How we hold what we hold.
Compass measures Labs; this page measures Compass. It names what we collect, how we hold it, who we answer to, and what we will not do regardless of consent.
§ 02
What we hold
| Data | Lawful basis | Retention |
|---|---|---|
| Email of the signed-in stewardused for sign-in only | Contract · 6(1)(b) | Until account deleted |
| Placed levels16 conditions per run | Contract · 6(1)(b) | Until Lab deleted |
| Per-member responseswhen multi-member is on | Explicit consent | Until revoked |
| Anonymised learningsopt-in, default on | Explicit consent | Until revoked |
| Sign-in IP, truncated to /24 or /48security forensics | Legitimate interest | 30 days |
| Consent ledger and audit log | Legal obligation · 5(2) | 5 years |
§ 03
What we will not do
- We will not use analytics tools or marketing identifiers. Compass carries no third-party scripts.
- We will not sell or rent any data, anonymised or not.
- We will not name a Lab in any external publication without its specific consent for that publication.
- We will not make the research panel a purpose of Compass.
Data controller · Cooperativa Integral Sulitania, CRL · NIF 518771571 · Castro Marim, Portugal · compass@syfers.eu · supervisory authority · CNPD · Comissão Nacional de Proteção de Dados (Portugal)