PRIVACY POLICY
WHO ARE WE?
Field Insights CEE, a market research company, founded and operating in accordance with Romanian laws, with its headquarters at 4 Splaiul Unirii, building B3, Entrance 3, 1st floor, office no. 1.1, Sitraco Center, Bucharest 4, sole registration number RO21044921 (hereafter called “Field Insights”) is responsible for processing your personal data collected as part of the market research we carry out.
GDPR
Since the 25th of May 2018, European Regulation no. 2016/679 concerning the general data protection (GDPR) of individuals and the free circulation thereof is applied in all of the European Union states.
In order to comply to the new data protection regulation, Field Insights commits to all efforts necessary to define and implement procedures with the purpose of protecting the personal data we collect.
WHAT INFORMATION DO WE COLLECT
PERSONAL INFORMATION
Which are the personal data we can collect and how do we collect it?
The personal data that Field Insights collects and processes are, mainly, the following: identification data (first name, last name), e-mail address, phone number, and these are collected directly from you via the questionnaire you answered by phone, face-to-face, online or via e-mail. It is possible that we might collect data through cookie applications (not limited to): IP address, internet browser, cookie ID, location etc.
What do we process your personal data for?
We collect your information for specific and legitimate reasons, including but not limited to the following:
• In order to sign or execute a contract between you and us (for example registering for one of our panels);
• Processing transactions when taking part in a research involves paying the respondent;
• In order to verify that the questionnaires were properly carried out;
• In order to answer your questions and queries;
• For marketing purposes;
• In order to diagnose or remedy technical issues;
• In order to protect ourselves from cybernetic attacks;
• In order to create and/or upkeep accounts;
• In order to comply with legislation.
What are the legal bases for data processing?
• Data processing is required to sign or execute a contract between you and us, such as executing a Contract for registering to one of the panels we manage
• Data processing is necessary in order to fulfil a legal commitment, such as keeping accounting documents for 10 years (in the case of payments made / participation incentives given for taking part in our research projects)
• Data processing is necessary for a legitimate interest to carry out an opinion poll / market research, either our own or made by the client interested in that research.
Security measures designed to protect your personal data
When working with personal data, nothing is more important that how you understand to safeguard the security of this data. We tried to do everything currently technically possible to maintain an extremely high standard of security.
We have built a set of physical, technical and administrative security measures to help us protect your data as well as possible.
We have structured access to your personal data based on rights hierarchies, so that Field Insights employees can only access your data when they are entitled to do so. Furthermore, we train our employees on the importance of confidentiality and of maintaining confidentiality and security for your data. We commit to taking proper disciplinary measures to ensure that our employees respect the responsibility to protect personal data.
For how long do we process personal data?
We keep the personal data we collect for 6 months, in the case of information necessary to verify how the questionnaires were applied, and for the legally provided duration in the case of data necessary to make payments / give incentives for the research projects we carry out.
How can you manage the consents you’ve given?
You can write us anytime in order to change your preferences, by email at contact@fieldinsights.ro.
PERSONAL DATA RIGHTS
The Commission Regulation (EC) No 1254/ No 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR) provides more rights to the persons who have their personal data processed. For the duration that the personal data is being kept by FIELD INSIGHTS CEE S.R.L., you, as a data subject have the following rights:
The right of access means that you have the right to obtain a confirmation from us that we process or not the personal data concerning you and, if so, access to that data and information on how the data is processed.
The right to data portability refers to the right to receive personal data in a structured, commonly used format that can be read automatically, and the right to send this data directly to another controller, if technically feasible.
The right to opposition concerns the right to object to the processing of personal data where processing is necessary for the performance of a task that serves a public interest or when it concerns a legitimate interest of the operator. When the processing of personal data is intended for direct marketing, you have the right to object to processing at any time.
The right to rectification refers to the correction, without undue delay, of inaccurate personal data. The correction will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate efforts.
The right to delete data (‘the right to be forgotten’) means that you have the right to request to deletion of your personal data without undue delay, if one of the following reasons is applied: they no longer serve the purposes for which they were collected or processed; you withdraw your consent and there is no other legal basis for processing; you oppose the processing and there are no legitimate reasons to prevail; personal data have been illegally processed; personal data must be deleted in compliance with a legal obligation; personal data were collected in connection with the provision of services of the information society.
The right to restriction of the processing may be exercised if the data subject challenges the accuracy of the data, for a period that allows us to verify the accuracy of the data; the processing is illegal, and the person opposes the deletion of personal data, yet instead he is requesting restriction; if FIELD INSIGHTS CEE S.R.L. no longer needs personal data for the purpose of the processing, but the person asks for it in order to establish, exercise or defend a right in court; if the data subject has objected to the processing for the time frame during which it is verified, whether the legitimate rights of the operator prevail over those of that person.
All these rights may be exercised by a written, signed and dated request, sent to our headquarters or at the email address contact@fieldinsights.ro
In addition, as of May 25, 2018, if you have any complaints or questions related to the processing of personal data you can contact the Data Protection Officer at contact@fieldinsights.ro Complaints regarding the processing of personal data may be addressed to the National Supervisory Authority for The Processing of Personal Data.
Do we communicate personal data to other recipients?
Occasionally, when executing a contract between you and us involves the intervention of third parties (such as, but not limited to, a courier company involved in sending you gift vouchers, when applicable), we have to transfer your personal information to those third parties. Whenever we do this, however, we will make sure we only transfer the information strictly necessary for executing the contractual obligations.
Restrictions on disclosing information to third parties
We may disclose your personal data (as described above) in the following cases:
• You expressly request this of us, or expressly authorize the disclosure;
• The information is supplied in order to comply with the law (for example, in order to comply with a search warrant, a summons or a court order), to impose an agreement we have with you or in order to protect our own rights, property or safety or the rights, property or safety of our employees or other people;
• The information is supplied to our agents, suppliers or service providers that carry out tasks in our name;
• In cases of emergencies or force majeure, or
• In case the disclosure is necessary in order to solve litigation, demands or for people who have a legal or beneficial interest;
Applicable law
This set of terms and conditions is governed by the legislation of Romania. Any claim regarding the clauses of this document, as well as regarding the consequences it involves, will be solved before the competent courts in Bucharest.
Questions and queries
If you have questions or queries regarding the processing of your data, or you wish to act upon your legal rights regarding the data we hold, or if you have any concerns regarding the way we treat any confidentiality issue, you may write us an email at contact@fieldinsights.ro
Restrictions applied in processing personal data
Field Insights does NOT sell and does NOT rent out personal data to any third party.
The right to choose how personal data is being used
We understand and respect the right to protect the identity of each person and we appreciate the trust users of our services grant us by offering us personal information. Field Insights offers mechanisms through which users can easily act on their rights over their personal data. Thus:
– Respondents can verify the data they sent to Field Insights by sending an explicit request to this end, at: contact@fieldinsights.ro. Our security measures require that the request be accompanied by proof of the applicant’s identity, so that we make sure the request is coming from the person entitled.
– Respondents can contact us at any time at the same address (contact@fieldinsights.ro) to modify, correct or delete the personal data associated to their answers in the questionnaires they filled in.
– Registered members in our panels can unsubscribe from our newsletter or give up their membership to the panel by a simple click on the unsubscribe / panel deletion button present in all our communications, and in the Panelist accounts. After unsubscribing, the user will not receive any further marketing communication from us.
– The persons in our database may request a copy of the data we hold, in an easily readable format. To do so, we need to receive an explicit request at contact@fieldinsights.ro
CHANGES
We may change this Confidentiality policy at any time. All updates and changes to this Policy are effective immediately after the notification we will send out by posting it on the website www.fieldinsights.ro and/or by e-mailing it.