Data Protection and Privacy Rights

  • The General Data Protection Regulation (GDPR) is is a European Union law safeguarding personal data and upholding the privacy rights of everyone residing in the EU.
  • GDPR is considered the world's strictest data protection law, and we extend the same rights to anyone taking part in our survey, regardless of country of residence and citizenship.
  • For more info about GDPR, you may refer to this FAQ.

Information According to Art. 13 GDPR

Data collection within the scope of the research project "State of Crypto" at the University of Mannheim.
  • Controller:
    University of Mannheim
    68131 Mannheim
  • Data protection officer
    Universität Mannheim, L1, 1
    68131 Mannheim
    Tel: +49 621 181 1126

Categories of Data Processed

  • We will process data provided on a voluntary basis as answers to our survey. This may include information about race, email, and crypto addresses.
  • Apart from the data we visibly collect from you during the questionnaire, we will process IP address and other paradata provided by the browser.

Purpose of Data Processing

  • Data is collected via a public survey at the address The web site contains general information about the data collection process and invites user to join the survey. Data collected is stored in a server hosted at Heidelberg University in Germany.
  • If you decide to share your email or crypto address, you may be contacted in the future to receive updates about the State of Crypto Survey and/or invites to participate in future academic studies (hereinafter referred to as "updates and invitations").
  • Email and crypto addresses will be stored separately from the rest of the survey responses and linked via a pseudonym that only the researchers may decrypt.
  • Email addresses may also be collected via subscribe form on the home page after voluntary consent with the purpose to receive updates and invitations. These emails are stored encrypted in Germany (IONOS cloud).

Legal basis

  • 1. Conducting the research project:

    Art. 6 paragraph 1(a) GDPR, Art. 6 paragraph 1(e) in conjunction with Art. 6 paragraph 3 of the General Data Protection Regulation (GDPR) in conjunction with section 13 subsection 1 of the data protection act of the Land of Baden-Württemberg (Landesdatenschutzgesetz, LDSG BW)


  • The information collected in this survey will be stored indefinitely and may be made available to other academic researchers after the study is completed. In doing so, we will remove any potentially identifying information (if any was provided).
  • The information collected will be hosted by the University of Heidelberg University, Alfred-Weber-Institut für Wirtschaftswissenschaften, Grabengasse 1, 69117 Heidelberg. A data protection agreement (Art. 28 GDPR) has been concluded.
  • We use for e-mail-traffic IONOS SE, Elgendorfer Str. 57,56410 Montabaur. A data protection agreement (Art. 28 GDPR) has been concluded.

Period of storage

  • All research data are stored indefinitely.
  • This does not include your email address, provided you consented to receiving information about similar research projects. In this case, data are erased if you withdraw your consent or if email delivery permanently fails.
  • This does not include individual optional cases of processing that you agreed to in your declaration of consent. The data are stored until consent is withdrawn, the recording is no longer regarded as up-to-date or 30 years after the recording was made, depending on which case applies first.
  • Documents may be transferred to the respective university archive and are usually stored indefinitely.

Your rights

  • You have the right to obtain information about your data stored by the University of Mannheim and the right to have false data rectified.
  • Furthermore, you have the right to erasure, the right to restriction of processing and the right to object to the processing.
  • In case you gave consent to further optional cases of processing, you can withdraw your consent (completely or for individual cases of processing) at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
    In order to exercise your rights, please contact:

    Dr. Stefano Balietti
    Alfred-Weber Institute of Economics,
    University of Heidelberg, Germany
    European Center for Social Science Research, MZES
    Mannheim University, Germany
  • You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data infringes data protection regulations.
  • The supervisory authority in Baden-Württemberg is the commissioner for data protection and freedom of information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg):