Select a panel to view its privacy policy
Netpanel privacy policy
Privacy Policy for browser plug-in users
This Policy applies to users who have installed the Netpanel plug-in in their web browser. Netpanel is a plug-in for panelists that collects data to carry out audience measurement on various markets (the “Research”).
In this Policy, “we”, “us”, and “our” refer to Gemius S.A., Gemius Araştırma ve Danışmanlık Hizmetleri Ltd. Şti. (Turkey) and Gemius S.A. (Poland), acting as joint controllers of the Research.
When do we ask you to use the Netpanel plug-in?
Netpanel is one of the tools we use to collect data for the Research. To properly conduct the Research, we also need socio-demographic data collected through a Research questionnaire, which we may ask you to complete. This questionnaire has its own privacy policy, presented to you when filling it in.
After completing the questionnaire, we may invite you to install the Netpanel plug-in. If you installed the plug-in without completing the questionnaire, please uninstall it, as data collected without the questionnaire is of no use in the Research.
What is the purpose of the Research?
The Research aims to define the profile of internet users who use internet resources, i.e., who visit websites and use applications, including a statistical profile of media audiences, including the profile of recipients of advertising campaigns carried out on the Internet. The collected data allow us to present collective statistical information on the media users.
Our identity and responsibilities
Your personal data are jointly controlled by:
- Gemius Araştırma ve Danışmanlık Hizmetleri Ltd. Şti., Maslak Mah. Taşyoncası Sok. T4 Apt. No:1U/B 186 Sarıyer, İstanbul, Turkey (“Gemius TR”), and
- Gemius S.A., ul. Domaniewska 48, 02-672 Warsaw, Poland (“Gemius SA”).
For what purpose and for how long is the data processed?
We process data for the following purposes:
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Conducting the Research in accordance with this Policy | The legal basis for processing is our legitimate interest (Article 5(2)(f) KVKK) – carrying out reliable statistical research of the media and advertising market. In some cases, the implementation of this interest is linked to consent required under specific legal provisions (e.g. regarding cookies). | Data are stored for the duration of the Research in a given country. In some cases, the data may be stored longer, if used solely for statistical purposes. In such cases, we apply appropriate safeguards to ensure that the data cannot be attributed to an identifiable person. |
| Provision of technical support | The legal basis is our legitimate interest (Article 5(2)(f) KVKK) – providing you with technical assistance. | Data are processed until the expiry of claims resulting from the provided technical support, unless you object earlier and such objection is positively considered. |
| Contacting you, e.g. when we encourage you to take an active or broader part in the Research. We may also invite you to participate in loyalty programmes. Such contact does not concern marketing. | The legal basis is our legitimate interest (Article 5(2)(f) KVKK) – maintaining active participation in the Research and ensuring the quality of Research data. Our legitimate interest may be combined with consent, if required by specific provisions of law. In such cases, we will obtain such consent in the questionnaire. | Data are processed for the duration of the Research in a given country, unless you object to the processing or withdraw consent required under specific provisions (if such consent was obtained). |
What information do we collect about you?
Below, we explain what data the Netpanel plug-in sends to us. Other data that we collect directly from you in the Research questionnaire is described in the privacy policy provided to you when completing the questionnaire.
What kind of data is collected?
- The data on the internet websites you visit (e.g., the URL of the website you visit and the time the website was opened) and on the content displayed
- Online IDs of a device, browser ID, and technical data of the device used by you (screen resolution, operating system
- The data about your clicks on the websites you visit, including the information on your interaction with the adverts displayed to you
- The data on purchases made on the Internet, including goods, methods of payments, and deliveries
- User agent (a string of characters that contains information on, for example, the type of mobile device, operating system, version of the application, and your identifiers).
To whom may we disclose your data?
- Gemius Group: other companies within the Gemius Group, including Gemius S.A. and its subsidiaries.
- Providers of technical and panel management services, e.g., hosting, IT, communication, technical support, recruitment, and panel management (including the organisation of competitions and loyalty programmes).
- the company commissioning the Research/auditor, for the purpose of verifying and confirming the reliability of the data; the scope of data shared is minimised to the greatest possible extent.
- research and business partners, e.g., academic institutions, research companies, and commercial partners, solely for research and statistical purposes consistent with the Research; the data is shared in a secured form (pseudonymisation, encryption, data minimisation etc.) to prevent direct identification.
Is your data passed outside the European Economic Area (“EEA”)?
As a rule, your data are not transferred outside the EEA. An exception applies if you are a Panelist from outside the EEA – in that case, your data may be transferred to your country of origin. In such a situation, we apply appropriate agreements and legal mechanisms to ensure security and compliance with the law.If, for any other reason, it becomes necessary to transfer your data outside the EEA, we will do so only in accordance with the law. In particular:
- we will ask for your explicit consent to such transfer, and
- we will inform you about the risks connected with it.
What are your rights?
Respecting your rights, we support data protection in accordance with both the EU GDPR and the Turkish Personal Data Protection Law (KVKK).
You have, among others, the right to:
- know whether your personal data are processed and to request information about such processing;
- learn the purpose of processing and whether your data are used in line with that purpose;
- know the third parties to whom your data are transferred, in Turkey or abroad;
- request access to your data;
- request rectification of inaccurate or incomplete data and to have this communicated to third parties;
- request erasure or destruction of your data and to have this communicated to third parties;
- withdraw your consent at any time (e.g. by uninstalling the app/plug-in or by contacting us);
- object to processing, including objections to profiling or automated decisions;
- object to the processing of data exclusively through automated systems where such processing results in a decision or outcome to your detriment;
- request data portability (where applicable under GDPR);
- claim compensation if you suffer damage due to unlawful processing.
To exercise these rights, please contact us at paneltr@gemius.com, by post to the Data Controller’s address, or through the Gemius Privacy Tool website.
Important: If you have completed the Research questionnaire and installed the Netpanel plug-in, and later decide to withdraw your consent, please both contact us and uninstall the plug-in. Otherwise, the plug-in will continue to send data to us, but this data will no longer be used for the Research. If you reinstall the Netpanel plug-in after uninstalling it, this will be treated as giving your consent again to process your data.
You have the right to complain
If you think we act against this Policy or have any questions, please get in touch with us at the e-mail address indicated in the "What are your rights" section above or at the postal address of the Data Controller. You can also apply with a formal complaint to your country’s data protection authority.
Obligation to provide data
Participation in the Research is voluntary, so you do not have to provide your data.
Are your interests or other information predicted based on the collected data?
No, we do not use the data for the purposes of profiling.
Contacting us about the data processing
Any questions and doubts about the scope of data processing might be sent to the e-mail address indicated in the "What are your rights" section above or to the postal address of the Data Controller.
We have also appointed a Data Protection Officer, who can be contacted at the e-mail address paneltr@gemius.com.
Updates to this Policy
Any change to this Policy will be made publicly available. In the case of material changes, we will make all reasonable efforts to inform you at least 14 days before they take effect.