Information on the processing of personal data in market research and user research

Contact with Data Controller
The controller of your personal data is: Symetria UX Sp. z o.o. with its registered seat in Poznań (60-749) at ul. Wyspiańskiego 10/3, entered into the Register of Entrepreneurs at the National Court Register, entry No.: KRS 0000521812, NIP (taxpayer ID): 779-242-40-20, REGON (statistical ID): 302809682.
In matters related to data protection, you can contact our Data Protection Officer at: pdo@symetria.pl or by regular post at the address of the data controller’s registered office.

Purpose of processing and data recipients
The data controller hereby declares that it processes personal data on the basis of the user’s informed consent under Article 6(1)(a) of the GDPR or under an agreement with the user under Article 6(1)(b) of the GDPR. 

The purpose of data processing is to carry out market research and user research and to send marketing content via the communication channel that the user has voluntarily consented to, i.e. via an electronic message to a specified e-mail address and/or via a telephone notification (text/multimedia message), in order to present commercial offers and send personalised messages about products and services of Symetria UX - on the basis of the controller’s legitimate interest (Article 6(1)(f) of the GDPR).

Personal data may be transferred to the following data recipients:
●banks – for payment of incentives for participation in research;
●government bodies (e.g. social security institution, tax authorities and other entities entitled under the law) - in order to fulfil the controller’s obligations;
●ICT operators (hosting companies, IT service providers);
●our providers of legal, HR, accounting, tax or advisory services;
●the client’s organisation that has commissioned research.

Period of data retention
Your personal data will be stored until the completion of the study/ research agreement or until you withdraw your consent, except when you express an interest in participating in future studies (for no longer than 5 years), and except for data which must be processed for the fulfilment of obligations incumbent on the controller and set out in the law, and when it is necessary for the fulfilment of the controller’s legitimate interest.

Rights of data subjects
You have the following rights (in situations specified in the GDPR):
●the right of access to your personal data,
●the right to request data rectification,
●the right to have your data erased,
●the right to restrict processing,
●the right to object to the processing of your data on grounds relating to your particular situation in accordance with Article 21 of the GDPR,
●to the extent that the processing of your personal data is based on consent given under the GDPR, you have the right to withdraw such consent. The withdrawal of consent does not affect the processing that was carried out before such withdrawal.

You also have the right to lodge a complaint with the Polish Personal Data Protection Office (UODO) if you believe that the processing of your personal data violates the provisions of the GDPR.

The provision of your personal data is voluntary. If you do not provide personal data, it may be impossible for you to participate in a study and/or to perform the agreement.

In principle, personal data will not be transferred outside the EEA or made available to international organisations. However, if the controller uses service providers from outside the EEA that have not been recognised by the European Commission as providing an adequate level of protection for personal data, any transfer of personal data to the aforementioned entities shall take place under standard data protection clauses adopted by the European Commission, whereby they are covered by adequate safeguards with respect to the protection of privacy and the rights and freedoms of the data subjects. A copy of the standard contractual clauses may be obtained from the controller.

Your personal data will not be subject to automated processing (including profiling) in such a way that any decisions may be taken as a result of such automated processing, that other legal effects may be generated or that your rights may otherwise be significantly affected.