Data Protection Notice

Who is responsible

Controller: NDT Network GmbH (Contemporary Communication), Ruthnergasse 178/1, 1210 Vienna, Austria. Contact for all privacy matters: Christoph Svoboda, hello@svoboda.cc.

What we collect, and why

• Your diagnostic answers (scenario and aspiration choices, optional profile questions such as sector, role, organization size). Purpose: computing your individual report and anonymous, aggregated group statistics (counts and directions only — never individual rankings).
• Contact details (name, email or LinkedIn profile, optionally company) — only if you request your individual report or subscribe to the newsletter. Purpose: delivering exactly what you asked for.
• Email interaction data: our report emails contain link-click measurement so we know whether delivery works. No open tracking, no advertising profiles.

Legal basis: your consent (Art. 6(1)(a) GDPR), given through the opt-in questions in the form. You can withdraw it at any time (see below). We never sell your data and never use it for any purpose beyond your authorization.

Who processes data on our behalf

• Typeform S.L. (Barcelona, EU) — survey platform.
• Resend (US; EU sending region, EU–US Data Privacy Framework certified, Standard Contractual Clauses) — email delivery.
• Cloudflare (US; Data Privacy Framework certified) — website and report hosting.
• GitHub, Inc. (Microsoft; US; Data Privacy Framework certified) — access-restricted, version-controlled storage of the website including report pages.

All four act as processors under Art. 28 GDPR data processing agreements. Your individual report is published only under an unguessable private link that is sent solely to you; the report pages are excluded from search-engine indexing.

How long we keep it

Survey responses and reports are kept for the duration of the research and publication cycle of The Hidden Cost of Speed, at most 3 years, unless you ask for deletion earlier. Newsletter contact data is kept until you unsubscribe. Aggregated, anonymous statistics (e.g. "20 of 39 answered in this direction") contain no personal data and may be kept indefinitely.

Your rights — and how to use them

You have the right to access, rectify, delete, and receive a copy of your data (portability), to withdraw consent, and to object. One email is enough: write to hello@svoboda.cc from the address you registered with (or include your report link), and state what you want:

• "Send me my data" — you receive a copy of your answers, your computed report, and your contact record within 30 days (usually much faster).
• "Delete my data" — we delete your survey response, your report page, and your contact record from our systems and delivery logs, and confirm the deletion to you. Only anonymous aggregate counts remain, which cannot be traced back to you.
• "Unsubscribe" — newsletter contact data is removed; your report stays available if you want to keep it.

If you believe we handle your data improperly, you can complain to the Austrian Data Protection Authority (dsb.gv.at) or your local supervisory authority.