Status: 1.5.2026

1. Data controller

The controller within the meaning of the GDPR is:

Untiedt Research GmbH
Denkmalstrasse 2
45529 Hattingen
Germany
Email: untiedt@untiedt.de

2. General information on data processing

testpanel is an online panel specialising in market and opinion research.

We process personal data exclusively for panel, research, billing and support purposes, as well as for the technical provision of the website.

The protection of your personal data is our top priority.

3. Purposes of data processing

Personal data is processed in order to:

• to enable the registration and management of user accounts
• to enter and maintain profile data
• to send relevant survey invitations
• to conduct and analyse surveys
• to add credits and payout rewards
• to respond to support and contact requests
• to ensure the quality, security and functionality of the panel

4. Legal basis for processing

Processing is carried out on the following legal bases:

• Art. 6(1)(a) GDPR – consent (e.g. registration, profile details, cookies)
• Article 6(1)(b) GDPR – performance of the contract (Terms and Conditions of participation)
• Article 6(1)(f) GDPR – legitimate interest (IT security, quality assurance)

Where, as part of surveys, special categories of personal data within the meaning of Art. 9 GDPR (e.g. health data, political opinions) are requested, this is done exclusively on the basis of explicit consent, which may be withdrawn at any time.

5. Categories of data processed

Depending on usage, we process in particular:

• Personal data: age, gender, place of residence, postcode
• Profile data: household details, consumption and interest characteristics
• Survey details: survey responses (evaluated exclusively in anonymised form)
• Communication data: e-mail address
• Payment details: e.g. PayPal address or details relating to rewards
• Technical data: shortened IP address, browser type, operating system

6. Surveys & cooperation partners

Surveys may be conducted by Untiedt Research GmbH or by cooperation partners.

• Cooperation partners receive exclusively pseudonymised data, which are necessary for carrying out the respective survey
• Clients receive no personal data
• Analysis is carried out exclusively aggregated
• The use of data for other purposes is excluded.

7. Contact form

If you contact us via the contact form, we will process the information you provide (e.g. name, email address, message) in order to deal with your enquiry.

Legal basis is Article 6(1)(a) of the GDPR (consent) or Article 6(1)(b) of the GDPR, provided the enquiry relates to your panel membership.

The data will be deleted as soon as the purpose of processing no longer applies, provided there are no legal retention obligations.

8. Remuneration & payment processing

We use external payment service providers to pay out rewards, in particular PayPal.

Only the data required for payment will be transmitted.

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxemburg

The privacy policy of the relevant payment service provider applies.

9. Cookies & web analytics

testpanel uses cookies and similar technologies to keep the website secure and fully functional.

Technically necessary cookies

These cookies are necessary to provide basic website functions (e.g. login, session management and security settings).

→ Legal basis: Article 6(1)(f) GDPR

No statistics or marketing cookies currently

Currently, testpanel does not use any statistical, analytics or marketing cookies and does not carry out any personal tracking for analytical purposes. Should analytics or statistical services be used in the future, this Privacy Policy will be updated accordingly. Where required by law, such cookies will only be used with the user’s prior consent. Further information can be found in the Cookie Policy.

10. testpanel cookie policy

testpanel currently uses only technically necessary cookies to ensure the security and usability of the website.

Technically necessary cookies

These cookies are necessary to provide essential functions such as login, page navigation and security settings.

→ Legal basis: Art. 6(1)(f) GDPR

No statistics or marketing cookies

Currently, no statistical, analytics or marketing cookies are used. Should such services be implemented in the future, this will only take place — where legally required — on the basis of the user’s explicit consent.

11. Storage period

Personal data is only stored for as long as is necessary for the stated purposes or as required by statutory retention obligations.

Upon termination of membership, personal data will be deleted no later than 30 days deleted, unless required by law.

12. Rights of data subjects

You have the following rights at any time:

• Right of access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent (Art. 7 GDPR)
• Objection to processing (Art. 21 GDPR)

13. Right of complaint

You have the right to lodge a complaint with a competent data protection authority.

14. Automated decision-making

There is no automated decision-making, including profiling as defined in Article 22 GDPR.

15. Voluntary provision of data

The provision of personal data is voluntary.

However, without certain details (e.g. profile information), it is not possible to take part in surveys or use certain features.

16. Purpose limitation

Personal data will not be processed for purposes other than those stated unless the user has given explicit consent or there is a legal obligation to do so.

17. Changes to this privacy policy

We reserve the right to amend this privacy policy.

The latest version is available on our website at any time.