Data Protection and Security (for Clients and Testers)

We appreciate your interest in our website. The protection of your privacy is very important to us. In accordance with Art. 13 GDPR, in the following you will find detailed information about the processing of your data when you access and use our website and its functionalities.

§ 1 Responsible body and data protection officer

The responsible body for the data processing on the www.tester.reviews website, is:

Digital Century Management SRL

street Scolii 37d, Camera 3C

Bucharesti, 077015

[email protected]

§ 2 Data processing when accessing the website

In the case of informational use of the website, i.e., if you do not register or otherwise provide us with information, only the following personal data transmitted by your browser to our server will be processed without your intervention

your IP address,
date and time of access,
page/name of the requested file accessed,
amount of data transferred,
status information whether access was successful or not.

This data is stored to perform error analysis and to ensure the stability and security of the website, to evaluate system security and stability, to detect and prevent attacks on our website, and so forth. (Article 6 (1) (f) of the GDPR)

This data will be deleted after 365 days.

To provide access to our website, we have commissioned technical service providers, e.g. hosting service providers who, on our instructions, could gain access to your personal data or process them on our behalf (order processing according to Art. 28 GDPR).

§ 3 Google Fonts

We use fonts (“Google Fonts”) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, to make our website more attractive and customer-friendly. The legal basis for this is Art. 6, par. 1, sentence 1, lit. f GDPR.

When rendering these fonts on our homepage our homepage establishes a direct connection to the Google servers. This can lead to a transmission of the IP address, the date, the time of the request, the time zone difference to the Greenwich Mean Time; the content of the request (concrete page); the access status / HTTP status code; the data volumes transferred in each case; the website the request comes from; the browser; the operating system and its interface and the language as well as the version of the browser software. The extent to which Google stores or evaluates this data is not known to us. For details, please refer to Google’s privacy policy https://www.google.com/policies/privacy/

§ 4 Processing your data when registering as a Tester

Platform collects and processes further personal data when users register on the website. When you register as a Tester and become a Tester, the following information will be processed:

Surname and first name, email address, gender
Bank account, PayPal or Wise.com email address
Work history, quality of work (duration of work, rejection rate)
IP address, time/date of registration and/or user login and access

In addition, Platform creates profiles for individual users, which include data resulting from the contract relationship of Tester (e.g. address, tax information, etc.), as well as voluntary information provided by users regarding their qualifications, their training, their hobbies etc. This information is used to provide users within the platform with appropriate services. During the contractual relationship, data on the work history and quality of work are recorded.

Please note that we need your phone number and email address to create an account, as well as to inform you about suitable projects, changes in our terms of use, and other information about your contractual relationship.
The registration and profile data are stored separately and linked for billing purposes only.
The processing of this data is done in order to fulfill our contractual obligations towards you. Furthermore, Platform processes personal data in order to ensure the quality, to prevent repeated registrations, deregistrations or fraud (legitimate interest according to Art. 6 (1) f GDPR).

We will retain your information for as long as your account is active or as long as the storage of your information is required to provide our services, for the preservation of records, if necessary also for the purpose of fraud prevention, dispute resolution and enforcement of our agreements.

§ 5 Processing of your data when registering as a customer

If you commission Platform with a project as a customer, you will be required to provide the name, first name and email address of the contact person, whereby a functional email can also be entered here.
We process your data provided in the project request in order to process your request (as part of your consent, to fulfill the contract) and to track offers (legitimate interest – Art. 6 (1) lit. f GDPR),
We store data entered by you as long as it is necessary for the treatment of your concern, but for no longer than the legal retention period.

For our CRM, we use the cloud-based software solution offered by Salesforce. We have contractually ensured that our CRM database is hosted by Salesforce on servers located in the European Union. With regard to this data processing, we have signed a “Data Processing Addendum (DPA)” with Salesforce. This DPA includes the “EU Standard Contractual Clauses” (Art. 46 (2) lit. c GDPR). With this contract, Salesforce assures that the data will be processed based on our instructions and in accordance with the requirements of the General Data Protection Regulation. In addition, Salesforce has implemented “Binding Corporate Rules” in the company for compliance with data protection.

The data you provide upon registration (e.g., name, address, email address) is used by Platform exclusively to fulfill the contractual relationship with the user (e.g., invoicing, contact users, making bank transfers, etc.).

§ 6 Support/Ticket system

We use a service called “Freshdesk” for our Platform and customer support and to view FAQ (Frequently Asked Questions). Freshdesk is a support service tool provided by Freshworks Inc, 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066. When you open a support ticket via Freshdesk, you will be redirected to a separate page in our ticket system. The information you enter into our ticket system is transmitted to the Freshdesk servers. The server location is generally in the US, which means that a transmission of your data to the US cannot be ruled out. We have signed a data processing agreement (“Data Protection Addendum”) with Freshdesk to ensure that your data is processed in accordance with the provisions of the GDPR. The agreement includes the conclusion of the EU standard contractual clauses. You can view the agreement here: https://www.freshworks.com/data-processing-addendum/.

The entry of certain data (e-mail address, whether Tester yes/no and issue) is mandatory. The processing of this data is based on our legitimate interest (Art. 6 para. 1 lit f GDPR) to exclude spam mails as well as to process your request and to contact you afterwards. The submission of other information is voluntary. Your data will be stored for as long as is necessary for processing. A longer storage period may result from the request, e.g. because we have a legitimate interest in proof of processing or because legal storage periods (in particular §§ 238, 257 HGB) require this.

Freshdesk will continue to set cookies. By embedding the above-mentioned cookies, Freshdesk receives information about your browser, your hardware and software, your Internet service provider and your IP address. These cookies are technically necessary (see § 9 of the Privacy Policy). You can obtain further information regarding data protection at Freshdesk here: https://www.freshworks.com/privacy/.

§ 7 Data processing when contacting via mail or contact form including applications

If you contact us by email or via our contact form, we use the data you provide to process your request (within the scope of your consent, for the fulfillment of the contract, due to our legitimate interest in proof of communication- Art. 6 (1) lit. a, b and f GDPR.

Data entered by you is stored as long as is necessary for the treatment of your concern, but no longer than required by legal retention periods.

If you would like to send us an application, please use the email address provided for this purpose. Then we can guarantee that your application will be processed exclusively by persons appropriately authorized in our company. After receipt of your application only authorized persons will see it. If you receive a cancellation, we store your records for reasons of traceability (with regard to possible claims based on the General Equal Treatment Act) for a period of max. 6 months. If we keep your application for a longer period in order to refer you back to career prospects in our company at a later date, this will only be done if you give us your consent to do so (Art. 6 (1) a) of the GDPR ). You can revoke this consent at any time.

Data processing in the application process is based on your consent in accordance with. Art. 6 (1) lit. a GDPR or on the basis of § 26 FDPA-New (justification for employment) or regarding the longer storage due to our legitimate interest (Art. 6 (1) lit. GDPR).

§ 8 Newsletter subscription

You may subscribe to our newsletter. This newsletter provides you with information about our company, our products and services. If you wish to receive the newsletter, we will, in accordance with your consent (article 6 (1) lit a., GDPR), process the mandatory information required for the newsletter registration: your email address, surname and first name, as well as optional data as entered: Company, title, position and department. Furthermore, for reasons of proof (Art. 6 (1) as per F GDPR), we save the date and time of the successful registration as well as your IP address for the purpose of spam control.

Your details are stored in our CRM system Campaign Monitor. They are used only for sending the newsletter. By sending the newsletter, we use the services offered by the Campaign Monitor Pty Ltd. company. The server location is generally in the US, which means that a transmission of your data to the US cannot be ruled out. We have signed a “Data Protection Addendum” with Campaign Monitor Ltd. to ensure that your data is processed in accordance with the regulations of the GDPR. The agreement includes the conclusion of the EU standard contractual clauses.

More information about Campaign Monitor’s privacy policy can be found at https://www.campaignmonitor.com/policies/#privacy-policy.

You may unsubscribe from the newsletter at any time via a link in the newsletter tool. Your disclaimer will immediately erase your information unless you have filed it with us in a different context (such as an application) and may be subject to statutory retention requirements.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or tracking pixels that represent one-pixel image files stored on our website. For the analysis, we link data and the web beacons with your email address and an individual ID. The data mentioned in the previous sentence includes the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (concrete page); the access status / HTTP status code; the amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language, as well as the version of the browser software. The links included in the newsletter also contain this ID.

Data is collected exclusively pseudonymized, so the IDs are not linked to your other personal data. Any direct personal reference is excluded.

§ 9 Use of the comment function in the blog

If you leave a comment on the blog, your comment will be posted in the post after prior review, with your given username. We recommend using a pseudonym instead of your common name. The username and email address are required, all other information is optional. When you leave a comment, we will continue to save your IP address, which we will delete after 365 days. We store data to defend ourselves in cases of possible publication of illegal content against liability claims. We need your email address to contact you if a third party objected to your comment as unlawful. Legal bases are Art. 6 par. 1 sentence 1 lit. b and f GDPR. The comments will be reviewed before publication. We reserve the right to delete comments if they are objected to by third parties as being unlawful or classified as spam or inappropriate to the topic.

§ 10 Use of Cookies

Cookies are stored on your computer by a website you visit. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (here through us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They are designed to make the Internet offer more user-friendly and effective overall.

This website uses the following types of cookies, the scope and operation of which are explained below:

Transient Cookies
Transient cookies are automatically deleted when you close the browser. These include in particular, session cookies. Session cookies store a so-called session ID, with which various requests from your browser can be assigned to the mutual session. This permits your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent Cookies
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You may configure your browser setting according to your preferences. E.g. you may decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all the features of this site.

Legal basis, cookie banner The use of some cookies is technically necessary to display our website and to ensure the website’s stability and security (Art. 6 para. 1 p. 1 lit. f GDPR).

Furthermore, we use cookies as part of the tracking tools described below. When you visit our site for the first time, you will be asked via our cookie banner to make a selection as to which cookies will be used for marketing purposes based on your visit to our site. The activation of the selection you make requires the use of a cookie, which is stored on your terminal device for a period of one year, unless you delete it beforehand by changing your browser settings. The legal basis for the use of these cookies is our legitimate interest (Art. 6 (1) lit f. GDPR) to provide evidence of the cookie selection you have made.

If you consent to the use of further cookies for marketing purposes via the cookie banner, the processing of your personal data is based on your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time by clicking on the “Cookie settings” button (footer of our page, next to Imprint).

§ 11 Use of Google Analytics & Google Firebase

§ 11.1 Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymzation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and Internet usage to the website operator.

(2) As part of Google Analytics the IP address transmitted by your browser will not be combined with any other data held by Google.

(3) You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed in an abbreviated form, any direct linkage to persons is excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.

(5) We use Google Analytics to analyze and regularly improve the use of our website. By using these statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which Personal Information is transferred to the U.S., Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 par. 1 sentence 1 lit. f GDPR.

(6) The provider is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. We have signed agreements regarding data processing. Based on these agreements, Google ensures that they will process the data in accordance with the General Data Protection Regulation and guarantee the protection of the rights of the data subject. A possible transfer of data to the US is based on the “EU Standard Contractual Clauses” (Art. 46 (2) lit. c GDPR).

Further information can be accessed at: https://www.google.com/analytics/terms/us.html;
Overview of data protection: http://www.google.com/intl/en/analytics/learn/privacy.html as well as
the data protection statement: https://policies.google.com/privacy

§ 11.2 Google Firebase (only when using the app)

Our app uses the technology of Google Firebase (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”). Firebase is part of the Google Cloud Platform and offers a real-time database as well as the following services:

Firebase Analytics and Google Analytics enable the analysis of the use of our offer. Information regarding the use of our app is collected, transmitted to Google and stored there. Google uses the advertising ID of the end device for this purpose. Google will use this information to anonymously evaluate the use of our app and to provide us with further services associated with the use of apps. In the device settings, you can restrict the use of the advertising ID (iOS: Data protection/ advertising/ No ad tracking; Android: Account/ Google/ Ads).

Examples of information about the use of the app
Job list viewed, job accepted, job discarded, job successfully transferred, error when transferring the job or other functions of the app, device information (manufacturer, model, operating system, operating system version).

Firebase Crash Reporting serves the stability and improvement of the app. It collects information about the device used and the use of our app (for example, the timestamp when the app started and when the crash occurred), which allows us to diagnose and resolve problems.

Firebase Performance
Firebase Performance Monitoring is a service that gives us insight into the features of our app. We use the Performance Monitoring SDK to collect performance data from our app and to check and analyze this data. This data helps us to understand where and when our app’s performance can be improved.

Dynamic Links
By using Dynamic Links, the users of our app get the best possible experience for the platform on which they open a link from our system. When a user opens a Dynamic Link under iOS or Android, they can be redirected directly to the linked content in your native app. When a user opens the same Dynamic Link in a desktop browser, they can be redirected to the appropriate content on your website. In addition, Dynamic Links work for app installations: If a user opens a Dynamic Link under iOS or Android and has not installed your app, the user may be prompted to install it. After installation, your app will launch and access the link.

Storage duration of data in Firebase: The data is deleted after the user has been inactive for two months.

Supplement to the legal basis:
The legal basis for the use of the above tools is Art. 6 (1) lit. f GDPR (General Data Protection Regulation). We use the above-mentioned tools to analyze the use of our app and to improve the user comfort according to the use as well as to guarantee the stability of the systems and to carry out troubleshooting. The data will not be processed for advertising purposes.

Provider of the above services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”). We have signed agreements regarding data processing. Based on these agreements, Google ensures that they will process the data in accordance with the General Data Protection Regulation and guarantee the protection of the rights of the data subject. A possible transfer of data to the US is based on the “EU Standard Contractual Clauses” (Art. 46 (2) lit. c GDPR).

§ 12 Use of the Google Tag Manager

We use Google Tag Manager. This is a program code that is built into the programming of the homepage. Through this interface, programs and services from Google, which are integrated into the homepage, can be controlled centrally. This ensures the security and optimization of our homepage. The legal basis for this is Art. 6 (1) lit a GDPR.

According to Google, this program code does not collect any personal information. However, it is conceivable that the following data can be transmitted through this interface: your IP address; the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (concrete page); the access status / HTTP status code; the amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software. For details, please refer to the following privacy policy: https://www.google.com/tagmanager/use-policy.html

Provider of the above services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (“Google”). For the personal data transferred to the USA, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

§ 13 Simplified Linkage: Xing, LinkedIn, Slideshare, Crunchbase, Facebook, and Twitter

Our website offers a link to the social networks (supplement). By clicking on the link, you will be connected to the respective corporate identity of Platform in the relevant social network. We do not have any information regarding the data collected by the operator of the network, if you are linked from our site to its page. We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing, the retention periods. We also have no information regarding how to delete the data collected by the provider. According to our knowledge, we inform you as follows:

Joint responsibility and legal basis
As operators of these company websites, we jointly process personal data with the respective provider of the social network (joint responsibility pursuant to Art. 26 GDPR). By creating and publishing our company presences, we have accepted the terms of use of the respective social network, which regulate the conditions for the use of the site and the resulting data processing.

The legal basis for data processing is our legitimate interest (Art. 6 (1) lit. f GDPR) in presenting our company in standard communication media and offering applicants, interested parties, Testers, customers and other persons a form of communication with our company of their preference, which is customary in this day and age. We would like to point out that any use of social media on your part, in particular interactions with the networks such as posting and sharing, is at your own responsibility and that you can alternatively contact us via the contact form on the website or by email/letter/phone.

Data processing while visiting one of our company presences in the social networks.
According to our state of knowledge, we inform you as follows about the data processing that arises from the use of our presences on social media.

When you visit one of our social network presences, the social network provider receives information about you, your browsing and usage behavior, your interactions and your respective location by collecting your IP address and using cookies, pixels and web beacons. The provider of the social network builds a user profile based on this information. We cannot exclude that data stored in the user profiles is stored on multiple devices and/or that the user profile is linked to your data stored in the network.

Social networks use the information about you collected in this way to compile statistics about the use and user structure of the network and to place interest-based advertising within and outside the network. The advertising models of social networks also involve the transmission of data about your usage behavior by the social networks to third parties (advertising partners) outside the network or the receipt of such data about your browsing/usage behavior from outside the network. Social networks provide advertisers with anonymized statistical data with their offers (e.g. “Facebook Insights”), e.g. information on page views, activities, proportion of men/women, professional position, company sector, and much more (see www.facebook.com/iq/tools-resources/audience-insights). We have no influence on the data processing that takes place for this purpose, cannot prevent it, and are not given access to the underlying data.

We use these offers to better understand the structure of our users and their interests and to design our site accordingly. Furthermore, this enables both us and the social network providers to better direct advertising because we obtain information about the demographic, geographic distribution or gender of the users, for example. We can thus identify trends among our users from the statistics and provide them with more relevant content. When using the services, data is transferred to the US.

Your rights as a data subject
Based on the terms of use, which we accepted when creating our company websites, you can contact the respective provider of the social network regarding your rights as a data subject to information, objection, correction, restriction of processing, transferability and deletion, as only this provider has access to your data.

Information on the data protection on the part of the providers can be found here:

Privacy Policy LinkedIn
http://www.linkedin.com/legal/privacy-policy.

Privacy Policy Xing
http://www.xing.com/privacy

Privacy Policy Slideshare
https://www.linkedin.com/legal/privacy-policy

Privacy Policy Crunchbase
https://about.crunchbase.com/terms-of-service/privacy-policy/

Privacy Policy Facebook
http://www.facebook.com/policy.php; further information about the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.

Privacy Policy Twitter
https://twitter.com/privacy.

§ 14 Embedding of YouTube videos

We have included YouTube videos as part of our online services; these are stored on http://www.YouTube.com and playable from our website.

Embedding of the videos takes place with the aid of the so-called two-click solution or in the extended data protection mode. In other words, when you visit our site, no personally identifiable information will be passed on to YouTube. YouTube will receive the information that you have accessed the corresponding bottom of our website only if you activate the video with a click. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (concrete page); the access status / HTTP status code; the amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. This type of evaluation is done (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have the right to object to the creation of these User Profiles, and you must be directed to YouTube to use them.

For more information on the purpose and scope of your data collection and processing through YouTube, please read the privacy policy. You’ll also get more information about your rights and privacy settings here: https://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the U.S.

§ 15 Use of external Captcha

We use the Google reCaptcha program from Google Inc. The purpose of the program is to distinguish between natural persons and automated and automated processing. We need this distinction to prevent misuse of the content through automated processing. The legal basis for this is Art. 6 par. 1 sentence 1 lit. f GDPR. Data is forwarded to Google when the site visitor uses reCaptcha. This data includes the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (concrete page); the access status / HTTP status code; the amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software.

Google will truncate your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the U.S. and shortened there in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your use of this service. The IP address sent by your browser as part of reCaptcha will not be merged with other data provided by Google. This data is subject to the deviating privacy policies of Google. For more information about Google’s privacy policy, please visit:
https://policies.google.com/privacy

§ 16 Your rights as a user

As a rule, you have the following rights regarding the functions of our web offer and the purposes of data processing described in the section “Information on data processing”:

Right to information (Article 15 GDPR)

We must inform you if we are processing personal information about you. In such processing, we must also explain the purposes for which processing takes place, which categories of personal data are processed, to whom data may be transmitted and for what period the data is stored.

Corrigendum (Article 16 GDPR), opposition (Article 21 GDPR), limitation of processing (Article 18 GDPR)

If you find that we process personal information that is incorrect or incomplete, then you may, of course, request a correction. Likewise, you may, for special reasons, object to the processing and, as far as it is justified, require the restriction of processing

Deletion (Article 17 GDPR) and data portability (Article 20 GDPR)

In the event that we have processed personal data despite the fact that processing is unfounded or they have been processed after elimination of the purpose, you can request their deletion. Please note that a deletion may not always be possible due to the existence of legal proof / retention obligations. You also have the right to receive all information that you have provided to us in a structured, common and machine-readable format.

You can avail yourself of your privacy rights at any time without incurring any expense. Please use the following contact form for your inquiry: [email protected]

Right of appeal to a supervisory authority

You have the right to contact the Data Protection Supervisor for privacy and a complaint. The authority responsible is:
Digital Century Management SRL, Strada Episcopiei Nr6, camera 1, modul 3, Etaj 5, Ap 12, Sector 1, Zip 010292, Bucharesti
Email: [email protected]

Version: 1^st of January, 2022

Privacy Policy