Privacy and cookies
This page describes technical data handling in the CDM Involver survey service. The privacy information that applies to every survey, including purposes, legal basis, retention and contact details, is available from the Privacy button in the survey.
Answers
Submitted answers are stored in the service database together with the survey version, response language, and start and completion times. A name or email is not added automatically. Free text or small respondent groups can still identify someone. Avoid unnecessary personal information.
Cookies and browser storage
The current site contains no advertising cookies, Google Analytics, tracking pixels or third-party video players. A survey with default settings does not set a respondent cookie.
If you allow remembering a response, a survey-specific cookie helps avoid another response in this browser for up to 180 days. A hash of the identifier is stored with the response. It does not verify identity. You can answer without allowing this feature.
Unfinished answers are saved in this browser only if you allow resuming on this device. You can resume for seven days after the last save. An expired copy is removed on the next visit. Submission, starting a new conversation or turning storage off removes the copy. Avoid this feature on shared devices.
When you save browser choices, an essential cdm_storage_ preference cookie records the allowed features or refusal, choice time and version for up to 180 days. The optional cdm_once_ cookie remembers a response; cdm-progress_ local storage holds unfinished answers. You can change choices or turn off optional storage by selecting Privacy in the survey. Withdrawing browser permissions does not delete a response already submitted to the server.
The staff sign-in cookie lasts up to eight hours. A separately selected administration language is remembered in a cookie for one year. Staff account details, one-way password hashes, sessions and administrative audit events are stored.
Access and transfers
Authorised administrators can read raw answers and export files. Responses from a survey connected to Google Sheets can be transferred there. Responses are not sent to AI services. Your own answer copy is a file download requiring no email address.
Network connection
The server processes network addresses to deliver requests and resist abuse. The application does not store IP addresses in survey responses. Temporary traffic-limit identifiers stay in server memory. The service runs on a server operated by UpCloud Oy in Helsinki, Finland. The service keeps no visitor log. Daily database backups are encrypted before they are stored in CDM's Google Drive account.
Questions and requests about your data
Send your request to the address in the survey's privacy information; where needed, we forward it to the organisation that commissioned the survey. Rights depend on the legal basis and circumstances and may include access, correction, erasure, restriction, objection and portability. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. It may not be possible to locate an individual response without identifying information. Do not send a national identity number or identity document as a precaution.