Privacy Policy

Your privacy is important to us

Ipsos Interactive Services SRL (“IIS”, “we” or “us”) is a company registered in Romania, with its registered address at 319 Splaiul Independentei, 1 Sema City Building, 4th floor, District 6, postal code 060032, Bucharest, Romania, registered with the Trade Registry under no. J40/1972/2009, EUID: ROONRC.J40/1972/2009, fiscal code/VAT code RO12998681.

We are part of the Ipsos worldwide group of companies. This Privacy Policy explains how we process your personal information we collect, when you (“Panellist”, ”you” or “your”) join our Ipsos iSay on-line panel (“Panel”) or whilst being a member of our Panel.

Contents

Short Form

Below we have summarised this Privacy Policy aiming to make the information more accessible. It is using the same numbering as in the full Privacy Policy, which you will find the full text by following the above links.

1. Why and how we collect information

1.1 Information we collect

We collect personal data to conduct surveys and research.

1.1.1 During registration

When you register for our Panel, you enter into a contract subject to this Privacy Policy and our Terms and Conditions. We collect information to invite you to suitable surveys and to verify your identity.

This may include:

- Information requested during recruitment.
- Updates you make to your profile.
- Device-related information such as device ID and operating system.

This information is also necessary to fulfil rewards.

1.1.2 During surveys

When you take part in surveys, we collect information based on your consent. Participation is voluntary.

1.1.3 While you are online with us

We collect information via cookies for statistics, functionality, quality control, and fraud prevention. We also track membership conversions if you came from a third party.

1.2 Information from other sources

We may also collect information from:

- Public sources.
- Acquisition partners.
- Clients who wish to combine your data with theirs.
- Segmentation partners.
- Companies selling data for fraud prevention or profile enhancement.

2. Legal basis for collecting information

We collect and use data based on various legal grounds:

2.1 Contract

We process your data based on the contract you enter by joining the Panel.

2.2 Consent

We seek your consent for specific uses of your data, including sensitive data like racial or ethnic origin, health information, etc.

2.3 Legal obligations

We have legal obligations to retain certain financial records, such as rewards or prize fulfilment.

2.4 Legitimate interests

We use your data for our legitimate business interests, including fraud prevention, quality control, and security.

3. Types of personal data we collect

We collect data you provide during registration, surveys, and through feedback. This may include social media profile information, device information, and sensitive personal data (with your explicit consent).

4. How we use your information

We use your data to:

- Fulfil our contract with you.
- Keep records of panellists.
- Send survey invitations.
- Verify your identity.
- Maintain quality control and prevent fraud.
- Analyse survey responses.
- Enter you into prize draws.
- Create anonymous profiles.
- Send newsletters and other communications.
- Ensure security and compliance with legal obligations.

5. Sharing your data

5.1 Within Ipsos

We may share your data with other Ipsos companies for global surveys and data analysis, subject to data protection laws.

5.2 Our clients

We will ask for your consent before sharing identifiable data with clients.

5.3 Exceptional cases

We may share data to comply with legal requirements, protect our rights, or during business restructuring.

6. Information about children

We may invite children under 16 to participate in surveys with parental consent.

7. Use of Cookies and similar technologies

We use cookies to collect information from your device for various purposes, including quality control and fraud prevention.

8. Use of digital fingerprinting and device data

We collect device information to create unique digital fingerprints for fraud prevention.

9. Data retention periods

We retain your data for different periods depending on its use and legal requirements. For example, profile information is kept for as long as you are a panellist, and survey answers are anonymized after 12-36 months.

10. How we secure your information

We take various measures to protect your data, including physical security, encrypted connections, and regular security audits.

11. Automated decision-making

We use automated processes for tasks like sample selection and fraud prevention. You have rights regarding these automated decisions.

12. Your rights and how to contact us

You have rights to access, correct, transfer, and erase your data. Contact us at [email protected] for any inquiries or complaints.

13. Changes to this Privacy Policy

We may update this policy and will inform you of changes via email or when you log in.

14. Useful Links

- National Supervisory Authority for Personal Data Processing
- ESOMAR (World organization for market research)

Full Privacy Policy

1. Why and how we collect information from you

1.1. Data we collect from you

The main purpose for collecting personal data (“information”) from you is the performance of our survey activities or research activities you might participate in.

1.1.1. During the registration

By registering with our Panel, you enter in a contract with us, which is subject to this Privacy Policy, as well as of our Panelʼs Terms and Conditions (“Terms and Conditions”). This is the basis on which we collect the initial registration information and any updates thereto that you make to keep your Panel profile up to date.

We fulfil this contract by inviting you to appropriate surveys. For this we need to collect and process (including by automated methods) information:

• that is requested during the recruitment stage; and/or
• which may subsequently be added to your Profile; and/or
• that we collect in accordance with this Privacy Policy.

We need this to ensure we can invite you to appropriate surveys and to ensure that only real people join the Panel. For example this might include connecting to a third party identity verification provider.

This information will also be required to fulfil rewards. This is also explained in more detail in our Terms and Conditions.

We also collect certain information concerning the device used to sign up and/or log-on, including device ID and operating system used and, if you consent, the advertising ID or the Identifier for Advertisers.

Certain information you provide may be used to verify whether we wish to enter into the contract with you or whether to terminate it. In this respect please also see paragraphs 11 of this Privacy Policy and 15 of our Terms and Conditions.

Only the information marked as “required” must be provided, but the more additional information you provide, the more relevant and meaningful the survey invites will be. Failure to provide the personal data identified as “required” in the registration form or in other forms/fields in the Panel’s website/mobile application or to allow us to process such mandatory personal data may affect our ability to accomplish the purposes stated in this Privacy Policy and may prevent you from registering as a Panel member or otherwise benefit of our services.

Other personal information, like the special categories of personal data, provided during the registration or which you may subsequently add to your profile might also be used later, based on your consent or even explicit consent by us for screening purposes in order to invite you to appropriate surveys and to enable you to “skip and prefill” when participating in our surveys.

1.1.2. During a survey

We also collect information based upon your consent, in particular when you respond to any survey invitations we have sent or that you may otherwise voluntarily provide. Responding to surveys is entirely at your choice.

There might also be situations where we are seeking your further or even explicit consent where this might be appropriate or required.

1.1.3. Whilst you are online with us

We also collect personal information based on your Cookie consent (see also below at paragraphs 7 and 8). This type of information is required for statistical purposes, functionality, quality control, validation, fraud prevention and control, and for performance analysis. If you came to the recruitment site from another third party, we also track any conversion to membership.

Based on your acceptance of this Privacy Policy, during your Panel membership, we also automatically collect information about your device(s) to protect our interests or, subsequently, those of a third party (generally, a client or partner of IIS/Ipsos group affiliates or other panellists) to prevent fraud and for security checks (see also below at paragraph 8).

1.2. Data we may collect and use from other sources

As set out below, based on our legitimate interest to improve the relevance of the surveys we invite you to and to provide more context to any responses, we may use information coming from other sources. Those sources might be:

• Public sources: for example, we may compare the postcode you provided with those available from public registers to determine that you live in a certain catchment area for a particular local authority or electoral constituency. We may also use publicly available APIs (which allow two applications to talk to each other) to obtain data from public websites. For example, we might use data from X (former Twitter) and YouTube (which is part of Google). Much of this information is non-personal, but it may include social media handles, and associated public posts or comments (but never private posts or account information).
• Acquisition partners: if you had registered with an organisation to receive opportunities from companies like IIS, that organisation will pass your name and contact information to us so we can contact you about joining IIS.
• Our clients: who may ask us to combine your data, such as your survey responses, with information they already hold, so they can use the combined data to perform further detailed analysis. We will only agree to do this if we are sure that our clients will not be able to identify you from the combined dataset, or if you have given your consent to be identified.
• Segmentation partners: we may purchase data from companies which help us to categorise our panellists’ data into groups or ‘segments’ based on a classification of consumers devised by the segmentation partner. We add the segment information we purchase to the data we hold about you.
• Other companies that sell data: we may purchase data from companies that sell certain types of data that are valuable to us, be this to enhance the security and integrity of our panel, fraud prevention and detection or profile enhancement. In these cases, we will either match the data ourselves, or we will ask these companies to match the data on our behalf. As with our other service providers, we have contractual safeguards in place to ensure that these companies delete the data coming from us once the match has been completed, and they do not disclose or use those data for any other purpose than the one defined by IIS.

More details on how these processes and the Panel work can be found in our Terms and Conditions.

2. On what basis we collect and use information from you

Our processing of your data is based on various grounds, depending on the nature of the collection, source and purpose. Depending on the circumstances, a different legal basis might apply to the same data. The legal bases have already been outlined above.

2.1. Contract

As described above, we will process your personal data based on the contract you entered into by joining the Panel.

We apply the contract as lawful basis of processing for the following categories of personal data: first name, last name, month of birth, year of birth, gender, email address, mobile number, nationality/citizenship (in some cases), postcode, IP, online & device IDs, age, panellist ID and other IDs based on the relevant processing activity (e.g. Order ID for order fulfilment), household size and household income, hobbies and interests and general profile information like: travel, special studies and communities, social media consumption and internet use, technology, home and garden, consumer information, consumption information, technology, personal care, free time, lifestyle, occupation.

2.2. Consent

In various circumstances, or as described in this Privacy Policy, we will either seek your consent or explicit consent. For example, we might ask you to participate in a specific study or study type, that will require the sharing of certain information with a client or third party, in which case we will ask for your further consent.

By participating in a survey, you are also consenting to the processing as may be set out specifically for such survey.

We apply consent for the following categories of personal data: first name, last name, email address, mobile number, advertising ID (ADID), panellist ID and other IDs based on the relevant processing activity (e.g. Order ID for order fulfilment), IP, online & device IDs, age, home/residence address and postcode, your responses to surveys.

For the use and collection of any special categories of personal data, we will always seek your explicit consent. The following categories of personal data are generally considered to be sensitive and may be subject to special protection in your jurisdiction:

- racial or ethnic origin;
- political opinions;
- religious or philosophical beliefs;
- trade union membership;
- genetic data;
- biometric data;
- data concerning health;
- data concerning sex life or sexual orientation;
- data related to financial information;
- data relating to criminal convictions or offences.

2.3. Legal obligation

We have a legal obligation to keep certain financial records related to any rewards or prize fulfilment (should you win). The processing for such purposes is based on the accounting, tax and financial requirements imposed by the Law no. 227/2015 - the Romanian Fiscal Code, as well as by other related complementary applicable Romanian laws. More detailed information on the applicable laws can be obtained by contacting us as set out at paragraph 12.

We apply the legal obligation as lawful basis of processing for the following categories of personal data where applicable: first name, last name, email address, mobile number, nationality/citizenship, home/residence address, postcode, reward or prize and its value, personal identification number.

2.4. Legitimate interest

Generally, we process your personal data on the basis that it is necessary for our legitimate interests we pursue as a business. We are dependent on our ability to use your personal data:

• to produce insights for our clients,
• to carry out our activity in good faith and for the good management of the Panel,
• to operate in accordance with the applicable standards in the market research field, and
• to act in compliance with our internal or Ipsos group corporate regulations (or those of our clients or partners).

In addition, legitimate interests pursued by us are the prevention of fraud, ensuring security, quality and its controls, as well as securing, protecting and maintaining a high quality of our Panel. We will notify you as soon as your account has been flagged as displaying fraud indicators, by using the contact information available to us in your account.

We apply legitimate interest for the following categories of personal data: first name, last name, email address, mobile number, advertising ID (ADID), home/residence address, postcode, panellist ID and other IDs based on the relevant processing activity (e.g. Order ID for order fulfilment), IP, panel registration date, panel unsubscribed date and as set out in paragraph 1.2.

3. What personal data do we collect about you?

We collect the information you provide by email and by completing our recruitment questionnaire when you join our Panel.

We may collect your basic social media (e.g. Facebook, Instagram, Google, TikTok, LinkedIn, X (former Twitter), Apple, etc.) profile information (e.g. your name, e-mail address, gender, birthday, location and/or phone number), if you decide sign-up and connect to us using the Ipsos iSay related application (e.g. Facebook). Please note that not all of these social media sign-ups might be available.

In case the registration process is not successfully completed and regardless of the reasons, your information will not be retained by us, apart from some limited information that will be retained to support and maintain our quality programs or to prevent any fraud or misuse.

We also collect the information you voluntarily provide during the registration, when completing any of the surveys we invite you to participate in, or when you provide feedback, comments or other information on our panellists’ website/mobile application.

When you participate in an online survey, we also collect some passive data, as described below at paragraphs 7 and 8, for statistical purposes, quality control, validation, fraud prevention and fraud control.

We also collect the information described above under 1.2.

In some cases, during our work, we may ask you to provide certain sensitive personal data, for example your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership or data concerning health or sex life. You do not have to answer these questions and such questions will always include a "prefer not to answer" option. Responses to these questions will remain confidential unless you explicitly consent to provide such answers. We will only provide this type of information to third parties with your prior explicit consent.

To benefit from an improved experience at survey level and to avoid being asked in the relevant surveys about those sensitive personal data you can activate a “skip and prefill” functionality. This separate explicit consent is available in your iSay account/Panel profile dashboard. There you also have the option to withdraw consent (opt-out) or re-provide explicit consent (opt-in) at any time.

We collect certain information about your device, and the hardware and software present on your device, by using Cookies (as defined below and as set out below at paragraph 7), like your IP address, the country where your device is located, operating system, screen display settings, browser type, use of Flash and Java and whether your device has a webcam or not.

4. How will we use the information?

We will use the information collected to:

• Fulfil our contract with you.
• Keep a record of all panellists.
• Send you invitations to participate in surveys that are relevant to you, based on the information in your profile.
• Send you SMS messages to your mobile phone number containing verification codes. This process is needed to verify your application, to activate your Panellist account, to validate various changes in your profile information and to verify your reward redemption. For these purposes we will share your phone number with our trusted vendors that provides us with these services (the list of trusted providers can be found here).
• Keep financial records related to your rewards fulfilment and related to any prize fulfilment (should you win) and, generally for the purpose of complying with legal obligations regarding financial and administrative management of the Panel.
• Support and maintain our quality control, fraud prevention and control programs, security checks. For this we will share certain information about you with our trusted vendors for them to carry out the necessary checks (the list of trusted providers can be found here).
• Identify if you are an existing member of the Panel or determine if your membership is a result of advertising we paid for. For this we will share certain information about you with our trusted vendors for them to carry out the necessary checks (the list of trusted providers can be found here).
• To verify whether we wish to enter into the contract with you or whether to terminate it. For this we might also share certain information about you with our trusted vendors for them to carry out the necessary verifications (the list of trusted providers can be found here).
• Add existing personal information about you to any of your survey responses (e.g. general geographical location, other general information regarding your household or consumer behaviour, ethnicity, data concerning your health or other special categories of personal data, occupation categories etc.).
• Perform an analysis on the survey responses and to produce statistical survey results or other survey reports.
• Enter you into any prize draws that you might be eligible to take part in or, if invited to do so, you have asked to be registered in.
• In limited circumstances provide your responses and information about you to a client for further analysis. We will pseudonymise such information before providing it, i.e. any directly identifying information would be replaced with an ID created by us.
• With your consent (or explicit consent if sensitive personal data involved), which might be asked for in a specific survey, and limited to that specific survey, to pass your individual survey responses together with your personal information to the client who commissioned the survey. The client will use this information only for research purposes, as will be explained in the relevant survey.
• Subject to your prior consent, provide your information to a named client so it may use this information to invite you to participate in further research they conduct.
• With your prior consent (or prior explicit consent if sensitive personal data involved), we may forward your personal information and individual survey answers to another market research institute, which is our business partner, for one or more of the following purposes:

   o sending you survey invitations by e-mail or by phone, with links leading to surveys or,
   o using your personal information for prize/gift delivery or prize draws (if the case) related to the participation in the market research survey conducted by the institute.

Such third party will be under the obligation to use these data only for statistical, survey, research and/or prize/gift delivery and/or prize draw organisation purposes and it is bound not to forward or further disclose data such as name, postal address or other personal information that could be used to identify you.

• Create anonymous, statistical profiles of the Panel membership based on the information provided by panellists.
• With your consent, to pass your information to other Ipsos group companies so that they may invite you to participate in studies they are carrying out and that may be relevant to you.
• Invite you into various ad platforms (e.g. Meta) to be part of a custom audience and be exposed to certain campaigns. This would be followed up by surveys to test the impact of such campaigns placed in the social media platforms (ad testing purposes). If you agree to participate, we will pass some limited information of yours (e.g. email address, Advertising ID (mobile ADID) or mobile number) to the social media platform (e.g. Meta) to match you to the relevant custom audience.
• Invite you into various social media platforms (e.g. Meta) to be part of a custom look-a-like audience and be exposed to certain campaigns for analysing the characteristics and behaviours of customers and then finding similar individuals who may be interested in the business's products or services. For these purposes, based on your consent, we will pass some limited information of yours (e.g. email address, Advertising ID (mobile ADID) or mobile number) to the social media platform (e.g. Meta) to match you to the relevant look-a-like audience.
• Send you newsletters, announcements and other communications as set out in our Terms and Conditions. We are using one of our trusted providers for this purpose (the list of trusted providers can be found here).
• When you agree to take part in product testing, to arrange for such product to be sent to you.
• In case you have become a member of the Panel through a third-party supplier, this supplier may be informed that you have become a member of the Panel.
• Based on the information you provided, we might invite other members of your household, to participate in surveys. In case such household member is a child, please also see below at paragraph 6.
• Send you invitations by text message or other messaging service, to take part in surveys.
• Send you invitations by text message or other messaging service to inform you on our engagement campaigns and invites into our various research opportunities.
• Detect if your computer or mobile device has a webcam attached to it, so that we may offer you specific survey sections that require webcam usage.
• To reply to your inquiries, to investigate your requests or complains or to take any necessary action, that was submitted by you through our Contact Support form available on Panel website/mobile application.

As part of our online advertising and internet usage studies, we may also:

• Send your pseudonymised email address to certain ad-networks to determine or trigger advertising exposure. We would do this, for example, to understand the actual digital exposure to advertising, e.g. by sending you a survey invite about any such advertising exposure you may have had.

To do any of the above, we might send your information to our sub-contractors or affiliated companies who carry out some work on our behalf, control and responsibility, including for data hosting or as described at paragraph 8. Some of these sub-contractors may be based outside the United Kingdom or European Economic Area, in countries for which no adequacy decision exists. However, these sub-contractors will be under the obligation to abide by the same data privacy requirements and security arrangements as ourselves and will be subject to appropriate safeguards (including standard contractual clauses), a description of which can be obtained by contacting us as set out at paragraph 12.

We will take all reasonable steps to ensure that any personal data we process are accurate, adequate, relevant and not excessive, given the purpose for which they were obtained. We will not process personal data obtained for one purpose for any unconnected purpose unless you have consented to this.

We will not use your information for any purpose other than our survey and work or as described in this Privacy Policy and the Terms and Conditions. We will NOT try to sell you anything, nor use your information for marketing purposes, except to promote this Panel to you (e.g. invites to participate in other surveys). We will not pass your information to third parties for marketing or advertising purposes.

5. Whom we may share your personal data with

The digital age has created increasingly complex operational requirements. Although we try to limit the number of entities that we rely on, some external processing is inevitable, as described below:

5.1. Within Ipsos

As a global organization Ipsos may have to transfer personal information to other Ipsos companies in the group that are located in different countries. E.g. a survey that is conducted in multiple countries, or where our global data teams analyse data from across the world. Any such transfer will be conducted only according to the applicable data protection laws. Most of our data processing is being conducted directly by us and Ipsos Data Services Pty Ltd, an entity located in India. For example, any transfers that occur within Ipsos group to countries outside the EU/EEA, for which no adequacy decision exists (as in the case with India), are being conducted under the EU Commission’s standard contractual clauses. A copy of the safeguard (like the pseudonymisation of your membership ID) can be obtained by contacting us as set out in paragraph 12.

5.2. Our clients

We will always ask you first before sharing with our clients any research data that may contain your personal data or that would allow you to be identified and inform you which data would be shared. Your consent is entirely voluntary and up to you. Afterall, the vast majority of our business consists of the provision of anonymised insights to our clients. Exceptionally we may be asked by our clients to combine your research data with their own data to obtain even greater insights or to improve their products or services. In that case, we will be asking for your consent.

5.3. Other exceptional cases

In exceptional cases we might have to share personal data with other organisations:

• to comply with legal or regulatory requirements (or if we reasonably believe that we need to disclose your information for such purposes);
• to establish, exercise or defend our legal rights, including with our legal and other professional advisors;
• if we were to restructure our business or to buy or sell any business, part of the business and/or assets, we may share your data with the prospective buyer or seller; or
• if all or substantially all of our company assets are acquired by another party, your data will be one of the transferred assets.

6. Children

Based on the general information you provided about your household, we might wish to invite children under 16 years of age, that you indicated as present, to participate in a survey or other research activities. In such cases, we will always contact you first and require your prior consent as parent or a legal guardian, before inviting such child to take part in the research.

7. Use of Cookies and similar code

By joining our Panel and taking part in our online surveys, you agree to our use of cookies and similar technologies, including pixels (“Cookies”) and the collection of information from your PC/laptop and/or other computing device you may use whilst taking part in our online survey activities, as outlined below.

Check here our full Cookies Policy (including list of cookies).

Our Panel website and online surveys collect information using Cookies and other functionally similar technologies. Cookies are files stored on your computer. Further details of what cookies are, can be found by visiting www.aboutcookies.org

8. Use of digital fingerprinting, device data and other information on your device

We also gather certain information about your PC/laptop, mobile device, or other devices you use, and the hardware and software present on these devices. For example, this includes the IP address of your internet connection, the display settings of your monitor, the type of browser used, the type of operating system, the country where your device is located in, whether your device has a webcam, etc. This information is sent to our trusted provider who converts it into a unique serial number (the digital "fingerprint") and determines if it matches previous digital fingerprints. The data collected in this process are stored on secured servers and are only used for quality control and fraud prevention purposes. These data are also used to help prevent panellists from completing the same survey more than once. They are not used for any other purpose.

We also use your mobile device’s ID to identify if you are an existing member of the Panel and to determine if your membership is a result of any of our recruitment advertising.

9. How long will we keep the information you provide?

We will keep your profile information for as long as you are a Panellist. Beyond that we will retain information up to the limits set out below:

• 2 years for the information related to any redemption of your points.
• 3 months from termination, if your membership is terminated by us purely for unilateral business decisions (e.g. we decide to close the Panel entirely or parts of it).
• 2 years, if we terminate your membership for fraud, suspected fraud, breach of the Terms and Conditions, Privacy Policy, or survey rules.
• 2 years, if you terminated your membership, but we have already suspected or identified your account as fraudulent before you terminated.
• 6 months, if you terminate your membership, but we have neither suspected nor identified your membership as fraudulent account before you terminated.
• 3 years for the information related to any winnings (including prize fulfilment information) in a prize draw.
• 2 years the information associated specifically to any requests exercising any of your rights mentioned at paragraph 12.
• Indefinitely the information required to honour any “do-not-contact” request. We will remove you from such suppression list only if you expressly request so (opt-in to be contacted again).
• 6 months starting on the date you have accepted the Terms and Conditions or the date you have provided the email confirmation, as the case may be, the information already collected as part of the registration process that is not successfully completed regardless of the reasons of non-completion (e.g. you have not confirmed your email or phone number, or completed your mandatory profile survey), to support and maintain our quality programs and to prevent any fraud or misuse.
• For as long as there is a legal or regulatory requirement under applicable law.
• For as long as it is required for the establishment, exercise or defence of a legal claim.

Apart from your profile information, we also retain the answers you give in surveys. The answers provided by you will be pseudonymised by us for security reasons and will be anonymised before being shared with our clients unless you have given your consent to being identified. We will also remove the link between your profile information and the answers you provided within twelve (12) months from the end of the project, to ensure that these answers cannot be traced back to you. In particular cases, and only as an exception for long term projects, we will only remove the link between your profile information and the answers you provided within thirty-six (36) months from the end of the project.

Information shared with our third-party suppliers (such as the digital fingerprint supplier, for example) is pseudonymized to ensure that this information cannot be traced back to your account by them or any other third party. In addition, while the device information itself may be stored on our side for longer periods of time, the recipients of such information are required not to retain the data itself or the link between this information and IIS for more than 180 days. If you consented to be part of a custom audience or look-a-like audience, your data will be processed for up to 180 days starting on the date we will pass some limited information of yours (e.g. email address, Advertising ID (mobile ADID) or mobile number) to the social media platform (e.g. Meta), before the advertising or social media platforms delete such audiences together with your data.

10. How do we ensure your personal information is secure?

We take our responsibility to keep your personal information secure very seriously. Although there is no absolute security, we take every reasonable precaution to ensure your information is protected from loss, theft or misuse. These precautions include appropriate physical security of our offices, controlled access to computer systems, and use of secure, encrypted internet connections when collecting personal information and the use of data centres providing high levels of physical security and redundancy to host your data and our systems.

As part of our commitment to the security of your information, we have regular internal and external audits of our information security. IIS is certified to be compliant with the requirements of the International Standards for Information Security ISO 27001, Market, Opinion and Social Research ISO 20252, and Quality Management ISO 9001.

Where one of our providers is not based in the United Kingdom, Switzerland, the European Economic Area (EEA) or a country for which there is a data protection adequacy finding, appropriate safeguards have been put in place, including Standard Contractual Clauses as approved by the EU Commission. A copy of the safeguards can be obtained by contacting us as set out in paragraph 12. Otherwise, personal data may be sent to other third countries without implementing any other safeguards, relying on an adequacy decision by the relevant authorities.

11. Automated individual decision-making, including profiling

Regarding any decisions based solely on automated processing, including the creation of a profile, you have certain rights. In certain situations, within the purposes mentioned above, we process your personal data including through automatic processing mechanisms (including by creating the profile). If we refuse, suspend or discontinue the provision of a product, reward or service as a result of any automated decision, we will inform you about this, and you will be able to obtain relevant information about the logical mechanism which is the basis for making that decision. You will also have the right to obtain human intervention from us, to express your point of view and to challenge that decision. To do so, please contact us as set out in paragraph 12.

Specific decisions about your account, that are based on automated processes, are listed below. In case you disagree with any such decision applicable to your case, please contact our Data Protection Department as set out at paragraph 12.

• Panel registration leading to the final resolution of registering you as a Panel member.
• Sample selection, to be invited as respondents to the specific survey as per the survey sampling specifications.
• Incentives allocation according to the applicable incentives program.
• Our Panel quality program ensures the Panel and sample quality and accuracy as set out in our Terms and Conditions (i.e. quality control, validation and security checks, fraud prevention and fraud control).

12. How to contact us to access your information, correct it, request its transfer and/or erase it and/or how to complain

The right of access

You have the right to request a copy of all the information we hold about you. More precisely, you have the right to obtain from us a confirmation your personal data is processed or not, and, if so, access to such data and relevant information in connection with such data, such as: the purposes of the processing, the categories of data concerned, the recipients or categories of recipients to whom the data has been or are to be disclosed, in particular recipients from third countries or international organizations; where possible, the period for which data is expected to be stored or, if that is not possible, the criteria used to establish that period; or, where the data are not collected from you, any available information on their source.

The right to rectification

You also have the right to request the correction of any personal data we hold about you. Depending on the purpose of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The right to data portability

You have the right for all the information you have provided to us to receive it in a structured, commonly used, auto-readable format and you are entitled to have it transferred to another party without any obstacles from us, where the processing is based on your consent or the need to execute our contract, and the processing is carried out by automatic means.

In exercising the right to data portability, you are entitled that your personal data to be transmitted directly from us, only where this is technically feasible.

The right to erasure (“the right to be forgotten”)

In some circumstances, you also have the right to request from us the deletion or erasure of the personal information we hold about you, subject to the limitation set out above under paragraph 9. Generally, data subjects have the right to obtain, without undue delay, the deletion of their personal data, if personal data are no longer necessary for the purposes for which they were collected or processed; if data subjects withdraw their consent on the basis of which processing is carried out and there is no other legal basis for processing; or if personal data must be deleted for compliance with a legal obligation of IIS.

The right to restriction of processing

You have the right to obtain a restriction on the processing of your personal data in the cases and conditions provided by the law, such as the situation in which the accuracy of the data is disputed or we do no longer need the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.

If the processing has been restricted, such personal data may be processed, except for storage, only with your consent or for the establishment, for exercising or for the defence of a right in court or for the protection of the rights of another natural or legal person; or for reasons of public interest.

The right to object

At any time, you have the right to object, for reasons related to your particular situation, to the processing based on the legitimate interest of IIS or of third parties, including to the profiling related to such processing. Where you exercise your right to object, IIS will no longer process personal data unless we demonstrate that we have legitimate and compelling grounds for the processing which override your interests, rights and freedoms; or that the purpose of processing is the establishment, exercise or defence of a right in court.

If you would like to exercise any of your above rights, have any questions or require further information about our Privacy Policy or our compliance with data protection laws, please contact our Data Protection Department. They can be contacted:

By email sent to: [email protected] with “Ipsos iSay Panel” as subject line.
Or write to us at: Ref: Ipsos iSay Panel
Data Protection Officer
Ipsos Interactive Services SRL
319 Splaiul Independentei, 1 Sema City Building,
4th floor, District 6,
060032 - Bucharest, Romania

Please quote your Panel membership number (if known) or the email address you used for your Ipsos iSay registration in your email or letter.

You can contact our data protection officer by writing to [email protected].

If you have any complaints, we will appreciate if you give us an opportunity to first try and resolve it amiably first, by contacting us as set out above. You are, however, entitled to contact our regulatory body, the National Supervisory Authority for Personal Data Processing (ANSPDCP) at: www.dataprotection.ro

ANSPDCP 28-30 General Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania.
Tel. +40.318 059 211, Fax +40 318 059 602, email: [email protected]
Other national data protection authorities are also likely to accept your complaint.

13. Changes to our Privacy Policy

We keep this Privacy Policy under regular review, and we will place any updates on this webpage. We will also inform you of any changes via email or when you log-on after any change. This Privacy Policy was last updated on 26/08/2024.

14. Useful links

National Supervisory Authority for Personal Data Processing
ESOMAR (World organization for market research)