Personal data contain information that makes it possible to identify individuals participating in the survey. Therefore, stringent formal requirements apply to the processing and storage of personal data. To decide whether the data are personal identifiable, NSD carries out a manual control of anonymity.
NSD's procedures for the processing of personal data:
If NSD is to archive personal data, the data owner must document that storage of the data is permitted pursuant to the applicable regulations. If the data owner is not allowed to store the data, NSD can anonymise the data so that an anonymous version can be archived before the original data are deleted.
All employees of NSD have signed a declaration of secrecy and only have access to data that are relevant to their work. All processing of personal data takes place on an offline computer (disconnected from the internet, intranet and other computers).
Personal data can only be distributed in accordance with the data processor agreement entered into between the data owner and NSD. An alternative is to anonymise the survey before distribution, but this must always be approved by the data owner.