Information Clause – CAPI Surveys
If you are a respondent taking part in a CAPI survey, i.e. a quantitative study conducted during an in-person computer-assisted meeting in which the interviewer records answers on a mobile device, please read the detailed information on how 4P Research Mix Sp. z o.o. processes your personal data.
This information clause fulfils the information obligation referred to in Art. 13(1) and Art. 14(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, OJ EU L 119/1 of 4.5.2016, hereinafter: “GDPR”).
1. PERSONAL DATA CONTROLLER
The controller of your personal data is 4P Research Mix Sp. z o.o., with its registered office at ul. Puławska 12A/5, 02-566 Warsaw, NIP 521-32-24-826, KRS 0000148637 (hereinafter: the “Controller” or the “Company”). The Controller can be contacted as follows:
- by post at the address indicated above,
- by e-mail: mail@grupa4p.pl
- by phone: +48 22 565 27 50
2. DATA PROTECTION OFFICER
In matters concerning the processing of your personal data and the related rights, you can contact the Data Protection Officer appointed by the Controller by e-mail at iod@grupa4p.pl or in writing at the Controller’s registered office address indicated in point 1 above.
3. CATEGORIES OF PERSONAL DATA
The Controller will process your personal data in the following scope:
- for natural persons – first and last name, residential address (city, street, postal code), phone number,
- for legal persons – company name, registered office, NIP, website, respondent’s first and last name, respondent’s position, e-mail address and phone number.
4. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
We will process your data for the following purposes:
- contacting you in order to conduct quality control of the interviewer’s work – legal basis: Art. 6(1)(a) GDPR – consent to contact for the above purpose,
- establishing and pursuing possible claims or defending against claims – legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest.
5. PERSONAL DATA PROCESSING PERIOD
Your personal data will be processed for 60 days from completion of the project, no longer than 3 months from the date the survey is completed.
The above periods may be extended if processing is necessary to establish and pursue possible claims or to defend against claims.
6. DATA RECIPIENTS
Recipients of your personal data may include:
- subcontractors and entities providing services to the Controller (including IT and technical support providers) – on the basis of relevant personal data processing agreements and in accordance with the Controller’s instructions,
- public authorities and entities performing public tasks or acting on behalf of public authorities, within the scope and for the purposes arising from generally applicable law.
7. SOURCE OF PERSONAL DATA
Your personal data have been obtained directly from you or from the entity on whose behalf we conduct the survey. In each case, the interviewer will inform you about the source of your personal data.
8. RIGHTS OF THE DATA SUBJECT
The Controller enables you to exercise the following rights:
- access to data – you are entitled to access your personal data and obtain a copy of it. In addition, you have the right to obtain information concerning in particular the purpose of processing, the categories of processed data, information about recipients, the planned data retention period and your rights,
- rectification of data – if the data we process about you are incorrect, you have the right to request immediate rectification of your data. In addition, if the data we hold are incomplete, you have the right to request that they be completed,
- erasure of data – if your personal data are no longer necessary for the purpose for which they were collected, or if you object to the processing of data and at the same time there are no overriding, legally justified interests on our part, and also if you consider that we process data unlawfully, you have the right to request their erasure in whole or in part. However, this right does not apply to data to the extent that they are necessary to pursue, establish or defend our claims or to comply with our legal obligation to process or store them under applicable law,
- restriction of data processing – if you believe that we have incorrect data about you or process them without basis, or you do not want us to erase them because they will be needed to establish, pursue or defend claims, and also during the period before you object to data processing – you have the right to request that we restrict processing solely to storing the data or performing other actions agreed with you. Despite your exercise of the above right, we may process your data where necessary to establish, pursue or defend claims to which we are entitled,
- objection to the processing of personal data – you may object at any time to our processing of your personal data if we process them on the basis of our legitimate interest. After an objection is submitted, we will not be able to process personal data on the above processing grounds unless we demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or grounds for establishing, pursuing or defending claims,
- withdrawal of consent to the processing of personal data to which the consent related – you have the right at any time to withdraw the consent you gave us to process personal data to the extent that consent was required. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal,
- lodging a complaint with the supervisory authority – if you consider that we process your personal data unlawfully, you have the right to lodge a complaint with the national supervisory authority, currently the President of the Personal Data Protection Office.
If you exercise the rights indicated above, please submit your request to the address indicated in point 1 or 2 of this clause. At the same time, we inform you that the rights indicated above are not absolute and will not apply in every case of our processing of your personal data.