive the world. When used for statistical purposes, your personal data is always anonymised. We also use the aggregated and anonymised data to target our educational efforts or information campaigns directed at different countries or decision makers.
2.3 As mentioned above, only your name and e-mail address are mandatory to access the full services. The consequence of not providing this information is that you cannot create a user account to follow your progress, download and print your diploma or get content updates. However, you can always take the tests without creating an account.
3. What is the legal basis for processing of your personal data?
3.1 The processing of your personal data for the purpose of creating a user account in Section 2.1 above is necessary for us to provide you with the user account and notification service and thus to fulfil our agreement with you.
3.2 The processing of your country of residence, gender and year of birth for the purpose of statistical analysis in Section 2.2 above is based on your consent. You may always withdraw your consent, see more under Section 6 – What are your rights?.
4. Who has access to your personal data?
4.1 Gapminder uses a third party service provider, Prototyp, to provide the Gapminder Worldview Upgrader. To this end, Prototyp processes the personal data that you submit on behalf of Gapminder. Prototyp may not use your personal data for any other purposes than providing the services. Our relationship with Prototyp is governed by a data processor agreement.
4.2 Gapminder and Prototyp have implemented appropriate technical and organisational measures to protect your personal data against loss, unlawful access, etc. The number of persons with access to your personal data is limited and only individuals associated with Gapminder and Prototyp that need to process your personal data will have access.
4.3 We do not share your personal data with any other third parties. When we present statistics based on the Gapminder Worldview Upgrader your personal data has been anonymised and cannot directly or indirectly be attributed to you as an individual.
5. For how long is your personal data stored?
5.1 We do not store your personal data longer than necessary to fulfil the purposes for which the personal data was collected. This means that we delete your e-mail address and name directly if you choose to delete your user account.
5.2 Your country of residence, gender, and year of birth will be processed as long as you have given your consent to it or until you delete your user account.
5.3 Further, if your user account has been inactive for a year, we will delete all personal data that we keep about you. Upon deletion of your personal data your test results will be anonymised and further used in our database for statistical purposes.
6. What are your rights?
6.1 Stiftelsen Gapminder, a Swedish foundation registered at Stockholm County Administration Board (Sw. Länstyrelsen Stockholm), reg. no. 802424-7721, P.O. Box 38025, 100 64 Stockholm, Sweden, is the controller of the processing of your personal data. This means that we are responsible for your personal data being processed correctly and in accordance with the EU General Data Protection Regulation and other applicable data protection laws.
6.2 You are entitled to know what personal data we are processing regarding you, and you can request a copy of such data. You are entitled to have incorrect personal data regarding you corrected, and in some cases you may request that we delete your personal data (if, for example, the personal data is no longer necessary in order to fulfil an agreement with you). If you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information provided in Section 6.3. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data be limited. Please note that limitation or deletion of your personal data may result in us not being able to fulfil our obligations under an agreement with you. You are also entitled to extract your personal data in a machine-readable format and to transfer the personal data to another controller.
6.3 If you have questions regarding how we process personal data concerning you or wish to exercise your rights in accordance with Section 6.2, you are most welcome to contact us at [email protected] or by mail to the address above. You can also contact us at [email protected] if you wish to remove your personal data from any of our services.
6.4 If you have any objections to or complaints about the way we process your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority.