GDPR and LimeSurvey - Delete me link

More
8 months 2 weeks ago #165974 by davebostockgmail
davebostockgmail replied the topic: GDPR and LimeSurvey - Delete me link

holch wrote: On another note:

Scale : Last month we worked on a project for a major U.K. retailer and sent around 350,000 invites out to a survey hosted on LS .. to which we got around 20K completes ... and an additional 6K opt outs flagged (not sure if these would have been a delete request if the option was there) so even if there was say 20% of those that took the delete option this would mean 1200 emails to be delt with.

I found this very interesting and we always have questions here in the forum on how it scales. Unfortunately there is very little real life expierence with big sample sizes. Many market research surveys in the adhoc sector are a lot smaller.
Would you mind to share a little showcase about how Limesurvey worked for this project, how you hosted LS and how you guaranteed performance? But that would be something for another trhead. It would be nice if you could share a little bit about your experience with big samples.


Would be happy post on a showcase on here about this for others if they found it useful .. just tell me where you would like it and I will do that ...

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #165975 by holch
holch replied the topic: GDPR and LimeSurvey - Delete me link
Great! That is already a very good starting point for discussion.
[quote[The right to restrict processing: a cookie cutter question on the end screen that gives consent to process the data if it is not checked then that data is not included in any reports or exports[/quote]
Wouldn't it make more sense to have this question already at the beginning and just not continue if they do not agree? Why going through all the survey to just say: do not include me in the reports?

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #165977 by davebostockgmail
davebostockgmail replied the topic: GDPR and LimeSurvey - Delete me link

holch wrote: Great! That is already a very good starting point for discussion.
[quote[The right to restrict processing: a cookie cutter question on the end screen that gives consent to process the data if it is not checked then that data is not included in any reports or exports

Wouldn't it make more sense to have this question already at the beginning and just not continue if they do not agree? Why going through all the survey to just say: do not include me in the reports?[/quote]

This is where it gets tricky and I know others in the industry face this problem ... we are explicitly not allowed to refuse people the right to give data under the legislation ... i.e. we cannot exclude them ... but we have to offer them the ability to refuse processing where this processing is done on an automated basis (segmentation for example where an algorithm is used)

In our surveys we have started to have explicit consent questions added to the start of the survey ... but they also have to have the opportunity to refuse process so ....

Start - do you agree to share your thoughts etc. - Yes
Take survey and collect data
Normal process - end survey and use data based on consent collected at the start ....
If we started to put in a full explanation of how we will process this data and when at the start then we run the risk of the respondent bailing at that point ...

Our interpretation of the new legislation

Start - do you agree to share your thoughts etc. - Yes
Take survey and collect data
End of survey - Thank you for sharing your insights, this data will be run through a series of processes where we may group you with other like minded individuals for reporting purposes. This is an automatic process where none of your personally identifiable information will be reported out to our clients or any other 3rd party. Do you agree to this processing of your data ... Yes / No

By the time a respondent has gone through the survey and completed it we would expect a minimal refusal rate here so we feel as though this would be the better option.

It is all about transparency and we feel that this would comply to the letter of the regulation in this way.

Hope that makes sense?

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago - 8 months 2 weeks ago #165994 by jelo
jelo replied the topic: GDPR and LimeSurvey - Delete me link

holch wrote: The right to restrict processing: a cookie cutter question on the end screen that gives consent to process the data if it is not checked then that data is not included in any reports or exports

I thought that was the purpose of the privacy policy feature which is already implemented in LS 3.X.Y? You cannot continue without consent. The boxes still show the wrong text in 3.5.4.

Are you a student conducting a survey? If yes, tell me why you use LimeSurvey?
www.limesurvey.org/forum/development/116...y-you-use-limesurvey
Attachments:
Last Edit: 8 months 2 weeks ago by jelo.

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #165995 by jelo
jelo replied the topic: GDPR and LimeSurvey - Delete me link

Are you a student conducting a survey? If yes, tell me why you use LimeSurvey?
www.limesurvey.org/forum/development/116...y-you-use-limesurvey

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #166327 by phplist
phplist replied the topic: GDPR and LimeSurvey - Delete me link
Nobody has mentioned pseudonymization yet -- would that be an easier approach to solving some of these issues?

Open Source email marketing and analytics established in 2000. Available self-hosted, and with fully managed plans at phplist.com.

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #166384 by davebostockgmail
davebostockgmail replied the topic: GDPR and LimeSurvey - Delete me link

phplist wrote: Nobody has mentioned pseudonymization yet -- would that be an easier approach to solving some of these issues?



After the survey has closed then this would be possible with an additional field in the data as an internal reference # but it is not really possible before that time as you would need the actual email address to send out invites / reminders.

It is between the initial invite and close of survey that is important in this aspect as we would generally see request for opt out in the first hours/days of sending the invite email.

We generally keep surveys open for between 7 and 14 days dependent on sample size required and outgo size and we would send a reminder or 2 during this time period so would need the email address to do this.

Please Log in or Create an account to join the conversation.

More
8 months 2 weeks ago #166394 by jelo
jelo replied the topic: GDPR and LimeSurvey - Delete me link

phplist wrote: Nobody has mentioned pseudonymization yet -- would that be an easier approach to solving some of these issues?

I would expect that you need to do all the work in a manual way. I don't expect any tools inside LimeSurvey in the next months. Roadmap: manual.limesurvey.org/LimeSurvey_roadmap...eased_.28Feb_2018.29

Are you a student conducting a survey? If yes, tell me why you use LimeSurvey?
www.limesurvey.org/forum/development/116...y-you-use-limesurvey

Please Log in or Create an account to join the conversation.

More
6 months 3 weeks ago #168954 by evently
evently replied the topic: GDPR and LimeSurvey - Delete me link
Hi all,

as all of you I was looking into the GDPR regulations, and made a start on a plugin to, for now, allow the automatic viewing/deletion of Token data using a secure link in the invite/reminder mails.

Currently you can add the link to emails using a placeholder (@@@TOKENREMOVE@@@) and the plugin will parse this with a working link. When a user goes to that link he/she can see his token data and optionally remove it.

You can read more about it here:
medium.com/@evently/gdpr-plugin-f7e600219885

and download it here
github.com/evently-nl/LimeGDPR

It will definitely need more option/features to be completly gdpr compliant, but hoping for input from people with more knowledge on that to see if we can come up with a GDPR proof plugin (removal of actual responses for example). And then there's still the database encryption issue.)

I will also try to update another plugin I once wrote, that anonimizes token data after submitting their response: This might get a start on pseudo anonimity while still keeping the consumer friendly 'save data and continue later' with the same link option.

Anyway, looking forward to your input and hopefully it will help more people this week :)

Cheers,
Stefan

Please Log in or Create an account to join the conversation.

More
6 months 3 weeks ago #168970 by holch
holch replied the topic: GDPR and LimeSurvey - Delete me link

removal of actual responses for example

I am not a specialist on GDPR because it doesn't touch me this much, my targets are generally not in or from the EU. But of course it is very interesting for any market researcher. We all should already have had a high standard of data protection (at least in theory) before the GDPR.

However, I am wondering if deleting all answers to a questionnaire is actually necessary or if it is only necessary to delete personal data? Because what about anonymous surveys, where the results are not connectable with the responses anyway? You can't delete the survey responses there, because you don't know who they are from. If you delete the personal data from a non anonymous survey it is basically the same effect, isn't it?

I'm not a LimeSurvey GmbH member. I answer at the LimeSurvey forum in my spare time. No support via private message.
Some helpful links: Manual (EN) | Question Types | Workarounds

Please Log in or Create an account to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!