home

I. INFORMATION CLAUSE – TELEPHONE SURVEY (CATI)

If you are a respondent taking part in a CATI survey, i.e., a quantitative research method conducted by telephone, please read the detailed information concerning the processing of your personal data by 4P Research Mix Sp. z o.o.

This information clause fulfils the information obligation referred to in Art. 13(1) and Art. 14(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).

1. CONTROLLER

The controller of your personal data is 4P Research Mix Sp. z o.o., Puławska 12A/5, 02‑566 Warsaw, NIP 521‑32‑24‑826, KRS 0000148637 (the “Controller” or the “Company”). The Controller can be contacted as follows:

  • a) by post at the address indicated above,
  • b) by e‑mail: mail@grupa4p.pl
  • c) by phone: +48 22 565 27 50

2. DATA PROTECTION OFFICER

For matters related to the processing of your personal data and the rights connected therewith, you can contact the Data Protection Officer at iod@grupa4p.pl or in writing at the Controller’s registered address indicated in point 1 above.

3. SOURCE OF PERSONAL DATA

Your personal data were obtained:

  • a) in the case of a purchased database – from Dun & Bradstreet Poland, Pl. Europejski 2, 00‑844 Warsaw,
  • b) in the case of randomly generated samples – using the Random Digit Dialing technique.

4. CATEGORIES OF PERSONAL DATA

The Controller will process your personal data to the extent of:

  • a) for surveys on a randomly generated sample – your phone number and other information that you provide during the call or the interview in which you participate, e.g., first and last name,
  • b) for a purchased database – company contact details (phone number and e‑mail address), company industry, number of employees, registered office, data collected during the telephone interview, and other data disclosed in KRS, CEIDG and financial statements.

5. PURPOSES AND LEGAL BASIS OF PROCESSING

Your data will be processed in order to:

  • a) contact you to propose participation in a survey – legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest consisting in randomly generating a phone number to make contact or contacting phone numbers contained in a database purchased by the Controller,
  • b) conduct the survey – legal basis: Art. 6(1)(a) GDPR – consent to participate in the survey,
  • c) participation in future surveys – legal basis: Art. 6(1)(a) GDPR – consent to participate in surveys,
  • d) interviewer quality control – legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest consisting in listening to fragments of the phone call in order to verify the interviewer’s work,
  • e) establish, pursue or defend potential claims – legal basis: Art. 6(1)(f) GDPR – the Controller’s legitimate interest.

6. RETENTION PERIOD

Your personal data will be processed for the period:

  • a) if you were qualified for the survey but did not participate – data are deleted without delay,
  • b) if you participated in the survey – data related to participation in the survey will be processed for 60 days from the survey date,
  • c) if you consented to participation in future surveys – until the consent is withdrawn.

The above periods may be extended where processing is necessary to establish, pursue or defend potential claims. In the event of refusal to participate in the survey or to be contacted again, data will be stored solely for the purpose of maintaining the so‑called “Robinson List” – a register of phone numbers belonging to persons who refused to participate in the survey or any future telephone contact by the personal data Controller. Detailed information on maintaining the said register can be found here: /prawne/odmowy.

7. RECIPIENTS OF DATA

Your personal data may be disclosed to:

  • a) subcontractors and entities providing services to the Controller (including, among others, IT service providers and technical support) – on the basis of appropriate data processing agreements and in accordance with the Controller’s instructions,
  • b) public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for purposes resulting from generally applicable law.

8. YOUR RIGHTS

The Controller enables you to exercise the following rights:

  • a) access to the content of data – you are entitled to obtain access to your personal data and obtain their copy. In addition, you have the right to obtain information in particular on the purpose of processing, categories of data processed, information about recipients, the planned retention period, and your rights,
  • b) rectification of data – if the data we process about you are incorrect, you have the right to demand immediate rectification of your data. In addition, if the data we hold are incomplete, you have the right to demand that they be completed,
  • c) erasure of data – if your personal data are no longer necessary for the purpose for which they were collected or you lodge an objection to processing and at the same time there are no overriding, legitimate interests on our part, as well as where you consider that we process your data unlawfully, you have the right to demand their deletion in whole or in part. However, this right does not apply to data insofar as they are necessary to establish, exercise or defend our claims or to fulfil our legal obligation to process or store them resulting from applicable law,
  • d) restriction of processing – if you believe that we have incorrect data about you or we process them without a basis, or you do not want us to delete them because they will be needed to establish, exercise or defend claims, and also during the period preceding the lodging of an objection to processing – you have the right to demand that we restrict processing solely to storage or the performance of other actions agreed with you. Despite exercising the above right, we may process your data when establishing, exercising or defending our claims,
  • e) objection to the processing of personal data – at any time you may object to our processing of your personal data if we process them on the basis of our legitimate interest. After an objection is lodged, we will not be able to process personal data based on the aforementioned grounds unless we demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms or grounds for the establishment, exercise and defence of claims,
  • f) withdrawal of consent to the processing of personal data for which consent was given – at any time you have the right to withdraw the consent you have given us to process personal data to the extent that consent was required. Withdrawal of consent will not affect the lawfulness of processing that we carried out on the basis of your consent before its withdrawal,
  • g) lodging a complaint with the supervisory authority – if you consider that we process your personal data unlawfully, you have the right to lodge a complaint with the national supervisory authority, which is currently the President of the Personal Data Protection Office (UODO).

In the event of exercising the above rights, please send your request to the address indicated in point 1 or 2 of this clause. We also inform you that the above rights are not absolute and will not apply in every case of our processing of your personal data.