Technical questions about cookies and the "resume later" function for GDPR

Mehr
2 Wochen 4 Stunden her - 2 Wochen 4 Stunden her #173697 von nolten
nolten erstellte das Thema Technical questions about cookies and the "resume later" function for
Hello together,

we're conducting surveys with LimeSurvey as part of our current research project. To comply with the GDPR, I'm currently writing a privacy policy.
For this, I got a few technical questions about cookies and the "resume later" function our server admin could not answer me. I hope, this is the correct subforum for such questions?

Cookies:
1. How long are session cookies valid, so how much time do participants have to take breaks/finish a long page of questions without loading a new page (assuming the cookie refreshes when loading a new page)?

2. Does LS use other cookies than session cookies? If yes, which and how long are they stored/valid?


"Resume later":
3. As using the "resume later" function counts as "registration" of an "account", we need to include this option in the policy. It is also required to give the participants the chance to "change their account data". But, how does this work, where to find and how to change it?

4. How long are those "accounts" stored? Until first used? Until participant finishes the survey? What happens with the account if the participant does not resume the survey until it is closed - is it deleted or saved until the survey itself is deleted?


Only thing I found using the search function was for "resume later" , and the manual does not include technical information like this.

Thanks in advance!
Letzte Änderung: 2 Wochen 4 Stunden her von nolten.

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
2 Wochen 4 Stunden her #173699 von jelo
jelo antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
Some answers depending on the setup of your LimeSurvey server.
Where is LimeSurvey hosted?
And what version of LimeSurvey is used?

Are you a student conducting a survey? If yes, tell me why you use LimeSurvey?
www.limesurvey.org/forum/development/116...y-you-use-limesurvey

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
2 Wochen 3 Stunden her - 2 Wochen 3 Stunden her #173702 von nolten
nolten antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
LimeSurvey is hosted on a server of our university's IT center.

I'm sadly not quite sure about the currently used version on the productive server. I've asked our admin, but haven't got an answer yet (because of data privacy later I do not have access to the productive server myself).
On a test server that is not in active use yet we run Version 3.12.1+180616, but from what I remember the interface on the productive server looked a little different, so it could be a slightly older version.
I'll update as soon as I got a reply from our admin, but maybe that already helps a little?
Letzte Änderung: 2 Wochen 3 Stunden her von nolten.

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 6 Tage her #173724 von Joffm
Joffm antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
Hi,
only some remarks to your points 3 & 4.
There is no 'account' or 'registration'.
The participant just enters a password. This is absolutely free, like '123456' or '4€&aFgse&€3@&7'.
Only if he is afraid of suffering from Alzheimer disease he may enter an email address to get his password sent by email.
And this is according to the GDPR, because it is only used for this communication.

Now 4.
I am on a business trip, but I'll try. IMO this information should be deleted when the survey is deactivated.
But I am not really sure.
Joffm


Volunteers are not paid.
Not because they are worthless, but because they are priceless
Folgende Benutzer bedankten sich: nolten

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 6 Tage her #173726 von DenisChenu
DenisChenu antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
Except if you check "Set cookie to prevent repeated participation" : all cookies are session cookies. Then close your browser : nothing leave.
And more : it's internal cookies (just for technical usage) .

About resume later : else : all information are deleted when submit survey.

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .
Folgende Benutzer bedankten sich: tpartner, nolten

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 6 Tage her - 1 Woche 6 Tage her #173758 von nolten
nolten antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

Joffm schrieb: Hi,
only some remarks to your points 3 & 4.
There is no 'account' or 'registration'.
The participant just enters a password. This is absolutely free, like '123456' or '4€&aFgse&€3@&7'.
Only if he is afraid of suffering from Alzheimer disease he may enter an email address to get his password sent by email.
And this is according to the GDPR, because it is only used for this communication.

This is VERY interesting - we thought that by giving a (fictional) name and password, you automatically create an "account" (and therefore, are subject to the respective regulation), even if it does not include any data on the person itself.
If that's not the case, we could delete this whole section in our privacy policy, saving me lots of headaches... Question 4 would then become irrelevant, as this information would not count as personal data anymore and therefore needs no information on how long it is saved etc.

Are you sure about that? I would then just add a sentence in the section telling what data we collect about this function and probably be done with it.

DenisChenu schrieb: Except if you check "Set cookie to prevent repeated participation" : all cookies are session cookies. Then close your browser : nothing leave.
And more : it's internal cookies (just for technical usage) .

We do not have this function activated, so it's session cookies only. Great, that makes my life quite a bit easier!


Thank you both very much for your help!
Letzte Änderung: 1 Woche 6 Tage her von nolten.

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 6 Tage her #173762 von DenisChenu
DenisChenu antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
The major exception with LimeSurvey and GDPR/RGPD is
1: token … this is personnal information (email at minima)
2: set 'Save IP adress' : this one is awfull (i really dislike it), but more save complete IP adress : no way to save partial IP adress (like matomo ( matomo.org/gdpr/ ) ). And this don't show a warning to admin user …
3: Save "enter url" : this can be out of GDPR issue
4: and of course : personnal information inside surveys

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 5 Tage her #173779 von holch
holch antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

2: set 'Save IP adress' : this one is awfull (i really dislike it), but more save complete IP adress : no way to save partial IP adress (like matomo ( matomo.org/gdpr/ ) ). And this don't show a warning to admin user …


This can make sense, so I don't think it is a good idea to exclude it. I agree that it would be great to have the additional option to just save the IP particially. But if you inform your respondents at the beginning of the survey that you will store the IP and for how long, this should be OK as well.

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 5 Tage her #173802 von DenisChenu
DenisChenu antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

holch schrieb:

2: set 'Save IP adress' : this one is awfull (i really dislike it), but more save complete IP adress : no way to save partial IP adress (like matomo ( matomo.org/gdpr/ ) ). And this don't show a warning to admin user …


This can make sense, so I don't think it is a good idea to exclude it. I agree that it would be great to have the additional option to just save the IP particially. But if you inform your respondents at the beginning of the survey that you will store the IP and for how long, this should be OK as well.

Yes, but if a survey is set «not anonymous» : there are specific action done by LimeSurvey code (show the privacy.twig from template) , we don't have such systme for IP.
Then the information must be updated survey by survey
Maybe just add an empty twig saveipadress.twig file only addes if ip adress is saved in 1st page

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 5 Tage her #173827 von nolten
nolten antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

holch schrieb:

2: set 'Save IP adress' : this one is awfull (i really dislike it), but more save complete IP adress : no way to save partial IP adress (like matomo ( matomo.org/gdpr/ ) ). And this don't show a warning to admin user …

This can make sense, so I don't think it is a good idea to exclude it. I agree that it would be great to have the additional option to just save the IP particially. But if you inform your respondents at the beginning of the survey that you will store the IP and for how long, this should be OK as well.

As far as I know, the IP is only stored via logfiles (for 4 weeks), which we state in the policy - all other options should be deactivated. So this should probably be ok?


And does anyone else know something about the "resume later" function being some kind of registration or not, just to be sure?

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 4 Tage her #173835 von holch
holch antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

And does anyone else know something about the "resume later" function being some kind of registration or not, just to be sure?


I guess, this pretty much depends on the eye of the beholder. When is putting an email* and a password a registration, when not? *I know that the email is not necessary, but still. It is there and people can put it.

To be on the save side I would consider it a temporary registration, deleted after a certain time. But as I said, this depends very much on how the GDPR defines "registration".

If the survey is not extremely long, I would just not offer this option. I think this only really makes sense when the survey is pretty long.

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds
Folgende Benutzer bedankten sich: nolten

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 4 Tage her #173839 von DenisChenu
DenisChenu antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

nolten schrieb: As far as I know, the IP is only stored via logfiles (for 4 weeks), which we state in the policy - all other options should be deactivated. So this should probably be ok?

I spoke for LimeSurvey settings : manual.limesurvey.org/Notifications_%26_data

4 weeks, in France : we have this law : www.legifrance.gouv.fr/affichCode.do?cid...LEGITEXT000006070987 . We must keep log one year … but not more else we are out of this law : www.legifrance.gouv.fr/affichTexteArticl...LEGIARTI000006528131
:silly:

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .
Folgende Benutzer bedankten sich: nolten

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 4 Tage her - 1 Woche 4 Tage her #173840 von nolten
nolten antwortete auf das Thema: Technical questions about cookies and the "resume later" function for

holch schrieb: If the survey is not extremely long, I would just not offer this option. I think this only really makes sense when the survey is pretty long.

Sadly, it is - takes around 70-90 minutes to complete and includes a task that should be done on a larger screen than a mobile phone (which we point out in the invitation mail, but how many people really read that one?). Therefore, we want to give our participants the chance to stop and resume later, be it becaus eof time constraints or to switch to a device with larger screen (ideally a pc).

holch schrieb: I guess, this pretty much depends on the eye of the beholder. When is putting an email* and a password a registration, when not? *I know that the email is not necessary, but still. It is there and people can put it.

To be on the save side I would consider it a temporary registration, deleted after a certain time. But as I said, this depends very much on how the GDPR defines "registration".

If the email adress is not given, it appears to me that this "pseudo registration" includes no personal data and therefore should not be a problem, correct?
Because we already have the participants' email and their consent to use it for the purpose of contacting them (e.g. for the invitation mail) and matching their data from different surveys (longitudinal design) together.

I'm thinking about wether this could save us the trouble of putting the registration section in our policy (as they do not give us any additional/"new" personal data) - especially because I don't know how to comply to the regulation that users have the right to change their registration data. I have no clue if this is even possible, and, if it is, how.
Does anyone know this? If I'm able to complete that section with all neccessary information (possibility of changing is the last one missing), I'd probably include it then, just to be on the safe side.
Because sadly my research on definitions of "registration" led to no avail, which could've clarified whether this counts as registration or not...

DenisChenu schrieb: I spoke for LimeSurvey settings : manual.limesurvey.org/Notifications_%26_data

Ah, I see! I'm pretty sure those are all switched off in our survey (except for "may save and resume later", obviously), but I'm going to find out before uploading the policy and starting the survey.
Letzte Änderung: 1 Woche 4 Tage her von nolten.

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 4 Tage her #173857 von holch
holch antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
Wow, 70-90min is a lot. I assume you have a good relationship with those people or you pay them a lot of money to do this. Of course, in this case the save and resume makes sense.

However, if you invite them via email and use tokens, you could solve this via token as well. If they stop at a certain point and then come back, if you have made the right settings (I think you need to use "token based answer persistents" or what it is called), then they just click on the link again and will start from the last page they submitted.

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds
Folgende Benutzer bedankten sich: nolten

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Mehr
1 Woche 4 Tage her #173858 von nolten
nolten antwortete auf das Thema: Technical questions about cookies and the "resume later" function for
We do hope so - in the previous iteration of the project, this went actually pretty decent.

Hm, I haven't thought about using tokens, as I did not know what they are/do - but this sounds very useful. I'm going to ask our survey admin when he returns from holiday whether we use individual invitation links (which I guess is needed for this, otherwise it would not be possible to continue on another device). In that case, token based answers sound very helpful - if we do not open another pandora's box with this?

Bitte Anmelden oder Registrieren um an der Konversation teilzunehmen.

Jetzt loslegen!

Melden Sie sich jetzt an, und erstellen Sie in wenigen Minuten Ihre erste Umfrage.

Account einrichten

Abonnieren Sie unseren Newsletter

Abonnieren Sie unseren Newsletter für alle Neuigkeiten rund um LimeSurvey
captcha