Privacy Notice for UX Research Activities
Who Controls Your Data?
The data controller for this research is: Open Food Facts and other related projects under Open Food Facts. External researchers act as data processors and handle personal data securely and only as instructed.
Legal Basis
Your personal data will be used solely for UX research activities, based on your explicit consent in line with data protection laws.
What Data Do We Collect?
Depending on the research method, we may collect:
- Given name and surname
- Email address
- Slack username (used solely to contact you for scheduling and participation in the research session; not stored or used for analysis)
- Responses to surveys and questionnaires (including optional demographic information and product usage preferences)
- Live transcription of the session (we do not record audio; instead, we take live notes in Google Docs for analysis)
- Audio and screen recordings during research sessions (such as interviews or usability testing)
- Notes and observations made by the research team, including any anonymized or derived data
- Interaction data from online tools used for card sorting, tree testing, or other interactive research activities
- Feedback or comments you voluntarily provide during or after the research
- Please Note: We do not collect or record video from your camera during sessions. If you turn on your camera, it will not be recorded, and we will remind you to disable it to protect your privacy. However, we will record your screen to observe your interactions during the session.
Why We Collect It
The collected personal data will be used exclusively to:
- Contact participants for research-related communications and scheduling
- Conduct UX research activities such as surveys, interviews, usability tests, card sorting, tree testing, and other user-centered research techniques
- Analyze and improve the usability and accessibility of the Open Food Facts, Open Prices, and other related projects under Open Food Facts.
- Create anonymized reports and user personas based on research data
Voluntary Participation
- Participation in our UX research activities is entirely voluntary and unpaid. We do not provide any compensation or payment for your participation.
- Provision of personal data is voluntary; however, it is necessary for participating in the research. Without the required data, you cannot take part in the study.
- You may decline to answer any question or withdraw from any research activity at any time without penalty or consequences. If you withdraw, we will delete your personal data promptly, unless anonymized data has already been used for analysis.
- UX research activities are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. By participating, you confirm that you meet this age requirement.
Data Storage & Protection
Data is stored securely in access-controlled Google Drive and collaborative tools like FigJam. External researchers store data temporarily only for transfer. All processing complies with GDPR security standards.
Tools & Third Parties
We use:
- Google Forms (surveys)
- Google Meet (interviews)
- FigJam, Google Docs (notes & collaboration)
Occasionally, we may also use additional external online tools, such as free card sorting or tree testing platforms, during live sessions (e.g., usability tests or interviews). You will access these tools via a shared link, and the interaction will be recorded through screen sharing only. You are not required to register or enter any personal data into these tools, and no identifying information is submitted to these external platforms. We carefully select these tools based on their data protection standards and alignment with GDPR principles.
By participating, you consent to your personal data being processed by these platforms according to their privacy policies.
AI in Analysis
We may use AI-powered tools, such as ChatGPT, to assist with transcription, analysis, or summarization of research data ensuring data is anonymized and reviewed for accuracy.
Data Sharing & Retention
We do not share your identifiable data. Anonymized data may be shared in reports.
Personal data is kept only as long as needed—up to 6 months—then deleted or anonymized.
Your Rights
Under GDPR, you can:
- Access, correct, delete, or restrict your data
- Request data transfer
- Object to processing
Contact us at [privacy@openfoodfacts.org] to exercise your rights. We respond within 30 days.
Global Participation
We follow GDPR standards globally, even if you live outside the EU.
Contact
Questions? Please contact us at privacy@openfoodfacts.org
Thank you for helping us improve Open Food Facts!