Newsletters privacy policy

Effective Date: 01 March 2024

This Policy describes how we process the information we collect in the following situations.

Product newsletters: if you receive newsletters as a user of our services, these newsletters provide you with information related to the performance of the services and/or projects specified in the services you are using;
Insight newsletters: if you receive newsletters as a newsletter subscriber. These newsletters provide you with information that you have told us you are interested in (e.g., when ordering reports available online).

Please note that you may also be affected by our other policies in the above situations.

Who is the controller of my data?

In the case of product newsletters the controller of your data is the Gemius Group company with which you or your employer (our client) has entered into an agreement with us. The contact details of your data controller can be found in each newsletter you receive.

In the case of Insight newsletters, your data controller is Gemius S.A., a company based in Poland (address: 48 Domaniewska Street, 02-672 Warsaw, Poland).

How did Gemius receive my data?

Regarding Product newsletters, we process your email address, which was used to set up the account through which you use our services.

Regarding Insight newsletters, we process your email address and other data you directly provided to us, for example when ordering reports or other services available online.

The provision of personal data for the above-mentioned purposes is voluntary.

For what purpose and for how long are the data processed?

Data processing purposes	Legal basis	Period of data processing
Product newsletters: Providing technical information on the services you use	Legitimate interest of the controller (Art. 6(1)(f) GDPR)	Until the termination of the contract with our client or the successful resolution of an objection to data processing
Insight newsletters: Marketing of the controller's products and services, e.g. sending information on new services or topics you are interested in	legitimate interest of the controller (art. 6(1)(f) GDPR)	until such time as you object to the processing

What personal information is processed about me?

We process your contact information (e.g. name, position, phone number, email address) and your contact history.

To whom is the data transferred, and to whom is it shared?

Recipients of personal data may be:

Other Gemius Group entities providing, for example, technical, legal, auditing or accounting services,
In case of product newsletters: your employer (our client), which has entered into an agreement with us,
Entities delivering correspondence,
Public authorities or entities entitled to obtain data under the law,
Suppliers acting on our behalf, including CRM system or email marketing platform providers outside the European Economic Area (data is transferred subject to security measures provided by law, for example, Standard Contractual Clauses).

What are my rights?

You have the right to:

Request access to your personal data, request a copy of it, and request their transfer,
Request rectification (correction) of personal data,
Request for restriction of processing of personal data,
Request deletion of personal data,
Object to the processing of personal data.

How can I contact you regarding the processing of my data?

If you have any questions or concerns regarding data processing, please contact us at the e-mail address of our Data Protection Officer: privacy[at]gemius.com. If you believe that we have acted inconsistently with this Policy or have any questions, please contact us at the above e-mail address or by mail to our address as indicated on the page containing contact information for Gemius Group companies. You may also make a formal complaint to the relevant data protection authority.