Privacy at CORE9

Dresden Academy of Applied Communication GmbH

Trompeterstraße 5, 01069 Dresden, Germany

Email: datenschutz@dresdenacademy.com

CORE9 is a platform for anonymous organisational diagnostics. Companies use CORE9 to measure the effectiveness of their team and organisational structures on a scientific basis – using the CORE9 model with 9 factors across 3 levels (Relational Strength, Performance Clarity, Organisational Strength).

CORE9 is built on the principle of data minimisation. Participants provide no personal data – no email address, no name and no other identifying information.

Participation works via anonymous single-use links. Each link can be used only once and is invalidated after completion. Only the answers to the questionnaire items are stored.

• Location: EU (Frankfurt am Main, Germany)
• Encryption at rest: AES-256
• Encryption in transit: TLS 1.3
• Data processing: data processing agreement under Art. 28 GDPR in place

Survey data is deleted automatically after 18 months. Timestamps are rounded to full days so that answers cannot be linked to individuals by time.

CORE9 uses several safeguards to prevent conclusions about individuals:

• Minimum number of participants per reporting level (team, department, company)
• Anti-differencing rules: results are suppressed if comparing two groups would reveal individual answers
• Dominance rule: suppression if one person makes up more than 50% of a group
• Results are shown in aggregated form only

CORE9 uses no tracking cookies and no analytics tools (such as Google Analytics). Only technically necessary cookies are used to sign in administrators.

Under the GDPR (Art. 15–21) you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Because CORE9 does not collect personal data from participants, these rights usually do not apply to anonymous survey participation. For any requests, please contact the controller (see above).