Privacy Policy

Market Research

Information about our market research activities

We conduct market research on behalf of clients, and as a part of our business operations, we collect and process personal information. By participating in our survey(s), you agree to this policy and the use of your personal data. The definition of “personal data” as per GDPR is “any information that relates to an identified or identifiable living individual. We comply with data protection legislation as applicable to the rights of citizens in the geographic areas in which our research activities are conducted.

Personal data provided by clients

It is common for our clients to provide us with a sample of existing clients, customers, suppliers, and/or employees. In such case, we act as the Data Processor, and our client is the Data Controller. In such cases, our clients are responsible to assure all consents, laws, and regulations that are applicable are strictly followed.

Any processing of transmitted Personal Data happens in accordance with the instructions by our client, covered by the provisions of our customer and partner contractual agreements. These instructions may include restrictions on the use of sub-processors and the transfer of your Personal Data to third parties or countries. GemSeek complies with all restrictions and instructions of our clients. Irrespective of any client requirements, any Personal Data may be processed:

• Only for the purpose, it was provided
• Kept no longer than required
• Subject to the same security requirements applicable to GemSeek’s own Personal Data

How we keep your personal information secure

We take great care and have implemented appropriate technological and organisational measures to protect the personal data submitted to us during transmission, processing and storage. We use professional, reputable systems and suppliers, and strong data encryption. We train all our staff to our information security standards. In addition to data protection legislation (for example, the EU General Data Protection Regulation), we work to market research industry professional standards and best practices. All third-party contractors and employees are contractually obliged to follow our security, confidentiality and privacy policies and procedures.

What type of personal data do we process?

In order to run our business and provide services to our clients and/or/to comply with other legal obligations we may process the following type of personal information:

• Personal identification data e.g., name, title, position, etc.
• Contact information e.g., email, phone, address
• Traffic data and other related data e.g., location data, IP address, cookies
• Financial data
• Transaction data
• Employee data
• On rare occasions, special category data – includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. This type of personal data is subject to even stricter rules than those applied to standard personal data and is only processed with your permission or where we have specific legal grounds to do so.

Wherever possible, we work with data that does not have personal information in it. For example, we will detach personal information to make a data set that combines hundreds of completed surveys in order to produce statistical analysis. From focus groups and small-scale research, we mask the identity of participants with labels such as ‘Male, 25-34, London’.

Duration of processing and data storage

Unless otherwise agreed with our clients, your Personal Data will be retained only for the purpose of the services provided and for no longer than 12 months, unless otherwise required to do so by law or where we have previously agreed with our research participants. Personal Data that is no longer required will be either anonymized, deleted and/or disposed of in such a way as to ensure the confidentiality nature is not compromised.