Privacy notice for the “Entre Sistemas” study
Last updated: October 2026
In short
- →Taking part is voluntary. You can stop at any time.
- →Your answers are confidential, but not anonymous: they arrive linked to a company code.
- →We ask for an email only if you switch on one of the three permissions at the end.
- →Results are published only in aggregate, with no names of people or companies.
- →For any question, or to withdraw: info@neocompas.com.
1. Who is responsible
2. What we use your answers for
“Entre Sistemas” is a NeoCompás study (2026–2027) of how information moves between systems in industrial and distribution companies in the Basque Country and Navarre. We use the answers to produce the study’s results.
In addition, and only if you switch on the corresponding permission:
- →Results: to send you the study’s summary or report.
- →Interview: to write to you to propose a conversation about your answers.
- →Commercial contact: to write to you about NeoCompás’s services.
The three permissions are independent and start switched off. If you switch on none, we do not ask for your email.
3. What we collect
- →Your answers to the survey questions, including free-text ones. If you type an email address into a free-text answer, we replace it with “[correo]” before storing it.
- →The codes in your invitation link (company, and the channel it reached you through). The company one is a meaningless code, not your company’s name; the table linking codes to companies is kept separately, outside the response database.
- →The date, the survey version, the time you spend on each screen, whether you answer from a phone or a computer, and whether your device asks for reduced motion.
- →Your email address and the permissions you switched on, with the date you gave them. Only if you switch one on.
We do not store your IP address or browser identifier with your answers. To prevent abuse we limit the number of submissions using a code computed from your IP, from which the IP cannot be recovered. As on any website, the server’s technical logs may for a time contain the IP and the address visited, which includes the invitation code.
This is why we say the answers are confidential and not anonymous: the study team can tell which company an answer comes from. We do not share it with anyone in a way that would reveal this.
4. On what legal basis
Your consent (GDPR Art. 6.1.a), which you give on the opening screen when you start the survey. Each of the three permissions at the end is a separate consent.
You can withdraw any of them whenever you wish by writing to info@neocompas.com. Tell us the email you left or the reference shown on the final screen. Withdrawing does not affect what was done earlier with your consent. Every commercial email you receive will also include a way to opt out.
Taking part is not required, and not taking part has no consequence. We make no automated decisions with your answers.
5. How long we keep it
| Data | Kept until | Then |
|---|---|---|
| Surveys started and not finished | 60 days from the last save | Deleted |
| Email and permissions | 12 months after responses stop being collected, or earlier if you ask | Deleted |
| Table of codes and companies | Same as emails | Deleted |
| Finished surveys | For the duration of the study | Kept without the company code; we review free-text answers and remove anything that could identify someone |
We make encrypted backups every night and keep them for 30 days. A deleted item may therefore remain in those backups for up to 30 more days.
6. Who can see the data
Only the NeoCompás team running the study. We do not pass your answers or your email to third parties. To store and send information we use these providers, which process it on our behalf:
- →Hetzner (Germany): hosts the website where you answer.
- →Supabase: stores the answers in a database in Frankfurt (Germany).
- →Resend (USA): sends the email with the results, only if you asked for them. It states that it adheres to the EU-US Data Privacy Framework and applies Standard Contractual Clauses.
- →Upstash: receives the code computed from your IP to limit submissions; never the IP. [PENDING: Upstash region]
- →GitHub (USA): stores the encrypted backups. It does not hold the key to read them.
- →Zoho: runs our mailbox, if you write to us, in its European data centre.
The site’s other providers are described in the Privacy Policy.
7. What is stored in your browser
While you answer, your answers are saved in your browser so you can continue later from the same link on the same device. Once the server confirms it has received the finished survey, that copy is deleted. The survey page uses a single cookie, which remembers the language and disappears when you close the browser. There are no analytics tools and no third-party connections.
8. Your rights
You can ask us to access your data, correct it, delete it, restrict its use, receive it in a reusable format, and withdraw your consent. Write to info@neocompas.com giving the email you left or the reference from the final screen. A survey already submitted cannot be edited: if you want to change it, we delete it and you can answer again. It is free of charge and we will reply within one month.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency: www.aepd.es.