Privacy policy

1. Overview

This policy explains which personal data is processed when you visit survkit.com, for what purpose and on which legal basis. Personal data is any data that can identify you personally.

Controller

IWOP GmbH
Albert-Einstein-Straße 1
49076 Osnabrück, Germany
Represented by: Philipp Moritz Hund, Managing Director
Phone: +49 541 343710-50
E-mail: info@iwop.eu

Data protection officer

TopZert GmbH, Heiko Beemers
Stader Landstr. 27a, 21762 Otterndorf, Germany
Phone: +49 4751 999 54 69
E-mail: datenschutz@topzert.eu

How we collect data

Some data you give us yourself, for example through the enquiry form. Other data is collected automatically when you load a page, mainly technical data such as browser, operating system and time of access. Statistics and marketing services only run if you have consented in the cookie dialog.

2. Hosting

survkit.com is hosted by an external provider. Personal data collected on this website is stored on that provider's servers: IP addresses, enquiries, meta and communication data, page views and other data generated through the website.

We use the hosting provider to fulfil contracts with prospective and existing customers (Art. 6(1)(b) GDPR) and in our legitimate interest in a secure, fast and efficient delivery of our website by a professional provider (Art. 6(1)(f) GDPR). The provider processes your data only as far as necessary to deliver its service and follows our instructions. A data processing agreement is in place.

3. Your rights

You have the right to obtain, free of charge, information about the personal data we hold about you, its origin, recipients and the purpose of processing, and to request rectification or erasure. Contact us at the address above.

Withdrawing consent

Many processing operations require your explicit consent. You can withdraw consent at any time: for cookies directly via "Cookie settings" in the footer, otherwise by e-mail. Processing carried out before withdrawal remains lawful.

Right to object (Art. 21 GDPR)

Where processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing at any time without giving reasons.

Restriction of processing

You may request restriction of processing if you contest the accuracy of your data (for the duration of the review), if processing is unlawful and you prefer restriction to erasure, if we no longer need the data but you need it for legal claims, or while it is undecided whose interests prevail after an objection. Restricted data may, apart from storage, only be processed with your consent, for legal claims, to protect the rights of others or for reasons of important public interest.

Data portability

Data we process automatically on the basis of your consent or a contract can be handed over to you or a third party in a common, machine-readable format. Direct transfer to another controller takes place where technically feasible.

Right to lodge a complaint

In case of GDPR infringements you may lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony.

4. Data collection on this website

Server log files

The hosting provider automatically records information your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address. This data is not merged with other sources. Legal basis is Art. 6(1)(f) GDPR, our legitimate interest in an error-free and secure website.

Cookies

Cookies are small text files stored by your browser. Strictly necessary cookies are set on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR; all others only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you give in the cookie dialog and can change at any time via "Cookie settings" in the footer.

• Necessary: sk_lang stores your language choice (12 months). sk_consent stores your cookie decision (6 months). Signing in to our application area at go.survkit.com sets session cookies without which login is not possible.
• Statistics: Google Analytics cookies (_ga, _ga_*, up to 2 years), see section 5.
• Marketing: Google Ads cookies (_gcl_au and others, up to 90 days), see section 5.

You can configure your browser to reject cookies or delete them on closing. Without the necessary cookies the website may not work fully.

Enquiry form ("Discuss a project" / "Request a demo")

If you send us an enquiry through the form, we store your details (e-mail address, optional phone number, message) to handle the enquiry and follow-up questions. The enquiry is transmitted to us as an e-mail. We do not pass this data on without your consent.

Legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps, otherwise our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR). We keep the data until you request erasure, withdraw consent or the purpose no longer applies. Statutory retention periods remain unaffected.

Enquiries by e-mail or phone

If you contact us by e-mail or phone, we store and process your enquiry including the personal data it contains to handle your request. Legal basis and retention correspond to the enquiry form.

Login area (go.survkit.com)

Customers sign in to their Survkit workspace at go.survkit.com. Data processed there is governed by the data processing agreement with the respective customer and the privacy notices within the application. This policy covers the website survkit.com.

5. Statistics and marketing (only with consent)

The following services are integrated so that they set no cookies and store no identifiers without your consent (Google Consent Mode). Until you consent, only cookieless, aggregated signals are transmitted from which Google does not build user profiles. The services become fully active only after you agree in the cookie dialog. Legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), revocable via "Cookie settings".

Google Analytics 4

Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics records which pages and sections are viewed, how long visitors stay, where they leave and how they arrived. In Google Analytics 4 IP addresses are truncated and not stored. Usage data is usually transferred to Google servers in the USA. Google is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition. A data processing agreement with Google is in place. User and event data is deleted after 14 months. Details: policies.google.com/privacy.

Google Ads conversion tracking and remarketing

Provider is also Google Ireland Limited. Conversion tracking measures whether visitors who reach us via a Google ad send an enquiry. Google stores a cookie for this that expires after 90 days and does not identify you personally; we only receive the total number of enquiries attributable to an ad. With your consent to marketing cookies, Survkit ads may also be shown to you on other websites (remarketing). Data transfer and safeguards correspond to Google Analytics. Google ad settings: adssettings.google.com.

6. Embedded content

Fonts and videos on survkit.com are served from our own server; no connection to Google Fonts, YouTube or other third parties is made. We use no map services and no social media plugins. Links to external websites (such as iwop.eu or umfragewissen.de) lead to services whose operators are responsible for their own data processing.

7. General notes

Encryption

This website uses TLS encryption. Data you send us cannot be read by third parties in transit. Please note that data transmission on the internet, for example by e-mail, may have security gaps; complete protection is not possible.

Objection to advertising e-mails

We object to the use of the contact details published in our legal notice for sending unsolicited advertising. We reserve the right to take legal action in case of unsolicited advertising.

Changes

We update this policy when our services or the legal situation change. The version published here applies. Last updated: September 2026.