As a user, you can use the Testable platform to collect and store participant data in a variety of formats. For any data you collect, we are the Data Processor and users are Data Controllers. It is your responsibility to make sure that data collection via experiments and surveys falls in line with relevant data protection regulations, as well as scientific ethics requirements.
We use a small number of essential sub-processors to process user data, for which the user is the Data Controller.
For a full list of sub-processors for other types of data, check this article.
These sub-processors are:
Core server provider for all computation and storage
All participant data that is collected with Testable is anonymous. Researchers cannot read the IP addresses of their participants or infer any other identifying characteristics.
If you collect any personal information via custom survey questions or experimental trials, then you are required to specifically inform the participant about your intentions and ask for explicit consent at the beginning of the experiment.
If you collect data through our participant pool “Testable Minds”, then a unique identifier number is passed alongside each participant. This identifier is constant across participations. To avoid indirect identification, you should use the “download anonymous data” option, to encrypt the participant ID before sharing the data on any public repository.
Content distribution network (for efficient serving of multimedia stimuli)
Facilitating data storage outside of Europe (if requested by user)
Powering newsletter service for non-transactional emails
Our use of AWS as a means to facilitate content distribution does not affect personal your personal data and is only used to efficiently manage multimedia content for faster loading speeds on your experiments and surveys.
Should you request your data to be saved in regions outside the EU (subject to a fee), all data that you are a Data Controller for will be processed and stored using AWS services instead of Hetzner Online services in line with the same terms outlined above.
