The following privacy policy informs you about the processing of your personal data collected when you participate in a user interview conducted via video call. For these interviews, we use the service Google Meet, a product of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information can be found at https://policies.google.com/privacy?hl=en.

We take the protection of your personal data very seriously. The processing of your personal data is done in compliance with applicable data protection regulations.

I. Responsible Authority and Data Protection Officer

The following is responsible for the collection, processing, and use of your personal data in accordance with the General Data Protection Regulation (GDPR):

YAZIO GmbH
Kartäuserstraße 13a
99084 Erfurt
Germany
Email: help@yazio.com

If you have questions regarding your data, this privacy policy, or the assertion of your rights as a data subject, you can also contact our external data protection officer:

Prof. Dr. Gernot Schmitt-Gaedke
c/o lexTM GmbH Law Firm
Friedensstraße 11 (Junior-Haus)
60311 Frankfurt/Main
Germany

II. Purpose of Data Collection and Processing

The legal basis for the processing of your personal data is Article 6(1)(a) GDPR (consent). The primary purpose of the user interview is to better understand your experience, workflows, and opinions so we can improve the YAZIO app and related services. The interview helps us gain qualitative insights by speaking directly with users.

III. Collection, Processing and Use of Personal Data

1. Participation in the user interview is voluntary, and all information will be treated confidentially.
2. During the session via Google Meet, the following data may be collected and processed:
   • Audio and video recordings of the call (with consent only)
   • Your first name or pseudonym
   • Your shared screen during the session (if applicable)
   • Feedback, comments, and interactions during the interview
   • Technical data such as device/browser info (only if relevant for usability research)
3. The meeting may be recorded for internal analysis and review purposes only. You will be informed in advance and asked to give explicit consent before any recording takes place. If you do not wish to be recorded, participation without recording may be arranged, or you may decline participation entirely.
4. Your data will be stored securely by YAZIO GmbH and will be accessible only to authorized team members involved in the research. The retention period is limited to the duration of the research project, after which the data will be permanently deleted — unless longer storage is required for legal compliance.

IV. Your Rights

1. Art. 15 GDPR: You shall have the right to obtain information regarding the data we have stored about you at any time, including their origin, recipients or categories of recipients to whom the data will be disclosed as well as the purpose of their storage.
2. Art. 16 GDPR: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data or request the restriction of processing. Taking into account the purposes of the processing, you shall also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Art. 7(3) GDPR: If you have consented to the use of your data, you shall have the right to withdraw your consent at any time and without providing reason for the revocation.
4. Art. 17 GDPR: You shall have the right to obtain from us the erasure of your personal data without undue delay. In addition, we are obliged to delete this data if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if you have withdrawn your consent.
5. Art. 20 GDPR: You shall have the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format and have the right to transmit the data to another controller without hindrance, provided that the processing is based on your consent or the processing was carried out by automated means.
6. Art. 21 GDPR: You shall have the right at any time to object to the creation of user profiles and the processing of your respective personal data, provided the processing is carried out based on point (e) or (f) of Article 6(1) of the GDPR. The processing of your personal data shall no longer take place unless compelling legitimate grounds for the processing override your interests, rights and freedoms. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of said personal data.
7. Art. 22 GDPR: You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
8. Art. 77 GDPR: In the case of violations of data protection law, you shall have the right to lodge a complaint with the responsible supervisory authority.