Privacy & Cookie Policy
On-Qual is committed to complete transparency in the processing of your personal information, and to the comprehensive protection of your privacy
The English version is provided for convenience only and is not legally valid. In case of conflict between the French version and the English translation, the French version will control.
Context
“GDPR” AND “PD”
Our privacy policy is part of a legal context marked by the General Data Protection Regulation (GDPR) applicable since 25 May 2018 and the amended French Data Protection Act of 6 January 1978.
This regulation specifies that Personal Data (“PD” or “personal information”) is any information relating to an identified or identifiable natural person. In other words, a piece of data - whatever its nature - becomes “PD” as soon as a link can be made between this data and an individual (identified or identifiable).
Two types of “PD” can be distinguished:
- information that makes it possible to identify an individual directly (e.g. their first and last names) or indirectly (e.g. their identifier on a website); this information is then considered to be “nominative”;
- any other information that is not “nominative” and does not make it possible to identify an individual, but which is associated with “nominative” information that makes it possible to identify them (e.g. a review that an Internet user leaves on a site is not “PD” on its own, but it becomes such when it is recorded in a file with their identifier; the latter often makes it possible to link their review to their e-mail address, or even their first and last names).
There is a lot of “nominative” information that can be used to identify an individual. Apart from their first and last names, it includes: their login ID on a website, their e-mail address, their telephone number or their IP address. Sometimes, it is even the combination of several pieces of information that makes it possible to make them “nominative” and therefore to identify the person, such as, for example, their date of birth (DD/MM/YYYY) combined with their postal code of residence.
Furthermore, data collected from professionals (e.g. clients, prospects, suppliers, partners, etc.) are also considered as “PD” under the GDPR, as long as they relate to a natural person (an individual) and not to a legal person (a company).
In short, only fully anonymised information that cannot be traced back to an identified or identifiable individual - even indirectly from an identifier - does not constitute “PD”.
OUR EXPERTISE IN DATA COLLECTION
MIS Group, owner and publisher of our On-Qual solution (available at on-qual.com), has specialised in data collection for market research and scientific purposes since 2001.
For more than 20 years, the MIS Group has been assisting large national and international companies, small businesses, research and consultancy firms, public institutions and universities/business schools with their research.
For more than 20 years, the MIS Group has been assisting large national and international companies, small businesses, research and consultancy firms, public institutions and universities/business schools with their research.
Our expertise in data collection is therefore widely recognised.About our expertise
OUR COMMITMENTS
The reliability of the data we collect, its confidentiality and protection are our priorities.
It is fundamental for us to implement and maintain all the technical and organisational measures necessary to guarantee the reliability, confidentiality and protection of data, particularly in order to maintain a trusting and lasting relationship with all our users: our clients and the participants in our studies (external participants and members of our panel).
In addition, we are members of the international association ESOMAR, which aims to promote good practices among market research professionals. ESOMAR has therefore established an international code of ethical practice, which we are committed to respecting scrupulously: the ICC/ESOMAR Code.
Finally, in order to be as transparent as possible with our users about how we use their data, we have drawn up this privacy and cookies policy. It defines:
- all personal data (PD) that we collect from our users, from our On-Qual solution;
- the reasons (purposes) for which we collect the data;
- the recipients of this data;
- as well as all the technical and organisational measures we have taken to guarantee the confidentiality and protection of this data.
Information collected, legal basis and purposes
TYPES OF USERS
There are 3 user profiles on our On-Qual solution:
- The hosts: U1
- The spectators: U2
- The participants: U3
ABOUT THE HOSTS (U1)
The users who control the platforms (projects), including the creation and hosting of exercises such as discussions, chats, questionnaires and video-conferences, are considered “Hosts”.
Click to read more details
U1.1. Information recorded by the On-Qual Administrator
Only the On-Qual Administrator (MIS Group) is able to create "platforms" (projects) on On-Qual, and to register hosts on these platforms.
As a host on a "platform" (project), the information recorded by the On-Qual Administrator is as follows:
- your e-mail address;
- your first name;
- your last name;
- your On-Qual Visio login ID (optional);
- your On-Qual Visio login ID (optional);
- the name of the platform, and the associated access URL link;
- the start and end dates of the platform.
In addition, your e-mail address is used as a login ID to the platform.
In addition, your e-mail address is used as a login ID to the platform.
As a host, once you have been registered on the platform by the On-Qual Administrator, you will receive an email with a link to create your password.
The password you choose must be strong:
- at least 8 characters
- uppercase and lowercase letters
- figures
- special characters
U1.2. Information collected from the “My Profile” form
Once connected to the platform, in the "Profile" area, you will find a form containing some of the information recorded by the On-Qual Administrator:
- your e-mail address (cannot be changed);
- your first name (can be changed);
- your last name (can be changed);
You can also use this form to:
- set your time zone.
U1.3. Information collected from the Dashboard and Exercises
In addition to the information recorded by the On-Qual Administrator, we collect declarative information from the Dashboard and the exercises (e.g.: Individual discussion, Group discussion, Livechat, Questionnaire, Visio, etc.):
- Your messages in the chats integrated to the Dashboard and the Video-conference;
- Your messages (and media) in the discussion exercises and chats;
- Your information (images and sounds) recorded during the video conference exercises.
U1.4. Session information
As a host, in addition to the information recorded by the On-Qual Administrator or entered by you, we automatically collect session information based on legitimate interest:
LOGIN
- the dates and times of your logins to the platform;
- the IP address(es) used when you log in to the platform;
- the equipment used during your logins to the platform: Medium (PC, tablet, smartphone) and Internet Browser information;
ACTIVITY
- the dates and times of your messages in the chats integrated into the Dashboard and the Video-conference;
- the dates and times of your messages/participations in discussions and chats;
- the start and end dates and times of your video-conferences.
All your session information is kept in a “Login History" and in an "Activity History" on the
platform, for the service life of the platform.
The platform, and all associated information, are deleted by default 3
months after the end date of the project recorded by the On-Qual Administrator.
However, you may request by e-mail to the On-Qual Administrator to extend the retention
period of this information.
ABOUT THE SPECTATORS (U2)
Users who are added to platforms (projects) by hosts, in order to observe activity on them and especially on exercises (discussions, chats, answers to questionnaires and video-conferences), are considered as "Spectators".
Click to read more details
U2.1. Information recorded by the host
As a spectator, when a host registers you on a “platform” (project), the information recorded by the host based on the “Spectator List” section is as follows:
- your e-mail address*;
- your title*;
- your first name*;
- your last name*;
- your photo (optional);
- your company;
- your time zone.
All the information followed by * is required, and must be entered by the host to validate
your registration on the relevant platform.
In addition, your e-mail address is used as a login ID to the platform.
A spectator logs in to the platform using a login ID (e-mail address) and password.
As a viewer, once you have been registered on the platform by the host, you will receive a link by e-mail to create your password.
The password you choose must be strong:
- at least 8 characters
- uppercase and lowercase letters
- figures
- special characters
U2.2. Information collected from the “My Profile” form
Once logged in to the platform, in the "Profile" area, you will find a form containing some of the information recorded by the host:
- your e-mail address (cannot be changed);
- your first name (can be changed);
- your last name (can be changed).
You can also use this form to:
- set your time zone.
U2.3. Information collected from the Dashboard and Exercises
As with the hosts, we collect declarative information from the spectators, which is entered into the Dashboard and the exercises (Visio):
- Your messages in the chats integrated into the Dashboard and the Video-conference.
U2.4. Session information
As with hosts, we automatically collect the session information from spectators on a legitimate interest basis:
LOGIN
- the dates and times of your logins to the platform;
- the IP address(es) used when you log in to the platform;
- the equipment used during your logins to the platform: Medium (PC, tablet, smartphone) and web browser information
ACTIVITY
- the dates and times of your messages in the chats integrated into the Dashboard and the Video-conference.
All your session information is kept in a “Login History" and in an "Activity History" on the platform, for the service life of the platform.
ABOUT THE PARTICIPANTS (U3)
Users who are added to platforms (projects) by hosts, in order to participate in exercises (participate in discussions and chats, answer questionnaires and participate in video-conferences), are considered as "Participants".
Click to read more details
U3.1. Information recorded by the host
As a participant, when you are registered on a “platform” (project) by a host, the information recorded by the host in the “Participants List” section is as follows:
- your e-mail address*;
- your access code*;
- your title*;
- your first name*;
- your last name*;
- your age;
- your post code;
- your city;
- your profession;
- the target(s) in which the host has classified you;
- your time zone.
All the information followed by * is required, and must be entered by the host to validate
your registration on the relevant platform.
In addition, your e-mail address and access
code are used as login IDs to log in to the platform.
U3.2. Information collected from the “My Profile” form
Once logged in to the platform, in the "Profile" area, you will find a form containing some of the information recorded by the host:
- your e-mail address (cannot be changed);
- your first name (can be changed);
- votre nom (modifiable) ;
- your photo (optional and editable)
U3.3. Information collected from the Dashboard and Exercises
In addition to the information recorded by the host, we collect declarative information from the Dashboard and the exercises (e.g.: Individual discussion, Group discussion, Livechat, Questionnaire, Visio, etc.):
- Your messages in the chats integrated to the Dashboard and the Video-conference;
- Your messages (and media) in the discussion exercises and chats;
- Your answers to the questionnaire exercises;
- Your information (images and sounds) recorded during the video conference exercises.
Please note:we (MIS Group) are not responsible for the collection of personal information from conversations/questions in chats, discussions, questionnaires and video-conferences. These are spaces reserved for the host and the participants, in which written and/or video exchanges are made freely at the initiative of the host without moderation or control on our part.
However, if you consider that the host, through their questions, risks infringing on the protection of your privacy, you can let us know by contacting us by e-mail at: dpo@misgroup.io
U3.4. Session information
In addition to the information recorded by the host and the information entered by you on the forms and exercises, we automatically collect session information on a legitimate interest basis:
LOGIN
- the dates and times of your logins to the platform;
- the IP address(es) used when you log in to the platform;
- the equipment used during your logins to the platform: Medium (PC, tablet, smartphone) and Internet Browser information;
ACTIVITY
- the dates and times of your messages in the chats integrated into the Dashboard and the Video-conference;
- the dates and times of your messages/participations in the exercises (dates and times of your messages in the discussion and chat exercises, and dates and times of your answers to the questionnaire exercises);
- the start and end dates and times of the video-conferences in which you participate.
All your session information is kept in a “Login History" and in an "Activity History" on the platform, for the service life of the platform.
SUMMARY
In the table below, we detail all the information we collect from all our users, as well as:
- The legal basis for the collection of this information;
- The purposes of this information;
- The recipients of this information;
- The rights of access and updating of this information by the users concerned.
| Information collected | Legal basis | Basis Purposes | Recipients | Rights of access and updating of information | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
The table above exhaustively lists the information collected at our initiative and for which we act as the Data Controller with regard to the GDPR (see below for the distribution of roles, in the “Responsibilities” section). The amount of this information is kept to a minimum.
As for the information collected on the initiative of the hosts, from the Dashboards and Exercises they create and host on the platforms, we cannot anticipate them and therefore list them in detail. It is the hosts themselves who act as the Data Controllers for this under the GDPR (see below for the distribution of roles in the “Responsibilities” section).
Retention and deletion of information
In the table below, we detail all the information we collect from all our users, as well as:
- The place where we host this information;
- How long we keep this information;
- The right of the data subjects to have this information deleted.
| Information collected | Hosting | Retention period | Right to deletion of information | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
All the information listed above and collected at our initiative is hosted in France, on secure OVH servers. The company OVH acts as a data processor for our website, as part of its outsourced data hosting activity:
OVH
French SASU (single-member simplified joint stock company) with a capital of €10,174,560
Registered office:
2 rue Kellermann
59100 Roubaix
Lille Companies Register 424 761 419 00045
APE 2620Z
In addition, access to all of our OVH servers, as well as to all of the databases and files they contain, is limited to MIS Group personnel who need to process them.
For example: only personnel assigned to the role of On-Qual Administrator, and the IT department personnel working at MIS Group on behalf of our On-Qual solution, have access to information recorded by hosts and information collected from their platforms (from spectators and participants).
However, as a reminder, hosts may export all the information they have collected from the exercises they have created and hosted outside our On-Qual solution. Where applicable, they are required to inform the participants of this in advance, to specify how long the data will be retained and what security measures have been taken to guarantee their confidentiality and protection: secure hosting of the data, limiting access to the data, etc.
Exercising your rights
REMINDERS
About the hosts:
If you run one or more platforms on our On-Qual solution, you can exercise your right to access, update and delete your information at any time:
- or directly from the "Profile" form (for part of this information);
- or by contacting the On-Qual Administrator.
If you are not in contact with a person at MIS Group who is assigned to the role of On-Qual Administrator, we invite you to send an e-mail to our Data Protection Officer (DPO MIS Group), to exercise your rights, at this address: dpo@misgroup.io
About the spectators and participants:
If you are a spectatpr or participant of one or more platforms on our On-Qual solution, you can exercise your right to access, update and delete your information at any time:
- or directly from the "Profile" form (for part of this information);
- or by contacting the host of the platform concerned.
FURTHER INFORMATION AND COMPLAINTS
If you have any questions about exercising your rights to access, update, delete and port your data, please send an e-mail to our Data Protection Officer (DPO MIS Group) at the following address: dpo@misgroup.io
We undertake to reply to you as soon as possible and within 1 month at most.
If you feel that we are not responding correctly to your request and/or that we are not respecting your rights, you can file a complaint with the CNIL (French data protection authority) using this form: cnil.fr/en/contact-us
Lastly, for further information on your rights, you can also consult the following link on the CNIL website: cnil.fr/en
Responsibilities
GENERAL INFORMATION
If you are the host of one or more platforms on our On-Qual solution, you (and your Company) act as the “Controller” according to the distribution of roles defined by the General Data Protection Regulation (GDPR) in the following cases:
- you are the Controller for the information you enter when registering spectators and participants on the relevant platform, and must therefore comply with your legal obligations with regard to the processing of this information vis-à-vis spectators and participants;
- you are the Controller of personal information collected on the relevant platform from conversations/questions in chats, discussions, questionnaires and video-conferences, and must therefore comply with your legal obligations with regard to the processing of this information vis-à-vis spectators and participants;
On-Qual (MIS Group) represents the subcontractor here.
On the other hand, On-Qual (MIS Group) represents the Controller for the information we record (via our On-Qual Administrator) concerning the hosts, and the login and activity information of the various users automatically collected on our solution (session information).
SUMMARY
| Information collected | Data Controller | Data Processors | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Cookies
GENERAL INFORMATION
A cookie is a text file placed temporarily in the memory of your Internet browser. Cookies cannot run programs or introduce viruses to your computer or phone. They are uniquely assigned to you and can only be read by a web server of the domain that deposited them.
The use of cookies is extremely limited on our website on-qual.com, as the MIS Group only uses this website for market research and scientific purposes. Under no circumstances is our website on-qual.com used for advertising purposes or for selling prospecting files, for example.
More specifically, our website on-qual.com
only uses a technical cookie (PHPSESSID) and third-party audience measurement cookies (Google
Analytics) that are necessary for its operation and that do not require your
consent.
However, you can technically block these cookies by using the settings in your Internet browser.
TECHNICAL COOKIE
| Entity depositing the cookie | Purpose of the cookie | Consent before depositing the cookie |
|---|---|---|
|
On-Qual / MIS Group (PHPSESSID) |
Functional: optimise your browsing on the site on-qual.com, by retaining your information and preferences from one page to the next. |
Not requested: technical cookies do not require consent. The PHPSESSID cookie is kept for only as long as you browse the site (retention period: Session). |
AUDIENCE MEASUREMENT COOKIES
| Entity depositing the cookie | Purpose of the cookie | Consent before depositing the cookie |
|---|---|---|
|
Google Analytics
(_ga, _gat, _gid) |
Audience measurement: to generate statistics related to your browsing on the site on-qual.com which will then be analysed in order to understand and improve your use of the site. |
Not requested: audience measurement cookies are allowed by default on
this site as they are configured to collect information anonymously
with a lifetime of 13 months:
cnil.fr/en
As a reminder, you can block these cookies technically by means of your browser settings. |
Contact
If you have any questions about this Privacy and Cookie Policy, please contact our Data Protection Officer (DPO MIS Group) at this address: dpo@misgroup.io
Changes to this policy
This version of our Privacy and Cookie Policy was updated on 7 April 2023.
We reserve the right to modify it, but we undertake to keep you systematically informed of these modifications, so that you can take note of them before continuing your use of our site (platform and exercices).
Legal representative: Mr Nicolas KELLER
Responsible for the drafting (in French): Mr. Michaël
SAULNIER
Responsible for the translation (in English): TRADUTEC
“Host” session information (U1)
X
- Dates and times of logins to the platform
- IP address(es) used when logging in to the platform
- Equipment used when logging in to the platform (Medium and Internet Browser information)
- Dates and times of messages in the Dashboard and Video-conference chats
- Dates and times of participation in exercises (dates and times of messages in chat and discussion exercises)
“Spectator” session information (U2)
X
- Dates and times of logins to the platform
- IP address(es) used when logging in to the platform
- Equipment used when logging in to the platform (Medium and Internet Browser information)
- Dates and times of messages in the Dashboard and Video-conference chats
“Participant” session information (U3)
X
- Dates and times of logins to the platform
- IP address(es) used when logging in to the platform
- Equipment used when logging in to the platform (Medium and Internet Browser information)
- Dates and times of messages in the Dashboard and Video-conference chats
- Dates and times of participation in the exercises (dates and times of messages in the discussion and chat exercises, and dates and times of answers to the “Questionnaire” exercises)