Data Processing Agreement for the Survey “Ukrainians’ Attitudes Toward Mobilization and Vision of a Fair Military Service Model”

1. PARTIES AND PURPOSE

This Data Processing Agreement (hereinafter referred to as “Agreement”) is entered into between:

DATA CONTROLLER:
Public Organization “Foundation for Democracy Assistance”
EDRPOU Code: 43134930
Address: 03049, Kyiv, Bohdanivska St., 5A/37
Email: [email protected]
Phone: +38 (063) 765 90 85
(hereinafter referred to as “Controller”)

and

DATA PROCESSOR:
Tally BV
Registration Number (KBO/BCE): 0763.816.279
Address: Mechelsesteenweg 271 bus 1.1, 2018 Antwerp, Belgium
Website: https://tally.so
(hereinafter referred to as “Processor”)

The Controller uses the Tally.so platform to conduct an anonymous survey for the purpose of scientific research on public opinion regarding mobilization and a rotational military service model.
The survey does not collect personal data as defined by GDPR.

---

2. LEGAL BASIS

This Agreement is a public confirmation of the Controller’s acceptance of the terms of the public DPA of Tally BV, which is published and applies to all users of the service.

Data processing is carried out in accordance with:

• Article 28(3) of Regulation (EU) 2016/679 (GDPR);
• Law of Ukraine “On Personal Data Protection” (Articles 6, 11);
• Privacy Policy and Data Processing Addendum of Tally BV, which are an integral part of this Agreement.

---

3. MAIN TERMS

3.1. Data Processing

• The survey does not require identification of individuals.
• Respondent data (responses, aggregated demographics, completion time) are stored in anonymized form.
• IP addresses, cookie identifiers, geolocation, or personal contact data are not processed unless the respondent voluntarily provides them in a separate form.

3.2. Role of the Parties

• Tally BV acts as the Data Processor and provides hosting, encryption, storage, and technical security.
• Public Organization “Foundation for Democracy Assistance” is the Data Controller, which determines the purpose of the survey, the content of questions, and ensures anonymity.

3.3. Public Documents Governing Processing

• Data Processing Agreement: https://tally.so/help/data-processing-agreement
• Privacy Policy: https://tally.so/help/privacy-policy
• GDPR & Security Statement: https://tally.so/help/gdpr

These documents, together with this Agreement, constitute the complete legal basis for data processing within the framework of the project.

---

4. RESPONSIBILITIES

The Controller is responsible for:

• the lawfulness of data collection and the content of questions;
• properly informing respondents about anonymity conditions;
• storing aggregated results.

The Processor (Tally BV) is responsible for:

• technical security, hosting, protection, and encryption;
• compliance with GDPR requirements within its infrastructure.

Neither party is responsible for the identification of respondents if data is collected in anonymous form.

---

5. TERM AND DATA DELETION

• The Agreement is effective from the launch of the survey until the completion of result storage.
• Tally BV deletes raw data from servers 90 days after the form is closed (in accordance with its policy).
• The Controller retains only aggregated statistical results in anonymized form.

---

6. APPLICABLE LAW

This Agreement is governed by the laws of:

• the European Union (GDPR) — with respect to the Processor;
• Ukraine — with respect to the Controller’s activities.

Any disputes shall be resolved through negotiations or in accordance with the jurisdiction of the state where the Controller is located.

---

7. CONFIRMATION

The use of the Tally.so platform to collect responses constitutes confirmation of acceptance of the public Data Processing Addendum (DPA) of Tally BV.
This Agreement certifies that the Controller fulfills its obligations regarding transparency and complies with the principles of anonymity provided for by GDPR and Ukrainian law.