Privacy Statement
Last updated: 14 September 2026
This statement explains how personal data is handled when you use
Corvers Survey, the survey platform operated by Corvers Commercial &
Legal Affairs ("Corvers", "we").
1. Who is responsible
For the operation of the platform itself â accounts, access logs and notifications â
Corvers is the controller. For the content of a particular questionnaire, the organisation
that published that questionnaire is the controller and Corvers acts as its processor.
2. What we process
- Account data: name, e-mail address, organisation, language and a
hashed password. Accounts created by self-registration are validated by e-mail.
- Survey content: the questions, options, texts and files that authors
publish, and the answers submitted by respondents.
- Technical data: connection data needed to operate and secure the
Service (IP address, session identifiers, timestamps, administrative actions).
Anonymous questionnaires do not record identifying connection details with the answers.
- Notification data: the addresses used to send invitations, validation
messages, password resets and publication notices.
3. Why we process it
To provide the Service and administer accounts; to send the notifications you or the
survey author have requested; to secure the platform and prevent misuse; to keep backups so
that data can be restored after an incident; and to comply with legal obligations.
4. Legal bases
Performance of a contract (providing the Service), legitimate interests (security,
availability, integrity of the platform), consent where a questionnaire asks for it, and
legal obligation where applicable law requires retention.
5. How long we keep it
Account data is kept while the account is active and removed after deletion. Survey data
is kept for the period set by the survey author, then deleted or anonymised. Technical logs
are kept for a limited period. Rolling backups are overwritten in the normal course.
6. Who receives it
Access is limited to Corvers personnel who need it to operate the Service, and to the
survey author and collaborators that the author has authorised. Infrastructure hosting and
e-mail delivery are provided by service providers acting on our instructions. We do not sell
personal data.
7. Where it is stored
On infrastructure operated by Corvers and located in the European Union. Connections to
the Service are encrypted in transit.
8. Your rights
You may request access to your personal data, rectification, erasure, restriction,
portability or object to processing, and you may withdraw consent where processing is based
on it. Requests concerning a specific questionnaire are handled with the organisation that
published it. Requests can be sent through
Support. You also have the right to lodge a
complaint with a data-protection supervisory authority.
9. Cookies and sessions
The Service uses a session cookie needed to keep you logged in and to protect forms
against cross-site request forgery. These cookies are strictly necessary for the Service to
work; the platform does not use advertising or third-party tracking cookies.
10. Changes
We will update this statement when the way we process data changes, and will publish the
new version on this page with its date.
This text was prepared by Corvers as a working draft and is
subject to review and approval by Corvers' legal function before it is relied upon.
