Survey Privacy Notice
Last updated: 31 October 2026
Version: 0.9 — Pre-launch draft
1. Who Is Responsible for the Survey?
This survey is organized and managed by:
GRDprocess Sàrl
Route de Mauvoisin 334
1948 Lourtier, Valais, Switzerland
Swiss company identification number (UID): CHE-385.988.552
Privacy contact: grdprocess@gmail.com
GRDprocess Sàrl is the controller responsible for the personal data collected through this survey.
2. Purpose of the Survey
The survey examines how organizations assess artificial intelligence systems, including technical reliability, behavioral robustness, governance, unintended outcomes, and evaluation practices.
We use the information submitted to:
- Analyze current AI evaluation practices and methodological challenges
- Identify areas requiring additional research or evaluation methods
- Understand potential professional needs for specialized AI assessment
- Prepare and publish findings in aggregate or appropriately anonymized form
- Contact participants only for the particular follow-up communications they have separately selected
The survey is exploratory.
Participation does not represent a request to purchase any service, and submitting the questionnaire will not automatically trigger commercial outreach.
3. What Information Is Collected?
Survey responses
Information about the participant’s role, organizational context, practices, challenges, and optional written comments.
Participants should not disclose confidential business information, personal data relating to third parties, or sensitive information in free-text answers.
Optional contact details
Name, organization, and professional email address, supplied only if the participant chooses a follow-up option.
Communication choices
The specific follow-up permissions selected by the participant, together with the date and version of the wording presented when the choice was made.
Technical information
Limited technical information may be processed by the website’s hosting and security systems for operation and protection of the site.
Such technical logs are covered by our general Privacy Policy and are not intended to be used for survey-based prospecting.
4. Linking Responses and Contact Details
Participation is possible without providing contact details.
Responses submitted without direct contact details will be analyzed without an intentional identity link in the survey database. This does not mean that ordinary server logs are necessarily anonymous.
If a participant requests follow-up and supplies contact details, the contact details may be linked to their answers using a survey response identifier.
This enables GRDprocess to discuss the answers in context, but does not authorize contact outside the purposes selected.
Where no follow-up option has been selected, the survey will not require or retain contact details for future contact.
5. Optional Communications
The following options are independent, voluntary, and not selected by default.
A — Survey Findings
“I would like to receive a summary of the survey findings by email.”
B — Follow-up Discussion
“I agree to be contacted by GRDprocess to discuss my survey responses and explore AI evaluation practices, challenges, and potential areas of professional collaboration.”
C — Research Updates
“I would like to receive occasional updates from GRDprocess about research findings and developments in AI evaluation methodologies.”
Participants may select any combination or none.
Providing an email address for one purpose does not authorize the others.
Participants may withdraw any permission at any time by emailing grdprocess@gmail.com.
6. Professional Services and Third-Party Introductions
The research may help GRDprocess understand the need for specialized evaluation services.
However:
- Survey participation alone is not consent to receive promotional messages
- A follow-up discussion is not a general authorization for commercial marketing
- GRDprocess will not pass a participant’s name, email, identifiable responses, or other contact details to a commercial partner without a separate, explicit authorization
- If a participant expresses interest in an external service, any proposed introduction will be explained and agreed separately before contact information is shared
7. Publication of Findings
Survey results may be published as summaries, statistics, and thematic analyses.
We will not identify individual respondents or their organizations without separate permission.
We will review small groups, free-text answers, and quotations to reduce the risk of indirect identification.
Identifiable quotations will not be published without separate approval.
8. Retention
Unless an overriding legal obligation requires otherwise, the following retention rules are proposed for this survey.
Identifiable survey responses
Retained for up to 12 months after the survey closes, followed by deletion or removal of information enabling identification.
Contact details used solely to send survey findings
Deleted within 60 days after the summary is sent, unless another selected follow-up purpose remains active.
Contact details for individual follow-up discussions
Retained while relevant discussions are active, but reviewed and ordinarily deleted no later than 12 months after the survey closes, unless a new, separately explained professional relationship is established.
Research update subscriptions
Retained until the participant unsubscribes or the subscription is discontinued, with periodic review of inactive contacts.
Consent and withdrawal records
Retained for the period reasonably required to document compliance or address a dispute, then deleted.
Anonymized aggregated research findings
May be kept without a fixed end date, provided individuals can no longer reasonably be identified.
Deletion and withdrawal requests will also be applied to active records after a website restoration.
Backup copies will be protected and removed through the applicable backup lifecycle. Deleted personal data will not be intentionally restored to active use.
9. Hosting, Service Providers and Transfers
The GRDprocess website is hosted by Infomaniak in Switzerland.
Website security tools may process technical data, as described in the general Privacy Policy.
Survey-specific software, storage arrangements, and any additional processors will be confirmed and disclosed before the survey begins accepting responses.
GRDprocess will not launch the survey until the relevant data locations, recipients, contractual safeguards, and international transfers, if any, have been assessed and documented.
If a participant chooses email follow-up, correspondence is handled using Google Gmail, which may involve processing outside Switzerland, including in the United States.
Where personal data is transferred abroad, applicable Swiss data protection rules and, where relevant, GDPR transfer requirements will be respected.
10. Security
Access to identifiable survey responses and contact details will be restricted to persons authorized by GRDprocess.
Appropriate safeguards will be applied to storage, access, backups, recovery, and deletion.
Survey data and consent records must remain recoverable and current independently of any rollback of the WordPress website.
The technical arrangements will be tested before collection begins.
No internet-based service can guarantee absolute security.
11. Applicable Law and Your Rights
GRDprocess processes personal data primarily under the Swiss Federal Act on Data Protection (FADP / nLPD) and its implementing ordinance.
Where the EU General Data Protection Regulation (GDPR) applies, its relevant provisions will also be respected.
Participation and the optional follow-up permissions are voluntary.
Where GDPR consent is relied upon, it can be withdrawn for future processing at any time, without affecting processing lawfully carried out before withdrawal.
Subject to applicable law, participants may request access to, correction of, or deletion of their personal data; object to certain processing; and exercise other applicable rights.
To submit a request or withdraw a communication permission, contact:
We may need reasonable information to verify the requester’s identity.
Removal from identifiable research records cannot undo analyses that have already been irreversibly anonymized and aggregated.
Participants may also contact the competent data protection authority, where applicable.
12. Changes and Related Policies
This notice will be updated if survey methods, technical providers, retention periods, or data uses change.
The effective version will be available on this page before personal data is collected.
For processing associated with ordinary website visits, security, analytics, cookies, and general correspondence, please consult the site’s Privacy Policy and Cookie Policy.