Privacy notice
Information under Art. 13 GDPR for the survey “AI-Assisted Work Study”. Version 1.0, [date of launch].
1. Who runs this survey and is responsible for the data
Obed Paul P., MBA student at Munich Business School, conducting this non-commercial survey for an MBA master's thesis. The survey is hosted on the researcher's private domain (obedpop.com). It is not a commercial service and is not operated by Munich Business School.
Contact: [your MBS email]
Postal address: [optional: your postal address, or remove this line]
Supervisor: Prof. Dr. Nadine Chochoiek, Munich Business School.
Data protection contact at Munich Business School: [MBS data protection officer email, from the MBS privacy page].
2. Purpose
The answers are used only to analyse, for an MBA thesis, how AI-assisted work is made and whether it reaches use by others. Results are reported only as aggregated statistics (for example percentages and regression estimates). No individual answers are published.
3. What is collected
| Data | Details |
|---|---|
| Your answers | Multiple-choice answers about one project and broad background categories (age bracket, sector, experience band, occupation). No names, email addresses, employer names or free-text project descriptions are requested. |
| Technical survey data | Date of submission (day only), time taken to complete, survey version, the random order in which some questions were shown, and whether the response came from the pilot or the main survey. |
| Anonymous counts | If you do not consent or do not meet the participation criteria, only a counter is increased (e.g. “one person did not qualify”), with no answers stored. This is used to report the response rate. |
| IP address | Like any website, your browser's IP address is necessarily processed by the hosting provider to deliver the page and receive your submission. It is not stored with your answers, access logging is switched off, and the researcher has no access to it. |
Because no identifiers are stored, the stored dataset is intended to be anonymous. Small combinations of categories could in rare cases narrow a person down, which is why results are only reported in aggregate.
4. Legal basis
Your consent (Art. 6(1)(a) GDPR), given on the first page of the survey. Participation is voluntary, and not taking part has no consequences.
5. Storage in your browser
After you submit, the survey stores a small marker in your browser's local storage (the date of completion) to prevent the same device from submitting twice, and optionally your light/dark theme choice. These never leave your device. No cookies, analytics, tracking pixels, social-media plugins or externally loaded fonts are used. You can delete the marker by clearing your browser's site data.
6. Where the data are stored, and who processes them
The survey is hosted on Cloudflare Pages, and responses are stored in a Cloudflare D1 database restricted to the EU (EU jurisdiction: the database runs and stores data only inside the European Union). Requests are handled by Cloudflare's network at the location nearest to you. Cloudflare, Inc. acts as processor under its Data Processing Addendum, which incorporates Standard Contractual Clauses. Cloudflare is also certified under the EU–US Data Privacy Framework. No Cloudflare analytics, cookies or bot-challenge scripts are enabled for this site. Only the researcher has access to the stored responses. The supervisor and examiners may see the anonymous dataset for assessment.
7. How long data are kept
Responses stay on the AWS server only while the survey is open. When data collection closes (planned: [11 December 2026]), the researcher downloads the anonymous dataset and deletes the online database. The downloaded file is kept on the researcher's encrypted device until the thesis has been graded and any retention period Munich Business School requires for examination records has passed ([confirm with MBS]), and is then deleted. Anonymous aggregated results in the thesis are kept permanently.
8. Your rights
You have the right to access, rectify and erase personal data, to restrict processing and to data portability (Art. 15–20 GDPR), and to withdraw consent at any time with effect for the future (Art. 7(3)). Important: because no identifying information is stored, the researcher cannot find which response is yours once it has been submitted (Art. 11 GDPR), so an individual response cannot be withdrawn after submission. You can stop at any time before pressing Submit, and nothing is stored in that case.
You may lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, www.lda.bayern.de).
9. No automated decisions
No automated decision-making or profiling takes place. The comparison shown at the end of the survey is a simple average, displayed only to you and not stored.