Privacy

Who is responsible

The 30% Check is offered by De 30% Club, an initiative supported by Mixit. The controller responsible for your data is Mixit B.V., Aert van Nesstraat 45, 3012 CA Rotterdam, the Netherlands. For any question about your data, email info@mixit.nl.

What we store

When you complete the check, we store:

• Your answers to the 8 questions, the perspective you answered from, the type of change and roughly how many people it affects.
• The result calculated from this (the overall level and how each of the five steps is doing).
• Your email address, which you enter to receive your result.
• If you ask us to get in touch: that request, the time you made it and anything you chose to add (your name, phone number or a message, all optional).
• Whether you asked to be invited to the benchmark study, and when.
• Whether you gave Mixit permission to contact you, and when.
• The language you used, the time you started and finished, your browser type and the link you used to open the check (for example a campaign code, so we can see which channel brought you here).

We do not ask for your organisation, and your name only if you want us to contact you.

Why we use it

• To show your result on screen and send it to you by email.
• To contact you, but only if you ask for that with the button below your result or give permission with the box on the email screen.
• To improve the check, based on combined results that do not identify you or your organisation.

We show, send and follow up on your result because you ask us to (performing your request, Article 6(1)(b) GDPR). Improving the check and preventing misuse are based on our legitimate interest (Article 6(1)(f) GDPR). If you tick the box that Mixit may contact you, we do so based on your consent (Article 6(1)(a) GDPR); that box is never ticked in advance, and you can withdraw at any time by emailing us.

You do not get a newsletter or marketing emails from us because you completed the check.

If you ask us to get in touch, we use your answers and the size of the change to decide internally which requests to pick up first. No decisions are made about you.

Benchmark study

We are setting up a separate, longer benchmark study. You can ask to be invited to it, with the box on the email screen or the button below your result; it is never switched on in advance. Your answers to this check are not used for the benchmark. We only use your email address to invite you when the study starts; you then get separate information and decide whether to take part.

We do this based on your consent (Article 6(1)(a) GDPR). You can withdraw at any time by emailing info@mixit.nl, after which we will not email you about it.

Protection against misuse

To stop automated or bulk submissions, we briefly store your IP address separately from your answers. It is deleted automatically after an hour, and no later than within a day. The check may also use Cloudflare Turnstile, which checks invisibly that a person, not a script, is submitting the form.

Website statistics

We use Umami to see how many people visit the site and how far they get in the check. It works without cookies and without recognising you personally, so no consent is needed for it. Umami sees which steps are taken and which level comes out, but never your email address or anything else that identifies you; we also strip such details from page addresses before anything is sent.

On your own device

While you fill in the check and look at your result, your browser tab keeps your answers and email address, so nothing is lost if you reload the page. That disappears when you close the tab.

If you choose a language, a small cookie remembers it for a year. It is only used for that, so no consent is needed for it. We place no other cookies for the check.

Who can see your data

Only the small team that manages the check can see individual submissions. That team receives an email when a new result or a contact request comes in. We never pass your data on to other parties, except to the technical service providers that are needed to run the check: Vercel (hosting), Supabase (database), Resend (email), Umami (website statistics) and, if switched on, Cloudflare Turnstile (protection against misuse). They only process data on our behalf. These are American companies, so your data may be processed in the United States. That happens on the basis of the usual legal safeguards: the EU standard contractual clauses or the EU-US Data Privacy Framework (and its Swiss counterpart).

How long we keep it

We keep your data for no longer than two years after you completed the check, and shorter if it is no longer needed for the purposes above. You can have it deleted at any time, see below.

Your rights

You can delete your answers, your result and your email address yourself at any time, using the link in the email with your result. You can also email info@mixit.nl to see, correct or delete your data, or to object to how we use it. If you are not satisfied with how we handle this, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

When you delete your data, it is also removed from our internal admin log. Copies in the notification emails to our team are deleted on request.

Living in Switzerland?

Then the Swiss Federal Act on Data Protection (FADP) also applies, with the same rights as above. You can also file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

Did you complete an earlier version?

If you completed an earlier version of the check, you can have that data deleted in the same way, and the unsubscribe link in those emails keeps working.