Privacy Notice – Self-Assessment

2. Data Controller

The controller within the meaning of the GDPR for the personal data processed as part of this self-assessment is:

Dr. Nick Stratemeyer – Psychometric Services
Rotdornweg 9
58093 Hagen
Germany

Contact: mail@psychometric-services.de

3. Technical Infrastructure and Hosting

Server Location

The platform is operated on servers provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. All servers are located in Germany. When you visit the website, server log files are automatically recorded (browser type, operating system, referrer URL, IP address, timestamp). This processing is carried out on the basis of Article 6(1)(f) GDPR (legitimate interest in the technically secure provision of the platform). A data processing agreement is in place with IONOS.

Email

For sending emails (confirmation and results emails), we use webgo GmbH, Heidenkampsweg 81, 20097 Hamburg, Germany. A data processing agreement is in place with webgo.

4. General Information

TLS Encryption

All data transmission is encrypted via HTTPS (TLS). This means that your entries cannot be read by third parties.

No Tracking Cookies

This platform does not use any tracking or marketing cookies. No analysis of your user behavior for advertising purposes takes place.

Technically Necessary Session Storage

To technically conduct the self-assessment, an entry is created in your browser's session storage. This is automatically deleted as soon as you close your browser.

Protection Against Misuse

To protect against automated mass requests and misuse, we employ technical measures (e.g., rate limiting). Your IP address is processed briefly for this purpose. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the security and availability of the service).

5. Conducting the Self-Assessment and Delivery of Results

Purpose and Legal Basis

You take the self-assessment in order to get to know the instrument and to receive a personal results report. The processing of your test responses and your email address for this purpose is carried out on the basis of Article 6(1)(b) GDPR (steps taken prior to entering into a contract, or measures taken at your request): Without this data, we cannot create and send you the report you requested.

Note: The instrument is designed for work-related questions and is not suitable for clinical diagnosis or the determination of health data. The report does not constitute a psychological or medical diagnosis.

Data Processed

Provided by you:

• Email address (for confirmation and delivery of the report)
• Your answers to the assessment questions

Recorded automatically:

• Timestamp of participation
• Internal participation ID (technical identifier)
• Anonymized IP address (last octet truncated) and browser type – solely in the consent record

Your email address is stored in encrypted form. In addition, a non-reversible check value (hash) is generated, which enables the handling of unsubscribe and deletion requests and is stored in records without the need to keep the address in plain text.

Confirmation of Your Email Address (Double Opt-In)

To ensure that the email address provided belongs to you, we send you a confirmation email with a confirmation link after you complete the self-assessment. Only after you click this link do we create your report and send it to you.

Provision of the Report

After your confirmation, we make the report available to you via a time-limited, secure download link. The report file is stored in encrypted form and is automatically deleted once the link expires.

Further Development of the Assessments

Test results may be used in anonymized form – that is, without any personal reference – for quality assurance and the further development of the assessments.

6. AI-Assisted Interpretation in the Report

Your report includes an automatically generated, narrative interpretation of your test scores, which is produced using an AI language model (provider: Anthropic PBC, San Francisco, USA). This interpretation is part of the results report you requested; the legal basis is therefore Article 6(1)(b) GDPR. The parts of your results report that were generated with the help of artificial intelligence are marked accordingly in the report.

Data minimization: Only your test scores without any personal reference are transmitted to the AI service – that is, not your email address and no other information that identifies you. The provider is unable to link these values to your person.

Processing in the USA: The provider processes the transmitted values in the United States. Since no information identifying you is transmitted, the transfer does not involve any traceable personal reference to you. The transmitted values are processed by the provider to generate the narrative feedback, stored for up to 30 days for abuse prevention purposes, and then automatically deleted; longer storage occurs only where required by law or necessary to pursue misuse. The provider does not use the data to train its AI models. In addition, a data processing agreement based on the EU Standard Contractual Clauses (Article 46(2)(c) GDPR) is in place with the provider.

Please note: The AI-assisted interpretation is an automatically generated, illustrative description. It is not a diagnostic, therapeutic, or otherwise binding statement about your person and does not replace professional advice.

7. Voluntary Consent to Marketing Communication

If you expressly wish, we will occasionally contact you by email about our psychometric assessments and related offerings. This processing is carried out solely on the basis of your voluntary consent (Article 6(1)(a) GDPR), which you grant via a separate, non-preselected option and which we confirm through the double opt-in procedure.

No tying: The delivery of your results report is independent of this consent. You will receive your report in any case, even if you do not consent to marketing communication.

Withdrawal at any time: You may withdraw this consent at any time with effect for the future – via the unsubscribe link in every email or informally by writing to mail@psychometric-services.de. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

8. Documentation of Your Confirmation and Consent

To fulfill our accountability obligations (Article 7(1) GDPR), we document:

• Time of submitting the form and of clicking the confirmation link
• Which options you selected (mandatory confirmation for report delivery and/or voluntary consent)
• Text of the confirmation or consent declaration displayed
• Version of this privacy notice at the time of confirmation
• Internal participation ID
• Anonymized IP address (last octet truncated) and browser type (user agent)

The IP address is processed only briefly to generate the anonymized entry and is not stored thereafter. The consent records are retained for three years in order to fulfill accountability obligations.

9. Retention Periods

• Test responses and report: up to 90 days after completion, then automatic deletion or anonymization.
• Email address for report delivery (without consent to marketing): up to 90 days after completion, then automatic deletion or anonymization.
• Unconfirmed requests (no confirmation click): up to 90 days after completion, then automatic deletion or anonymization.
• Email address for marketing purposes (only with consent): until you withdraw your consent.
• Consent records: three years.

In the event of a deletion request, your identifying data is removed. Any remaining test data can then no longer be attributed to any individual.

10. Your Rights

As a data subject, you have the following rights vis-à-vis us:

• Right of access to the data processed (Article 15 GDPR)
• Right to rectification of inaccurate data (Article 16 GDPR)
• Right to erasure of your data (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right to withdraw consent given (Article 7(3) GDPR)

To exercise these rights, an informal message to mail@psychometric-services.de is sufficient. To unsubscribe from marketing emails, you can also use the unsubscribe link in every email.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority – in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

For services offered in Germany, the supervisory authority of the relevant federal state is often responsible.