explidata is a GDPR-compliant service provider. We process your data with the utmost care and according to the strictest security standards.
The controller as defined by the General Data Protection Regulation, other data protection laws in force in the Member States of the European Union, and other provisions of a data protection nature is:
The subject matter of this agreement is the processing of personal data by explidata on behalf of the client. This includes in particular:
The duration of this agreement corresponds to the term of the main contract for the provision of transcription and coding services. Data processing begins with the transmission of the data to be processed to explidata and ends with the complete return or deletion of all processed data after the project is completed or upon explicit instruction from the client.
Within the scope of our services, the following types of personal data may be processed:
The processing is carried out exclusively for the purpose of:
The following groups of persons may be affected by the data processing:
explidata processes all personal data exclusively within the framework of the contractually agreed terms and in accordance with the documented instructions of the client.
All persons entrusted with the processing of personal data are obligated to maintain confidentiality and have been instructed accordingly.
explidata implements comprehensive technical and organizational measures (TOMs) to ensure an appropriate level of protection for the processed personal data. These measures are continuously evaluated and adapted if necessary.
The implemented measures include in particular:
A detailed description of the TOMs can be provided upon request.
In the event of a personal data breach, explidata will notify the client without undue delay, at the latest within 24 hours after becoming aware of the incident.
After the completion of the processing activities or upon instruction from the client, explidata will, at the client's choice, either return all personal data and delete any existing copies or completely and irretrievably delete the data. The deletion will be confirmed in writing upon request.
Our AI technologies have been specifically developed for the requirements of qualitative research and offer the highest precision while ensuring data protection.
The following principles apply to the optional use of AI technologies for transcription and translation:
explidata uses the following technologies for AI-supported processing:
Recently, we have also started using selected Google services for certain applications, with the following measures taken to protect your data:
The client is always informed about which data is processed with AI support. The AI-supported processes are documented and are accessible for audits. The client can decide at any time to restrict or terminate the use of AI.
explidata may engage sub-processors only with the prior written consent of the client.
explidata carefully selects sub-processors and contractually obliges them to comply with at least equivalent data protection standards as set out in this agreement.
The client has the right to issue instructions to explidata regarding the processing of personal data. Instructions can be given in writing, by email, or in documented electronic form.
The client has the right to verify compliance with the technical and organizational measures as well as the obligations set out in this agreement by explidata or to have them verified by third parties.
The principles of Art. 82 GDPR apply to liability. In the internal relationship between the client and explidata, each party is liable for the damage caused by a violation of the GDPR for which it is responsible.
This agreement enters into force upon using our services and is valid for the duration of explidata's processing activities for the client.
Transparency and data protection are central values of our working methods. If you have any questions about the processing of your data, we are available to you at any time.