EU – U.S. Privacy Shield. SurveyMonkey Inc. (and its subsidiary company, Infinity Box Inc.) participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. SurveyMonkey is committed to subjecting all personal data received from European Union (EU) member countries to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List. https://www.privacyshield.gov/list
When SurveyMonkey receives personal information under the Privacy Shield and then transfers it to a third-party service provider acting as an agent on SurveyMonkey’s behalf, SurveyMonkey has certain liability under the Privacy Shield if both (i) the agent processes the information in a manner inconsistent with the Privacy Shield and (ii) SurveyMonkey is responsible for the event giving rise to the damage. With respect to personal data received or transferred pursuant to the Privacy Shield Framework, SurveyMonkey is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. In certain situations, SurveyMonkey may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Please contact SurveyMonkey as described in the "Contact Information" section below if you have any concerns or complaints of any nature. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider, (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
U.S. – Swiss Safe Harbor. SurveyMonkey Inc. (and its subsidiary company, Infinity Box Inc.) complies with the US-Swiss Safe Harbor Framework developed by the U.S. Department of Commerce regarding the collection, use and retention of personal information received in the U.S. from Switzerland. SurveyMonkey Inc. has certified that it adheres to the U.S.-Swiss Safe Harbor Privacy Principles with respect to such information. SurveyMonkey may process some data from individuals or companies in Switzerland via other compliance mechanisms, including data processing agreements based on the EU Standard Contractual Clauses. To learn more about the Safe Harbor program, and to view our certification, please visit https://safeharbor.export.gov/swisslist.aspx.
Data Integrity: Collection and Use of Personal Information
Our primary goals in collecting information are to provide and improve our Site, Program and Services, to administer any registration or account and to enable users to enjoy, easily navigate, use or participate in the Site, Program and Services, as applicable.
(a) Vendor User Personal Information.
As part of the registration process for the Program, and from time to time thereafter, SurveyMonkey will collect certain personal information from Vendor Users that can be used to contact or identify the Vendor Users in order to administer the Vendor's account ("Vendor User Personal Information"). Vendor User Personal Information includes, but is not limited to, a Vendor User's first and last name, company name, email address, telephone and fax numbers, Vendor company password, domain address, and other personal information listed in our Vendor registration form.
SurveyMonkey's primary goal in collecting Vendor User Personal Information is to enable SurveyMonkey to contact and communicate with a Vendor regarding the Program or activities relevant to a Vendor, to provide a Vendor with a smooth and efficient experience of the Program, to process fees and charge a Vendor for participation in the Program or for any Services it has selected, to administer any Vendor inquiries and to contact a Vendor about modifications to the status of any TechFacts or about any new or existing products and services that might be of interest to a Vendor.
As requested by a Vendor, SurveyMonkey will contact and communicate with Customer Users to inquire about their experiences with Vendor and Vendor Products. SurveyMonkey will share some of Vendor's information (including name, address, other contact information and Vendor Products to be reviewed by the Customer Users).
(b) Customer User Personal Information.
Under the Program, Vendors provide SurveyMonkey with contact information of Customer Users and request that SurveyMonkey contact such Customer Users on their behalf. "Customer User Personal Information" means information about a Customer User that can be used to contact or identify such user. Customer User Personal Information may include, but is not limited to, the Customer User's company name, individual contact name, and email. SurveyMonkey requires that Vendors do not breach any obligations they have to Customer Users or to Customers in providing such contact information for these purposes and that they comply with all laws relating to privacy in disclosing such information to SurveyMonkey.
SurveyMonkey uses Customer User Personal Information to process, validate and verify a Customer User's identity, to contact and communicate with that Customer User regarding the Customer User's experiences with a Vendor and the applicable Vendor Products or activities relevant to the Customer User, to provide the Customer Users with a smooth and efficient experience of the Program, and to contact and communicate with the Customer User about modifications to the status of any TechFacts or about any new or existing products and services that might be of interest to the Customer User or Customer.
If a Customer User has visited the Site solely to respond to a Questionnaire about a particular Vendor, and the Customer User's activities on the Site are limited to responding to that Questionnaire, SurveyMonkey will not share that Customer User's Customer User Personal Information with any other Vendor. However, a Customer User may independently choose to provide us with Customer User Personal Information (for instance, in order to view certain assets such as whitepapers, videos, or other information), either by visiting or browsing the Site after completing a Questionnaire – in that case, SurveyMonkey may share that Customer User's Customer User Personal Information with other Vendors as detailed herein.
TechFacts are provided on an anonymous basis, – that is, no Customer User Personal Information will be displayed in a TechFact unless the Customer User authorizes the use of the Customer User's name and company affiliation.
(c) Viewing TechFacts.
SurveyMonkey assigns a unique TechValidate identification number (a "TVID") to each TechFact. The TVID will appear on each copy of the TechFact. The Site is designed so that visitors may look up and view TechFacts without the collection of any personal information (except for such visitor's internet protocol (IP) address).
(d) Log Data.
When you visit the Site, whether as a registered Vendor User, Customer User or a visitor just browsing the Site, our servers automatically record and collect information that your browser sends whenever you visit a website ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, the geographic location of the IP address you are using to access the Internet, browser and platform type, referring/exit pages, internet service provider, the files viewed on our Site (e.g., HTML pages, graphics, etc.), the time spent on those pages, information you search for on our Site, access times and dates, clickstream data and other statistics.
We use this Log Data to monitor and analyze use of the Site and the Service and for internal purposes such as to administer, improve and customize the Site, to help SurveyMonkey understand and analyze how the Site is being used, to track aggregate Site usage, to provide technical administration, to increase the Site's functionality and user-friendliness and to better tailor the Site to our visitors' needs. We do not use Log Data in association with other personal information, though we may aggregate, analyze and evaluate such information to attempt to provide you with a better experience, to improve the quality and value of the Services and to analyze and understand how our Site and the Services are used.
(e) Cookies / Tracking Technologies.
You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Sites or all (or any) functionality of the Services. To manage Flash cookies, please click here.
(f) Communications with SurveyMonkey.
If you contact us by email through the Site, through participation in the Program, through use of the Services or otherwise, we may keep a record of your contact information and correspondence, and may use your email address, and any information that you provide to us in your message, to respond to you.
SurveyMonkey may contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. If you decide at any time that you no longer wish to receive such communications from SurveyMonkey, you may follow the unsubscribe instructions provided in any of the communications (or update your preferences if you have a registered account).
SurveyMonkey may also request that you provide personal information when you request promotional information, when you complete a Customer User survey, or when you participate in contests.
We will also send you service related email announcements on rare occasions when it is necessary to do so. For instance, if our service is temporarily suspended for maintenance, we might send you an email. You do not have an option to opt out of these emails, which are not promotional in nature.
Identity theft and the practice known as "phishing" are of great concern to SurveyMonkey. Safeguarding information to help protect you from identity theft is a top priority. We do not and will not, at any time, request your credit card information, your company ID, login password, or national identification numbers in a non-secure or unsolicited e-mail or telephone communication. In addition, in using the Program or Services, please do not ask your Customer Users for credit card details, social security information, passwords, or similar types of information—we may remove questionnaires without notice that ask for this type of information.
(h) Data Integrity.
SurveyMonkey will collect and use personal information only as set forth herein or in a manner that is compatible with the previously described purposes, except where an individual subsequently authorizes a different use. SurveyMonkey has taken reasonable steps to ensure that it only collects personal information that is relevant to the aforementioned intended uses, and that it is accurate, complete, and current.
(a) Information Sharing and Disclosure
Aggregate Information and Non-Identifying Information. We may share aggregated non-identifying information and Log Data that does not include Vendor User Personal Information or Customer User Personal Information, and we may otherwise disclose non-identifying information and Log Data with third parties (including media, suppliers, research companies and other organizations) for industry analysis, demographic profiling and other purposes. Any aggregated information shared in these contexts will not contain Vendor User Personal Information or Customer User Personal Information.
Compliance with Laws and Law Enforcement. SurveyMonkey cooperates with government and law enforcement officials and private parties to enforce and comply with the laws applicable to it. Where we are legally obliged to do so, we may disclose information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas, warrants or requests under any mutual legal assistance treaties), to protect the property and rights of SurveyMonkey or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, any illegal, unethical or legally actionable activity.
Business Transfers. SurveyMonkey may sell, transfer or otherwise share some or all of its assets, including Vendor User Personal Information and Customer User Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy. In this event, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your Personal Information, and choices you may have regarding your Personal Information.
Service Providers. We may employ third party companies and individuals to facilitate our Sites and Services, to provide the Sites and Services on our behalf, to perform Site-related services (e.g., without limitation, bill or credit card payment processing, maintenance services, database management, web analytics and improvement of the Sites' features) or to assist us in analyzing how our Sites and Services are used. These third parties have access to Vendor User Personal Information, Customer User Personal Information, non-identifying information and Log Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
(a) Changing or Deleting Your Information
As an account holder, you may access and correct certain personal information that SurveyMonkey holds about you. Some account holders and other individuals (including those whose information we receive under the EU-U.S. Privacy Shield and the U.S.-Swiss Safe Harbor) have certain legal rights to obtain information of whether we hold personal information about them, to access personal information we hold about them, and to obtain its correction, update, amendment or deletion in appropriate circumstances. For some information, these rights may be exercised through your account, and in all cases, requests to exercise these rights may be directed to our customer support team at email@example.com. These rights are subject to some exceptions, such as where giving you access would have an unreasonable impact on the privacy of other individuals. We will respond to your request to exercise these rights within a reasonable time and, where required by law or where we deem it otherwise appropriate and practicable to do so, we will honor your request.
If you completely delete all personal information about you, then your account may become deactivated. From time to time, we may contact you by mail, email or telephone to tell you about additional products or services that we or third parties may offer. If you do not wish to receive such calls or promotional materials, please contact us or use the "unsubscribe" option in our email communications.
We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
(b) Data Security
SurveyMonkey is concerned with safeguarding your information. We employ a variety of industry-standard administrative, physical and electronic security measures designed to protect your information from unauthorized access. We will make any legally required disclosures of any breach of the security, confidentiality or integrity of your unencrypted electronically stored "personal data" (as defined in applicable legislation or statutes on security breach notification) to you via email or (as permitted by law) conspicuous posting on the Site in the most expedient time possible and without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement; (ii) our legal obligations; or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system. If you have any questions about the security of your personal information, you can contact us at firstname.lastname@example.org.
(c) Links to Other Sites
Our Site contains links to other websites. If you choose to visit an advertiser by "clicking on" a banner ad or other type of advertisement, or click on another third party link, you will be directed to that third party's website. The fact that the Site permits you to link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other sites follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit.
(d) Our Policy Towards Children
The Site and use of the Program and Services are not directed to children under eighteen (18). We do not knowingly collect personal information from children under thirteen (13) through the Site, Program or Services. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she should contact us electronically at email@example.com. If we become aware that a child under thirteen (13) has provided us with personal information through the Site, Program or Services we will delete such information from our files.
(e) Information for Customer Users and Interested Site Visitors
(f) Social Media Features
(b) Additional information for European Union users
SurveyMonkey provides some of its services to users in the EU through SurveyMonkey Europe, located at 2 Shelbourne Buildings, Second Floor, Shelbourne Road, Dublin 4, Ireland.
"Personal data". For users located in the EU, references to "personal information" in this policy are equivalent to what is commonly referred to as "personal data" in the EU.
If you are a Customer User of one of our Vendors and would no longer like to be contacted by one of our Vendors that use our service, please contact the Vendor that you interact with directly. We may transfer personal data to companies that help us provide our service. Transfers to subsequent third parties are covered by the service agreements with our Vendors.
We will retain personal data we process on behalf of our Vendors for as long as needed to provide services to our Vendor. SurveyMonkey will retain this personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Accessing and correcting your personal data. You have the right to access and correct the personal information that SurveyMonkey holds about you. This right may be exercised by contacting customer support.
Additional information for Canadian users
Please read this article for information about the U.S. Patriot Act and how it affects the personal information of Canadian users.
Additional information for Japanese users
Additional information for Australian users
The personal information collected by us on behalf of a survey creator may include sensitive information. We will only use sensitive information for the purpose of storing and processing it on behalf of the survey creator. Sensitive information is defined in the Privacy Act 1988 (Cth) and includes information about you such as racial or ethnic origin, religious beliefs, political affiliation, sexual preferences and criminal records, as well as health and genetic information about you.
If you are dissatisfied with our handling of your complaint or do not agree with the resolution proposed by us, you may make a complaint to the Office of the Australian Information Commissioner (OAIC) by contacting the OAIC using the methods listed on their website at http://www.oaic.gov.au. Alternatively, you may request that we pass on the details of your complaint to the OAIC directly.
SurveyMonkey Inc., 101 Lytton Avenue, Palo Alto, CA 94301, USA, Attn: Privacy Department, or electronically at firstname.lastname@example.org.
SurveyMonkey Europe, 2 Shelbourne Buildings, Second Floor, Shelbourne Road, Dublin 4, Ireland Attn: Privacy Department, or electronically at email@example.com.
*Prior Privacy Policies are available upon request.