Privacy policy
This self-check is built to be anonymous. The short version: we store the answers you give and the score we compute - and nothing else that could identify you. The long version follows.
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
Julien Leske · Create.dev Kopenhagener Straße 77, 10437 Berlin, Germany hello@create.dev
Content of the assessment is developed jointly with Eric Mahleb (Burnout Help Berlin).
2. What we process
When you complete the check and your result page loads, we store exactly the following, once:
• Your answers to the 23 BAT core items (Likert 1–5), and to the 10 optional secondary items if you chose to answer them • The computed subscale means (1.00–5.00) and the resulting risk tier (green, orange, or red) • The interface locale in use (en, de, or fr) • Whether you used the standalone site or the embedded version • How long your completion took (in milliseconds) • A server-side timestamp
We explicitly do NOT store:
• Your IP address • Your browser user-agent • Cookies (there are none - neither functional nor for tracking) • The referring page that brought you here • Any email address or other identifier • Any free-text input
There is therefore no way to link a stored response back to you - not by us, and not by anyone who might later obtain access to the database.
3. Purpose and legal basis
The only purpose is anonymous, aggregated statistics that help us improve the instrument and power the optional "community average" overlay - which is only shown once at least 50 responses have been collected.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest) - operating and improving a free, non-commercial self-help screening tool.
4. Recipients and cross-border transfers
• Hosting: Vercel Inc. (USA) - covered by EU Standard Contractual Clauses and the EU–US Data Privacy Framework. • Database: MongoDB Atlas (EU region) - GDPR-compliant operator within the EEA.
There are no third-party analytics, no advertising or retargeting networks, no social trackers, and no embedded content from third parties on this application.
5. Retention
Because the records are anonymous and contain no identifier, they are retained indefinitely for aggregate analysis. A selective deletion of a specific response is technically impossible - we cannot find yours.
6. Your rights
Under the GDPR you have the following rights in principle: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21).
Because we cannot tie any stored record to a specific person, we cannot execute a record-specific access or erasure request. You are welcome to contact us at hello@create.dev for any general question about the service or to request that we stop processing new submissions.
7. Right to lodge a complaint
Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61, 10555 Berlin https://www.datenschutz-berlin.de