Privacy Policy
Contact details:
Phone: +4 0770 250 585
Email: contact@sensepanels.com
Registered office address: str. Buzești nr. 75-77, et. 11, Sector 1, Bucharest, Romania
Processing Principles
The processing of the personal data that we come into contact with, that we hold and/or that are entrusted to us is carried out following the guiding principles of Regulation (EU) 2016/679, among which we can mention:
- the principle of ensuring confidentiality from the first interaction with personal data
- the principle of ensuring confidentiality at each of the stages/activities of processing of personal data
- the principles of transparency and fairness
- the principle of having control over your personal data
- the purpose limitation principle and the principle of lawfulness of personal data processing operations
- the principle of ensuring the security and integrity of the data processed, whether digital or in a (printed) literate format
We consider the protection of the information you provide or are provided to us for or about you to be an important component of our business and we want to ensure that we implement it as a priority in all activities we undertake that involve processing your personal data (hereinafter referred to as PII).
In the lines below we tell you a few things we think you should know about the information we collect, the legal basis we use it, the purpose for which we collect it, how we use it, why we share it and with whom we share it.
Legislative Framework
In compliance with the national and European legal provisions, namely the General Regulation (EU) 2016/679 on the protection of personal data and their free movement as well as the rules for its implementation in national law, Law 190/2018, your personal data are processed in accordance with the Privacy Policy on the protection of personal data for the purposes of processing personal data, internal procedures and work processes approved by the decision makers of iSense Solutions International Research SRL (hereinafter referred to as iSense).
In compliance with national and European legal provisions, such as those mentioned at the beginning of this information notice, we wish to inform you that your personal data is processed in accordance with the applicable legislation and the Privacy Policy on the protection of personal data for the purposes of processing personal data, internal procedures and work processes approved by iSense’s decision makers or the authorized representatives of its legal representative.
We wish to inform you that this Privacy Policy is subject to change at any time, and updates and changes to the Privacy Policy are effective immediately upon notice and/or publication, which we will do by posting on the portal www.SensePanels.net / www.sensepanels.com (hereinafter “SensePanels”) and, if necessary, by a notice that we will send to your e-mail address, if you have provided it to us in advance.
iSense contact details
The contact details of iSense, as the organization hereinafter referred to as iSense Solutions International Research SRL and whose contact details can be found in detailed form in the rows below as well as on the SensePanels.ro website, hereinafter referred to as the data controller in accordance with the legal provisions on personal data protection, assumes responsibility for the processing of your personal data, whether such data is collected directly from you or from external (additional) sources:
- Bucharest, Buzești str. 75-77, 11th floor, Sector 1
- Contact details: +4 0770 250 585 / contact@SensePanels.com
What are the identification data of the organization processing your personal data?
They are iSense Solutions International Research SRL, with place of business in Bucharest, Buzești str. 75-77, 11th floor, Sector 1, Bucharest, Romania, registered with the Trade Register under no. J40/11410/17.09.2015, unique registration code RO35015004, legally represented by Mr. Traian Năstase as administrator.
Should you require further information in this regard, please do not hesitate to contact us, our recommendation is to use the contact details of the Data Protection Officer (function called DPO for short) that we have appointed within iSense who will reply to you within 30 days. Contact details of the iSense DPO are set out below:
- by email: dpo@SensePanels.com
- correspondence address: str. Buzești nr. 75-77, et. 11, Sector 1, Bucuresti, Romania
We process the following types of personal data that you provide to us or that is provided to us for or about you – information hereinafter referred to as “Personal Data” (abbreviated PII):
- name, surname, gender, year of birth and postal code, e-mail address, date of birth, age (hereinafter “Personal Data”);
- In addition, for people who register and activate their account on the platform and answer a number of additional questions in the process of filling in their user profile and which help us to send out invitations to surveys depending on the user profile and the type of respondents who are being sought for a particular survey (which can be of various types and is also titled survey throughout this document), we may also process education level, occupation whether driving or not, make of car driven and/or owned, preferences (e.g. food products consumed and/or preferred, fast food products consumed and/or preferred, hobbies and interests, electronics/electro household appliances, computer and video games, travel, tobacco products consumed and/or smoker), information that comprises and may be considered personal data as defined in the Regulation and which we may consider as components in the category entitled “Personal Data”;
- IMPORTANT: in the process of filling in the details of the user profile based on the answers to the optional additional questions, as well as in the case of participation in various surveys, the following sensitive personal data may be processed, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or data concerning health or sex life, which information comprises and may be considered personal data as defined in the Regulation and which we may consider as components of the category entitled “Personal data” under special regime;
- the date and time of participation in the study and/or the date and time during which the study was conducted, the degree of completion of the study, the percentage of compliance with the appropriate user profile for a study, the subject matter of the study (hereinafter referred to as “Study Data” and which refers to the answers you provide as a result of filling in questionnaires accessed and completed in the research);
- In addition, the following types of information may be included in the case of data provided as a result of responses to questionnaires in surveys in which the user participates and which are used to report survey results, in an anonymized format (i.e. third parties are not allowed to identify the identity of the user who has responded/participated in a survey and/or market research) data related to consumption habits and preferences, such as data on various types of media, automotive, consumer goods, food, vacations and leisure activities, medical products and services, ownership and use of internet-connected devices, information on attitudes towards certain brands and products, aggregate information that we may consider as components in the category entitled “Survey-related data”;
- IMPORTANT: in some cases, in connection with the provision of answers to market research questionnaires in which the user chooses to participate, certain sensitive personal data such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sex life, which comprise and may be considered personal data as defined in the Regulation and which we may consider as components of the category entitled “Study-related data” under special arrangements, may be processed;
Note: the user is not obliged to answer questions whose answers may provide information that may contain personal data. Such questions will always include a “prefer not to answer” option. Answers to these questions will remain confidential unless the user explicitly and freely consents that the answers, together with personal data as defined above, may be shared with research clients for further analysis.
- identification data from the identity document, address for invoicing/drawing up the document required for settlement, financial information (IBAN account, bank, account holder and/or username, efinance platform, related email address) (hereinafter referred to as “Payment Data”);
- contact/communication preferences, email address, mobile and/or landline telephone number, mailing address (including the county and postal code associated with that address), the content of the message communicated/transmitted and its subject, the content of the documents attached and transmitted to iSense (hereinafter referred to as “Communication Data”);
- information regarding your status as a potential user, i.e. your user status, details of your use of the www.SensePannels.net portal (e.g. the date and time you accessed the www.SensePannels.net portal), including the public IP address you used, the public device ID and similar data about you (e.g. various technical indicators such as time spent on the website, areas accessed within the portal) (hereinafter referred to as “Statistical Data”).
Collection Methods
Since the processing of your PII is a legal obligation for us to be able to carry out our activity in order to provide you with the products and/or services you wish to contract with us, but also because this processing allows us to improve the products or services we offer you as it helps us to process your requests faster and to better manage our relationship with you, we would like to inform you about the ways in which we collect PII and in the list below we try to exemplify some of the ways in which we collect PII, but in some special cases we may also use other ways than those listed below:
- directly from you (by filling in the necessary registrations in the online portals in and through which we can carry out the contracted services, transmitted by email, translated into a contract in letter format, SMS, social networks or other means of communication agreed);
- from traffic reports recorded by the servers that host the iSense website or within the servers or devices or software solutions that make up the iSense information system;
- through online social networking platforms (e.g. Instagram, Twitter, Facebook) and cookies;
- from third party partners who share data with us in order to provide services to the level of quality we require (e.g. but not limited to marketing service providers) or to improve products and/or services according to your requirements (e.g. but not limited to market research providers); if we receive such information, we will fulfill our legal obligation to inform you within 30 days of such action.
In addition, subject to your prior consent (which YOU CAN WITHDRAW AT ANY TIME, at NO COST to you, by a simple request to the iSense project team, in particular to the designated Data Protection Officer within the iSense activities), we may also process PII belonging to you and for:
- to send you personalized advertising announcements about our products and services or those of our partners/suppliers and/or our collaborators that we think may be of interest to you;
- to give you personalized experiences;
- to conduct market surveys (e.g. but not limited to customer satisfaction surveys);
- to activate the various facilities you wish to have in iSense activities
METHODS use of collected data
In the list below we detail for exemplification some of the ways information can be used that can be considered DCP:
- for the selection of respondents in health surveys;
- to create your user profile within the SensePanels portal;
- to remunerate the efforts/activities carried out within the iSense portal in accordance with the Rules of operation;
- so that iSense can comply with the legal provisions that apply to the activities carried out;
- in an attempt by us or our partners or suppliers to ensure that we can or can contact you easily and professionally;
- so that we can provide you with the information you have requested;
- so that we can provide you with the products or services you have requested;
- so that we can send you relevant information about our products and/or services;
- so that we can measure the performance of our advertising campaigns, whether we run them ourselves, directly, through in-house staff or indirectly through contracted partners/suppliers;
- so that we can measure the performance of our sales and after-sales services;
Retention period of collected data
The table below shows the maximum periods for which we will store your personal data. This period may be extended if we are obliged to do so in order to comply with the legislation in force at the time or by your consent.
After this period has expired, if we do not have your consent to extend the retention period, your data will be anonymized into statistical data or, where appropriate, securely deleted.
Category of PII processing: managing the relationship with users, sending relevant information about the processing of personal data, communicating information required as a result of participating in research, measuring the performance of promotional campaigns, sales and after-sales services.
Storage period: 5 years for registered users, 2 years for prospects (as are also referred to as users who have initiated the registration process with SensePanels and have not completed that process).
FDD processing category: Conduct user satisfaction surveys on participation in SensePanels.
Storage period: 2 years from the end of the survey.
Category of DCP processing: Keeping of financial-accounting documents and other records required to comply with the relevant legal provisions.
Storage period: 10 years from the date of issue of the documents in question.
Category of DCP processing: Keeping of financial-accounting documents and other records required to comply with the relevant legal provisions.
Storage period: 10 years from the date of issue of the documents in question.
LEGALITY of DCP processing
Personal Data lawfully processed by iSense representatives and/or processors, in the context of the provision of products and/or services contracted, but also in relation to communication processes, including online or in response to requests for quotation, filling in online forms, improvement of services, subscription to the Newsletter or otherwise provided by them through the use of the website or in the relationship with iSense, may be processed directly and/or through processors, on the basis of the following purposes and grounds:
1. If you are a visitor to the iSense website, we may process your data in the manner described below:
A. For more details on the use of cookies please visit the Cookie Policy available on the SensePanels website.
Basis of processing: legitimate interest, in accordance with Law 506/2004.
B. For the purpose of handling requests submitted through the contact, additional information request and/or complaint forms on the iSense website.
Basis of processing: legitimate interest.
2. If you subscribe to commercially relevant information that we send via e-mail (hereinafter referred to as “Newsletter”) we may process your data for marketing purposes, for sending, via remote communication means (e.g. but not limited to e-mail, telephone, text message) and other digital communication platforms, newsletters or other commercial messages about iSense products and services to affiliates and companies that cooperate with us.
Basis of processing: your consent.
IMPORTANT TO REMEMBER: your consent for direct marketing activities can be withdrawn at any time at no cost to you. It should be borne in mind that the withdrawal of your consent will take effect for the future, without affecting the lawfulness of the processing carried out prior to the withdrawal
2. If you are a third party, without the role/quality of potential customer and/or client and, regardless of how you contact iSense, we may process your personal data:
A. In order to fulfill legal obligations for the following purposes:
– dealing with requests/complaints regarding the exercise of the rights to which you are entitled in the context of the processing of personal data as enshrined by the legislation in force;
– managing relations with public authorities or other public and/or private entities providing a public service.
Basis of processing: legal obligation.
B. To fulfill the legitimate interests of iSense for the following purposes:
– establishing, exercising or defending iSense’s rights in court and in any other legal proceedings;
– to access notices and related information online;
– sending replies following your request;
– Ensuring the security of the IT infrastructure, at the iSense headquarters and/or iSense workstations;
– ensuring the security and protection of iSense staff (team);
– handling any other requests, complaints, suggestions.
Basis of processing: legitimate interest.
3. AS A USER of the iSense platform (past, current), we may process your data in the following ways:
3.1. If you have created your user account within the iSense platform:
A. In order to comply with legal obligations for the following purposes:
– fulfilling financial, accounting and tax obligations, including keeping the accounting records, keeping the supporting documents on which the accounting entries are based;
– to deal with requests/complaints concerning the exercise of your rights in the context of data processing;
– archiving documents in accordance with the legal provisions and in compliance with the deadlines in the iSense archiving centralizer;
– managing relations with public authorities or other public and/or private entities providing a public service;
– keeping certain registers, statements, forms in accordance with the provisions of special laws; Basis of processing: legal obligation.
B. For the conclusion and performance of contracts for the following purposes:
– the handling and processing of contracting requests, either directly by you or indirectly through an iSense employee or a third party intermediary contracted/ mandated by iSense to manage the relationship with iSense (iSense’s processor);
– the provision of the specialized services offered by iSense, including in the context of filling in the information request forms in order to carry out the services requested by the users;
– the supply of the contracted products and/or services;
– participation in research (studies) that involve filling in / providing answers to related questionnaires of a general nature (“Study data”);
– invoicing, respectively settlement of amounts due, transfer of sums and return of sums; Basis of processing: the proper performance of a contract between the parties / compliance with contractual provisions.
– management of answers and information generated as a result of participation in research (studies) involving the completion / provision of answers to related questionnaires of a general nature (“Study Data” in special regime);
Basis of processing: your consent.
C. In order to fulfill iSense’s legitimate interests, we pursue purposes such as:
– establishing, exercising or defending iSense’s rights in court and in any other legal proceedings;
– to access information and announcements of interest online;
– handling requests/complaints received in connection with the performance/fulfillment of obligations (contract);
– sending replies following your request;
– ensuring the security of the IT infrastructure, the premises and/or iSense work points;
– ensuring the security and protection of iSense staff (team);
– handling any other requests, complaints, suggestions.
Basis of processing: legitimate interest.
4. AS A PROSPECT of iSense (future user of the iSense platform), we may process your data in the following ways:
3.1 If you wish to register on the iSense:
A. For the conclusion and performance of contracts for the following purposes:
– taking and processing account creation requests, directly by you or indirectly through an iSense employee or a third party intermediary (iSense’s processor);
– making research (surveys) and iSense questionnaires available, including those carried out through the iSense portal and those sent by email;
– handling requests/complaints received in relation to the performance of the contract and the quality of the services provided through the iSense portal;
Basis of processing: the proper fulfillment of pre-contractual formalities (proper performance of a contract) / compliance with contractual provisions.
B. In order to fulfill iSense’s legitimate interests, we pursue purposes such as:
– establishing, exercising or defending iSense’s rights in court and in any other legal proceedings;
– in the context of data processing for telephone appointments;
– to access information and announcements of interest online;
– replying to your request
– handling any other requests, complaints, suggestions.
Basis of processing: legitimate interest.
About our suppliers
We may allow the processing of your personal data to some of our partners (affiliates, suppliers, collaborators) in order to improve our services or products. Before allowing them access, we make sure that we have signed contracts with them obliging them to have appropriate security measures in place to protect the personal data that you entrust to us or that we process on your behalf or for you.
By way of example, we allow access and/or transmit personal data to organizations that we contract to provide services on behalf of and for iSense.
Below is a list of the categories in which these providers fall:
– Internet services (e.g. but not limited to web hosting, e-mail hosting); marketing services,
– Sponsorships, contests, promotions, sweepstakes, sweepstakes, data analysis services, accounting services,
– computer security services,
– IT&C maintenance services,
– customer service,
– market and/or customer satisfaction studies and/or research services,
– audit services
On law enforcement, compliance and security
As part of our collaboration with the other organizations in the iSense project, we may provide their representatives with personal data about you. As part of our collaboration with each of these organizations, we ensure that they also implement a minimum set of security measures so that your personal data is protected at all times and, for example, but not limited to in the event of a merger or reorganization, we may transfer your personal data with your notification within a reasonable time.
About data transfer
If we are obliged to allow access to or transfer your personal data to national or European public or governmental authorities for reasons of national security, to comply with applicable law or for reasons of public importance, we will take steps to notify you in advance whenever necessary and when permitted by law.
If we, in good faith, believe that disclosing your personal information is necessary to protect our rights, to resolve legal disputes, to investigate fraud, to protect our users, customers or employees, or to enforce our terms and conditions, we will do so and will use reasonable efforts to notify you within a reasonable time, but not more than 30 days.
If we deem it necessary to transfer your personal data outside the European Economic Area (hereinafter referred to as the EEA), iSense and the contracted providers or partners will pay particular attention to the ways in which this data is processed and the transfer of PII will only be made to destinations (countries) and companies that have additional security measures in place and that have a sufficient set of safeguards to allow the entire PII processing process to be carried out in an adequately secure manner.
In order to be able to respond as soon as possible to your requests to exercise the rights conferred by the legislation in force on the protection and processing of personal data, we recommend that you contact the iSense DPO directly, by sending an e-mail to dpo@SensePanels.com or in writing, submitted to him at the postal address: str. Buzești nr. 75-77, et. 11, Sector 1, Bucharest
Please note that the rights listed above are not absolute, there are exceptions, but we promise that with each request we receive we will analyze it so that we can make a decision on its merits. If your request is founded, we will assist you in exercising your rights, but if it is NOT founded, we reserve the right to reject it, but we will make sure to inform you of the reasons for refusal and of your rights to complain to the Supervisor and to go to court.
IMPORTANT TO NOTE: If, despite our best efforts, we are unable to identify you and you do not provide us with additional information to enable us to complete the correct identification procedure, we reserve the right to process your request.
The deadline for replying to each request received from you is 30 days, but we would like to inform you that this deadline may be extended depending on various aspects, such as the complexity of the request, the large number of requests received or the impossibility to identify you within a reasonable time.
Rights
1. the right to information and allows you to obtain confirmation that your data – access to personal data are being processed by us and, if the answer is yes, what are the relevant details of these processing activities;
2. right to data rectification – allows you to rectify your personal data if it is inaccurate;
3. the right to erasure – allows you to obtain the erasure of your personal data in certain cases, such as:
– if the data are no longer necessary in relation to the purposes for which they were collected;
– if the processing was based on your consent and you have withdrawn your consent, or if there is no longer a legal basis for processing your personal data;
– if it is established that your personal data have been processed unlawfully;
4. the right to restriction allows you to obtain the restriction of the processing of your personal data in certain cases (for example, when you contest the accuracy of your personal data, for a period that allows us to verify the accuracy);
5. the right to portability allows you to receive the personal data you have provided to us, in a structured, commonly used and readable format, or to transmit this data to another data controller;
6. the right to object allows you to object to the further processing of your personal data under the conditions and within the limits established by law;
7. the right to lodge a allows you to lodge a complaint to the ANSPDCP – National Authority for the Supervisory Authority for the Processing of Personal Data or the Supervisory Court and/or about any violation of your rights, related to the processing of personal data court and you can complain about the failure to respect the rights guaranteed by law;
8. the right not to be the right to request and obtain the withdrawal, erasure or reassessment subject to a decision any decision based solely on processing carried out by individual means carried out by automated means which produces legal effects or similarly affects, to a significant extent, the data subjects automated means
