Privacy policy.

Who is the data controller?

The controller of the answers to a survey is the organisation running it: usually the owner or the manager of the building, who sent you the link or put up the QR code.

Hearvey is the tool used to run the survey. It is published by To be completed (see the legal notice). When the publisher runs a survey on its own behalf, it is the controller; when it provides the tool to another organisation, it acts on that organisation’s behalf, as a processor.

Contact for any question about your data: To be completed.

Why is this data collected?

• to measure how satisfied occupants are with the comfort of the building (temperature, light, air, acoustics) and the way it is run;
• to calculate the carbon footprint of occupants’ commutes and business travel;
• to improve the building and its management, and to report on it in the ESG reports and labels that require occupant satisfaction to be measured.

Answers are not used to assess individuals, for marketing, or to train artificial intelligence. No automated decision is made.

On what legal basis?

The legitimate interest of the organisation running the survey (Article 6(1)(f) GDPR): knowing what occupants think in order to improve the building and measure its carbon footprint. This interest is balanced against your rights: taking part is optional, no name or contact details are asked for, and results are shared with nothing that identifies respondents.

Consent was not chosen as the legal basis: in a workplace it is hard to guarantee that consent is entirely free, and proving it would mean keeping a record of every respondent, which would defeat the anonymity of the survey.

What data is collected?

When you answer a survey:

• your answers: satisfaction ratings, choices (profile “employee” or “site manager”, means of transport, type of engine, days on site…), numbers (approximate distance between home and work, business kilometres, car sharing) and optional free-text comments;
• the tenant company you belong to, if the campaign asks for it;
• the language in which the survey was displayed;
• the date and time you started and submitted the survey.

No name, email address, phone number or account identifier is asked for or stored with your answers. Your IP address is not stored in the database: it is only held in memory, for one hour at most, to limit abusive submissions. The hosting providers (see below) also keep technical connection logs for a short period to keep the service secure.

Back-office administrators: email address, password (encrypted by Supabase) and sign-in logs, so that only authorised people can see the results.

Anonymous answers: a word of caution on free text

The survey does not ask who you are. Results are presented as statistics (averages, percentages) and comments, with nothing that points to you. They may be shown to occupants, or published on a page accessible by link: your free-text comments may then appear there as written.

Free-text fields are the only place where you might give yourself away without meaning to. Please do not write your name, a colleague’s name, an office number or any other detail that could identify you or someone else. Describe the problem, not the people.

In a small team, some combinations of answers (company, “site manager” profile, distance) may apply to very few people: individual answers are only read by the survey’s administrators.

How long is it kept?

• Individual answers are deleted no later than 24 months after the closing date of the campaign. This makes it possible to compare an annual survey with the next one.
• Aggregated results and the report (statistics and selected quotes, with nothing that identifies their author) may be kept longer.
• The draft of your answers is erased from your browser as soon as you submit, or when you close the tab.
• Administrator accounts are deleted when the person no longer needs access to the service.

Where is the data hosted?

• Database: Supabase, Inc., on Amazon Web Services servers located in Paris (eu-west-3 region). This is where answers are stored.
• Application: Vercel, Inc., a US company. The functions that receive your answers and pass them on to the database run in Paris. The static files of the site (pages, scripts, images) are served by Vercel’s global network: to display them, your browser may connect to a server outside the European Union, which then sees your IP address, but not your answers.

Because Supabase and Vercel are US companies, access from the United States cannot be entirely ruled out (maintenance, legal obligations). Such transfers are covered by their data processing agreements (European Commission standard contractual clauses) and, for certified companies, by the EU–US Data Privacy Framework.

Who can access the data?

• The survey’s administrators (personal, password-protected accounts), within the organisation running it.
• Technical processors: Supabase, Inc. (database and administrator sign-in), Amazon Web Services (Supabase’s infrastructure), Vercel, Inc. (application hosting).

The data is never sold, transferred or used for advertising.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to object to it (Articles 15 to 21 GDPR).

To exercise these rights, write to To be completed. Since your answers are not linked to any name, we can only find them if you give us details to recognise them (campaign, approximate date and time of submission, content of an answer). Without such details, we are unable to identify you (Article 11 GDPR).

You can also choose not to answer, or leave the survey at any time: nothing is sent before the last screen.

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.

Cookies and local storage

Hearvey uses no cookies, no audience measurement, no advertising and no third-party tracking tools.

The site only keeps in your browser what it needs to work:

• the language chosen on the home page (localStorage);
• the draft of the survey in progress, so that you do not lose your answers if the page reloads (sessionStorage, erased on submission or when the tab is closed);
• for administrators, the back-office sign-in session (localStorage).

This storage is strictly technical: it does not require your consent and is never read by a third party.

Security

Encrypted connections (HTTPS); a database that respondents’ browsers cannot reach directly (answers go through a server that checks them); back-office access restricted to a list of administrators; access rules enforced in the database itself (row-level security).

Legal notice →