Respondent Privacy Notice
The Cost of Integration Disruption survey. Version 1.0, effective September 15, 2026. This notice is written to meet Articles 13 and 14 of the UK GDPR and the EU GDPR and to give the disclosures required for respondents in the United States.
1. Summary
This survey is short on personal data by design. We do not ask for your name, email address, telephone number, employer name or job title. What we do collect is your answers to the survey questions, the country, job level, industry and organization size you select, an optional free-text description of an integration disruption, a panel reference number if you were invited through a research panel, and the technical information the survey platform records automatically. We use this to produce aggregate research findings that will be published. We keep identifiable survey data for a limited period and then delete or fully anonymize it.
2. Who is responsible for your data
The data controller is Arion Research LLC ("Arion Research", "we", "us"),1800 JFK Blvd, Suite 300 PMB 90705, Philadelphia, PA 19103, USA. You can reach us about anything in this notice at privacy@arionresearch.com.
The research is commissioned by a technology company (the "Sponsor"). The Sponsor is not disclosed while the survey is in the field so that it does not influence your answers, and will be named when the findings are published. The Sponsor does not receive any data that identifies you. It receives aggregate findings and a de-identified dataset as described in section 6.
The research panel operator is a separate data controller for your panel membership, your profile information, your invitation to this survey and any reward. The panel operator's own privacy notice applies to that processing. The panel operator does not receive your individual answers from us.
3. What we collect
We do not collect special category data such as health, ethnicity, political opinions or trade union membership, and we do not ask for it in the free-text question. We do not knowingly collect data from anyone under 18.
4. Why we process your data and our legal basis
Where we rely on legitimate interests, you have the right to object at any time (section 9). We do not rely on consent as the legal basis for processing your answers, because a consent basis would require us to withdraw published aggregate findings if consent were later withdrawn, which is not possible. Your agreement to take part remains voluntary, and stopping the survey or asking us to withdraw a response within 30 days has the same practical effect.
We do not use your data for automated decision-making that has legal or similarly significant effects on you, and we do not use it for direct marketing.
5. Where your data is stored
Survey responses are collected and stored on Zoho Survey, operated by Zoho Corporation PTE, India, with data hosted in Zoho's European Union data centres / Zoho Corporation, United States. Analysis is carried out by Arion Research in the United States. Working files are held on Google Workspace accounts operated by Arion Research.
Because Arion Research is located in the United States, data from respondents in the United Kingdom and Germany is transferred outside the UK and the European Economic Area. We protect these transfers with the UK International Data Transfer Agreement and the EU Standard Contractual Clauses, together with a transfer risk assessment under the EU-US Data Privacy Framework and the UK Extension to it. You can request a copy of the relevant safeguard by contacting us. Our processors are bound by data processing agreements that require equivalent protection.
6. Who we share your data with
Service providers (processors). Zoho Survey for collection and storage; Google Workspace for analysis files. They act on our instructions and may not use your data for their own purposes.
Panel operator. We return your panel reference number with a status of complete, screened out, over quota or rejected for quality. We do not send your answers.
The Sponsor. Aggregate findings, and a de-identified dataset from which we have removed panel reference numbers, IP addresses, session identifiers, precise timestamps and any free-text answer that has not been screened. The Sponsor is contractually required not to attempt re-identification and not to share the dataset further. Where a combination of country, industry and organization size could narrow a response to a small group, we further generalize those fields before release.
Legal requirements. Where required by law, a court order or a regulator.
Business transfer. If Arion Research is sold or merged, to the successor under the same commitments.
We do not sell personal data and we do not share it for targeted advertising.
7. How long we keep it
8. How we protect it
Access to survey data is limited to the Arion Research staff working on this study. Data is held on platforms with encryption in transit and at rest, access controls and audit logging. Direct identifiers are separated from answers as early as the process allows, and analysis is performed on the de-identified dataset. No method of storage is completely secure, and we will inform you and the relevant authority of any breach where the law requires it.
9. Your rights
Under the UK GDPR and the EU GDPR you have the right to ask for access to the personal data we hold about you, to have it corrected, to have it erased, to restrict how we use it, to object to processing based on legitimate interests, and to receive the data you provided in a portable format. You also have the right to complain to a supervisory authority.
Because we do not collect your name or contact details, we can only locate your response if you give us something that links to it, such as the date and time you completed the survey and, if you have it, your panel reference number. We may ask you for that information so that we can act on your request. We will respond within one month.
Withdrawal of your response is possible for 30 days after completion. After that period your answers will have been combined into the aggregate dataset, and once the panel reference number and technical data have been deleted we will no longer be able to identify which response is yours. That data is then outside the scope of these rights, as permitted by Article 11 of the GDPR.
To exercise any right, contact privacy@arionresearch.com. You may also complain to a supervisory authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in Germany, the data protection authority of your federal state, or the Federal Commissioner for Data Protection and Freedom of Information (bfdi.bund.de); in another EU country, your national authority.
10. Respondents in the United States
If you live in a US state with a comprehensive privacy law, such as California, Virginia, Colorado, Connecticut or Texas, you may have rights to know what personal information we collect, to access it, to delete it, to correct it, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information or share it for targeted advertising, and we do not use it for profiling that produces legal or similarly significant effects. Where these laws apply, the categories of personal information we collect are those listed in section 3, our sources are you and, where applicable, your panel operator, our purposes are those in section 4, and the categories of recipients are those in section 6. You may exercise your rights by contacting privacy@arionresearch.com. We will not discriminate against you for doing so. Arion Research does not currently meet the volume or revenue thresholds under the California Consumer Privacy Act; this section is provided as a matter of good practice.
11. Cookies and similar technologies
The survey platform uses strictly necessary cookies and local storage to keep your session open, to remember your place if you refresh the page, and to prevent duplicate submissions. These are not used for advertising or cross-site tracking.
12. Changes to this notice
We may update this notice while the survey is in the field. The version displayed when you start the survey applies to your response. The current version is always available at www.arionresearch.com/survey-privacy-notice
13. Contact
Arion Research LLC, 1800 JFK Blvd, Suite 300 PMB 90705, Philadelphia, PA 19103, USA, privacy@arionresearch.com.