A survey tool should provide the greatest possible protection of privacy and the highest level of data protection. That is why we made these issues a top priority when developing LamaPoll. This is precisely why many companies and organisations place their trust in us. Below, you can learn what you can rely on when using our tool and what you should consider when conducting employee surveys in compliance with data protection requirements.
Table of Contents
How do we justify the trust placed in us?
Our servers are certified (BS-7799-TÜV and DIN ISO 27001) and are all located within the Federal Republic of Germany. We align our systems and processes strictly with the German Federal Data Protection Act and the European General Data Protection Regulation (GDPR). We will, of course, also enter into a data processing agreement with you. More detailed information about security and data protection is available here:
Furthermore, our software has no interfaces to third-party providers. We do not analyse or use your data. You retain full control over it. We cannot understand the excessive data collection common among competing products: if you delete your results and email addresses from LamaPoll, they are permanently deleted.
Conducting an employee survey in compliance with data protection requirements
If a specific participant can be identified from their answers, the workplace survey involves the processing of personal data. If the answers can be linked to an individual, for example because they allow conclusions to be drawn about employees or managers, transferring the data to an external service provider generally constitutes processing on behalf of the controller. In this case, a data processing agreement pursuant to Article 28 of the EU General Data Protection Regulation (GDPR) must be concluded.
Important: By law, you must enter into a data processing agreement as soon as you upload email addresses to your LamaPoll address book.
Under data protection law, a survey is generally considered unproblematic only if it is anonymous. However, there are potential pitfalls: individuals can often be identified through cross-tabulation, the way in which questions are answered or the collection of metadata.
We therefore recommend exercising the utmost care when choosing the right provider. LamaPoll, for example, offers the highest level of data protection and is, of course, GDPR-compliant. Your data is stored exclusively on our own servers in high-security data centres within the Federal Republic of Germany. This cannot be guaranteed by providers based abroad, particularly those outside the EU.
The following points should be ensured and clearly communicated:
- Your company’s works council and data protection officer are involved in the survey project.
- The data collected relates exclusively to work.
- Access to the results — who, when and how — is clearly defined and binding.
- Every employee is clearly informed which data is available, when and where, who has access to it and in what form.
Please also refer to the guidance from the German Federal Commissioner for Data Protection and Freedom of Information: BfDI: Data processing.
Do not disclose your data to companies that operate their servers in the USA. There are virtually no data protection laws in the USA: companies comply with data protection requirements voluntarily — or not.
What is LamaPoll?
LamaPoll is a survey tool for creating employee surveys and measuring employee satisfaction. You can use it to create, conduct and analyse all types of employee survey. Create your employee survey in just a few steps, apply your organisation’s corporate design and invite employees conveniently by email or via your intranet. You can quickly gain insights that help improve employee satisfaction. You can register for our survey tool free of charge and immediately conduct surveys for up to 50 employees with no obligation. If you need more responses to your online employee survey questionnaire, simply choose one of our monthly plans. You can also use our employee survey questionnaire templates and examples.
