This summary explains which personal data Anvoria Refract™ processes in the participant portal and why it is needed.
Controller and contact
Steven Sabet is the controller for the processing of your data. For privacy requests, contact info@steven-sabet.eu.
Data processed
We process the access code, account and contact details, required profile data, optional professional context, assessment responses, calculated results, report and approval statuses, and technical security and audit data.
Purposes and recipients
We use the data to activate and secure your account, conduct and score the assessment, and provide your report. Steven Sabet personally reviews your report before you receive it. We also use the data to handle support and privacy requests. Access is limited to you and the authorised people needed for review and operation. Technical providers receive data only where required for hosting, email delivery or operation.
Retention and rights
Your results and PDF report for each package remain available in your account for 18 calendar months from the first personal report release. Access then ends and we review deletion of assessment data and reports that are no longer needed. Expiry does not trigger automatic erasure. You can also request deletion earlier. Statutory retention duties apply independently. Your profile provides correction, data export and deletion-request options. Depending on the applicable requirements, you may have rights of access, rectification, erasure, restriction, portability, objection and complaint to a data protection authority.