Select a panel to view its privacy policy
Netpanel privacy policy
Privacy Policy for Netpanel application users
This Policy applies to users who have installed the Netpanel application on their mobile device. Netpanel is an app for panelists that collects data to carry out audience measurement on various markets (the “Research”).
In this Policy, “we”, “us”, and “our” refer to Gemius S.A., the company that developed the Netpanel app and conducts the Research.
When do we ask you to use Netpanel app?
Netpanel is one of the tools we use to collect data for the Research. To properly conduct the Research, we also need socio-demographic data collected through a Research questionnaire, which we may ask you to complete. This questionnaire has its own privacy policy, presented to you when filling it in.
After completing the questionnaire, we may invite you to install the Netpanel app. If you installed the app without completing the questionnaire, please uninstall it, as data without the questionnaire is of no use in the Research.
What is the purpose of the Research?
The Research aims to define the profile of internet users who use internet resources, i.e., those who visit websites and use applications, including a statistical profile of media audiences and the profile of recipients of advertising campaigns carried out on the Internet. The collected data allow us to present collective statistical information on the media users.
Our identity and responsibilities
Your data controller is Gemius S.A., based in Domaniewska 48 Street, 02-672 Warsaw, Poland. You can always contact us by using the email address netpanel@gemius.com or by postal address above.For what purpose and for how long is the data processed?
We process data for the following purposes:
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Conducting the Research in accordance with this Policy | The legal basis for processing is our legitimate interest (Article 6(1)(f) GDPR) – carrying out reliable statistical research of the media and advertising market. In some cases, the implementation of this interest is linked to consent required under specific legal provisions (e.g. regarding cookies) or to the need to grant the application certain permissions in the operating system (e.g. access to location or microphone). | Data are stored for the duration of the Research in a given country. In some cases, the data may be stored longer, if used solely for statistical purposes. In such cases, we apply appropriate safeguards to ensure that the data cannot be attributed to an identifiable person (in line with Article 5(1)(e) and Article 89(1) GDPR). |
| Provision of technical support | The legal basis is our legitimate interest (Article 6(1)(f) GDPR) – providing you with technical assistance. | Data are processed until the expiry of claims resulting from the provided technical support, unless you object earlier and such objection is positively considered. |
| Contacting you, e.g. when we encourage you to take an active or broader part in the Research. We may also invite you to participate in loyalty programmes. Such contact does not concern marketing. | The legal basis is our legitimate interest (Article 6(1)(f) GDPR) – maintaining active participation in the Research and ensuring the quality of Research data. Our legitimate interest may be combined with consent, if required by specific provisions of law. In such cases, we will obtain such consent in the questionnaire. | Data are processed for the duration of the Research in a given country, unless you object to the processing or withdraw consent required under specific provisions (if such consent was obtained). |
What information do we collect about you?
Below we explain what data Netpanel app sends to us. Other data that we collect directly from you in the Research questionnaire is described in the privacy policy provided to you when completing the questionnaire.
What kind of data is collected?
- The data on the internet websites you visit (e.g., the URL of the website you visit and the time the website was opened) and on the content displayed
- Online IDs of a device, browser ID, and technical data of the device used by you (screen resolution, operating system
- Location data (approximate or accurate, depending on the mobile device’s settings). For the processing of this data, we need your consent and we ask that you grant the appropriate permissions for the application in the operating system
- Advertising ID, which is an ad display ID assigned by Google Play Services that you can reset or block using your operating system settings
- User agent (a string of characters that contains information on, for example, the type of mobile device, operating system, version of the application, and your identifiers)
- Data about the applications you open on your mobile device and the time you use them
- Metadata of audio files played on your mobile device within a given application, i.e., album name, song name, artist, time, and name of the application on which the audio file was played.
To whom may we disclose your data?
- Gemius Group: other companies within the Gemius Group, including Gemius S.A. and its subsidiaries.
- Providers of technical and panel management services, e.g., hosting, IT, communication, technical support, recruitment, and panel management (including the organisation of competitions and loyalty programmes).
- the company commissioning the Research/auditor, for the purpose of verifying and confirming the reliability of the data
- the scope of data shared is minimised to the greatest possible extent.
- research and business partners, e.g., academic institutions, research companies, and commercial partners, solely for research and statistical purposes consistent with the Research
- the data is shared in a secured form (pseudonymisation, encryption, data minimisation etc.) to prevent direct identification.
Is your data passed outside the European Economic Area (“EEA”)?
As a rule, your data are not transferred outside the EEA. An exception applies if you are a Panelist from outside the EEA – in that case, your data may be transferred to your country of origin. In such a situation, we apply appropriate agreements and legal mechanisms to ensure security and compliance with the law.If, for any other reason, it becomes necessary to transfer your data outside the EEA, we will do so only in accordance with the law. In particular:
- we will ask for your explicit consent to such transfer, and
- we will inform you about the risks connected with it.
What are your rights?
Respecting your rights, we support data protection in accordance with applicable law. You have the right to:
- withdraw your consent at any time, by uninstalling the Netpanel app,
- request the erasure of your personal data,
- request the rectification of your data,
- request the restriction of processing,
- request access to your data,
- object to the processing of your data,
- request data portability.
To exercise these rights, please contact us at netpanel@gemius.com
Important: If you have completed the Research questionnaire and installed Netpanel app, and later decide to withdraw your consent, please both contact us and uninstall the app. Otherwise, the app will continue to send data to us, but this data will no longer be used for the Research. If you reinstall Netpanel after uninstalling it, this will be treated as giving your consent again to process your data.
You have the right to complain
If you think we act against this Policy or have any questions, please get in touch with us at the e,mail address indicated in the "What are your rights" section above or at the postal address of the Data Controller. You can also apply with a formal complaint to your country’s data protection authority.
Obligation to provide data
Participation in the Research is voluntary, so you do not have to provide your data.
Are your interests or other information predicted based on the collected data?
No, we do not use the data for the purposes of profiling.
Contacting us about the data processing
Any questions and doubts about the scope of data processing might be sent to the e-mail address indicated in the "What are your rights" section above or to the postal address of the Data Controller. We have also appointed a Data Protection Officer, Jacek Grabowski, who can be contacted at the e-mail address privacy@gemius.com
Updates to this Policy
Any change to this Policy will be made publicly available. In the case of material changes, we will make all reasonable efforts to inform you at least 14 days before they take effect.