Privacy Policy

Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “General Regulation” or “Regulation”) establishes a legal framework for the protection of personal data applicable throughout the EU, which safeguards the rights of its citizens against the unauthorized processing of their data and personal information. We recognize the value and sensitivity of personal data and therefore process it in full compliance with this Regulation.

Explanation of Terms

Personal data refers to any information relating to an identified or identifiable natural person (the regulation does not apply to data concerning legal entities); examples include first name, last name, address, phone number, as well as information such as business preferences, interests, and the like. Particularly sensitive personal data (such as information regarding a person’s religious beliefs, health status, ethnic origin, etc.) and the personal data of children are subject to a higher level of protection.

A data subject is a natural person to whom the personal data pertains.

The processing of personal data refers to any operation performed on such data (such as collection, storage, use, etc.).

A processor is any entity that processes personal data on behalf of the controller.

A controller is a natural or legal person who determines the purposes and means of personal data processing and is primarily responsible for such processing.

Pseudonymization refers to the processing of information in such a way that we can identify the data subject only with additional information.

Anonymization refers to the processing of information in such a way that the data subject is no longer identifiable.

Overview of Personal Data Processing

Data Subject

What types of personal data do we process?

How We Obtain These Personal Data

What is our legal basis for processing this personal information?

For what purpose do we process

How We Process Data

Client

We primarily process the first name, last name, work phone number, and work email address of employees at organizations that are our clients.

We collect personal data directly from clients based on the information they provide by phone, email, or as specified in the contract.

If we use the data solely to fulfill the contract and for communication related to it, our legal basis is this contract.

If we contact you with marketing communications, we do so based on the explicit opt-in consent you have provided to us.

We process personal data for the purpose of fulfilling a contract (and, where applicable, exercising our rights) and sending marketing communications, provided we have your consent to do so.

Your personal data is processed manually in our internal system in the form of individual client files, which contain your personal data, the company on whose behalf you act in our relationship, and any correspondence between us, etc.

If we have your consent to send you marketing communications, we have marked you in our system with a feature that allows us to target you with our offers.

Prospective client

We primarily process the first name, last name, phone number, and work email address of employees at organizations that have communicated with us regarding the establishment of a contractual relationship, which has not yet been established.

We collect personal data through our interactions via phone and email. An example would be an inquiry sent to us that we then follow up on.

If we use the data solely for communication during pre-contractual negotiations, in which we specify the terms of an offer or contract, we are acting on the basis of a pre-contractual relationship.

If we contact you with marketing communications, we do so based on the explicit opt-in consent you have provided to us.

We process personal data for the purpose of fulfilling the contract and sending marketing communications, provided we have your consent to do so.

Your personal data is processed manually in our internal system in the form of individual client files, which contain your personal data, the company you represent in our relationship, and any relevant correspondence between us, etc.

If we have your consent to send you marketing communications, we have marked you in our system with a feature that allows us to target you with our offers.

Respondent

We process your personal data, which depends on the type of research we conduct.

We collect personal data through questionnaires that are completed by respondents under the guidance of our interviewers, either in written or electronic form.

Our basis for this is the fact that you agreed to the use of the information you provided in the questionnaire you completed for our research.

We process personal data for the purpose of conducting a survey commissioned by a client.

Your personal information is used solely to monitor the work of our interviewers. We do not use it for any other purposes.

Once the data is collected, it is forwarded to our data collection department. There, your personal information (first name, last name, phone number, address) is used to verify the data collection. Therefore, we may call you, send you a letter, or visit you in person to verify whether our interviewer actually visited you and helped you complete the questionnaires on the given topic. Your personal data (first name, last name, phone number, address) is separated from the research data (i.e., pseudonymized) in the data collection department as part of the data matrix verification process. We retain this separated personal information for an additional 12 months to address any potential complaints from the research client. After that, we delete it.

The research data is therefore “anonymized” in the data collection department, because from that point on, no one else is able to link this data to the personal information of specific respondents—that is, their first and last names, phone numbers, or addresses.

Anonymized data is sent in the form of a data matrix to the analytics department, where it is statistically processed into tables and graphs. The specific information you provided in the questionnaire will not appear anywhere in any research report or similar output, because your data is processed collectively, usually along with that of hundreds of other respondents.

How long do we retain your personal data?

For our clients, we retain data for the duration of the contract and subsequently archive it for 5 years, or for the duration of the consent, if we process your personal data for marketing purposes. For our potential clients, we retain data for 3 years from the last communication for the purpose of negotiating a contract in situations where we believe interest persists but contract negotiations will take a longer period of time. We also retain your personal data for the duration of your consent for marketing purposes, if we have obtained such consent from you.

Personal data collected from respondents is pseudonymized; we retain such data for 12 months after the completion of the research (for the purpose of monitoring our interviewers or addressing complaints from our clients for whom we conduct the research). If we provide our clients with a data matrix, it is only in an anonymized form—that is, without personal data such as first name, last name, address, phone number, etc.

The Security of Your Data

Personal data is processed only by authorized and trained personnel who handle your personal data in a manner that ensures it remains secure. The premises where your personal data is processed are protected by software measures and a video surveillance system.

Your Rights and the Application Form Link

As so-called data subjects, you have the following rights regarding the personal data we process:

  1. a) the right to withdraw consent at any time,
  2. b) request information from us regarding what personal data of yours we process,
  3. c) request an explanation from us regarding the processing of personal data, object to the processing, and restrict the processing
  4. d) request access to this information from us and have it updated or corrected,
  5. e) request that we delete this personal information,
  6. f) object to the processing,
  7. g) if you have any doubts regarding compliance with obligations related to the processing of personal data, contact us or the Office for Personal Data Protection and file a complaint with it

If you wish to exercise these rights with us, please use the form available for download via the link below. Please send the completed and signed form to our headquarters in Brno, at Vrchlického sad 4. We will respond to your inquiry as soon as possible, but no later than one month.

You can download the form here. data-subject-request-3882

Prepared by: AK Pondikasová, ID No.: 71329421, Czech Bar Association (ČAK) Certificate No. 10348, www.akpondikasova.eu