GDPR, your data, and the data we can't hand back
If you have a Kanon account, you can download everything we hold about you whenever you like. If you answered someone's survey as a member, there's nothing to download — and that's anonymity working exactly as it should.
First, the question no one asks
Every data-subject right under GDPR — see my data, correct it, delete it — starts with the same step: find that person's data. Everything hinges on being able to identify whose records are whose. That single step is where accounts and survey responses part company.
Users: we know exactly who you are
To use Kanon as a group admin or viewer, you create an account. We hold your name and email address, so we can find your record in seconds and hand it all back. That's why the export is self-service: open your profile settings and choose Export my data to download everything we hold about your account. You can delete your account there too.
Members: there's no one to look up
A member never makes an account. They open a survey link, enter a postcode, and that's it. From that submission we keep no name, no email, and not even the postcode — it becomes an approximate point a short distance away and the original is discarded. The number you see on a map is a label, not an identity.
So if a member asked us to find, export or delete "their" data, we couldn't — there is nothing to search by. It isn't that we refuse a request; it's that the request has no starting point. Genuine anonymisation takes this data outside the scope of GDPR, because none of it is personal data any more.
It goes further than "no name"
We can't even link a person's responses to each other. If someone takes part in two different projects, they leave two unconnected submissions — we have no way of telling it's the same person, and no way of knowing whether anyone has answered a survey before. There is no member identity, within a project or across them. That's the point: the data describes a community, never a person.
Anonymised member data can't be handed back because there is nothing to hand back. Your account data can be, and is — on demand.