Insight Institute AG, a Swiss company headquartered at Bergstrasse 139, 8032 under company number (UID) CHE-112.261.967 ("INSIGHT", "we"/ "us"/ "our") is responsible for the processing of personal data we collect about you ("you", "your") within the scope of market research activities which you participate in.
We process your personal data in accordance with the Federal Act on Data Protection (DSG) and the corresponding Data Protection Ordinance (VDSG).
Furthermore, we are committed to adhering to the ICC/ESOMAR International Code on Market, Opinion and Social Research and Data Analytics (ESOMAR: www.esomar.org) and to the professional ethical standards and guidelines as set forth by the Swiss Data Insights Association (www.swiss-insights.ch).
This Privacy Policy provides you with the relevant details on data processing within the scope of our activities, and your data protection rights. It details how we collect and process your personal data when you visit our website, when you use our services or participate in our market research studies.

Your personal data will be used exclusively for the purposes specified below and for which you have given your consent. We collect and process personal data only to the extent necessary in order to fulfil the respective purposes. Your personal data will only be used as we describe in this Privacy Policy unless you have expressly given consent for us to use your personal data for other purposes. We will ask for your consent in advance if we intend to use personal data for which we have your consent to process for purposes other than those specified in the Declaration of Consent.
We collect and compile your data as part of our market, social and opinion research activities, in order to provide decision-making aids to companies and public bodies. The aim of market, social and opinion research is to observe, assess and describe behaviours, attitudes, opinions, etc. The exclusive focus is on gaining insights into groups of people and not on your personal data as an individual. Your data may be collected in various ways (online, by telephone, in writing or in person with an interviewer or using a measuring procedure).
Your data will not be used for automated decision-making or profiling.

Personal data is information that relates to you as an individual, either directly or indirectly; by "indirectly" we mean in combination with other information. Examples of personal data include your name, postal address, email address and telephone number, voice, picture or unique device identifier, and responses or observations we receive from you or about you within the scope of market research studies.
Contact details / registration / master data
We collect data in order to provide many of our services. This data may include, but not be limited to, name, postal address, telephone number and email address ("registration data" if you are in our address pool, also referred to as your "master data"). We use your registration/master data to communicate with you and to inform you about our guidelines and terms & conditions, or for when we answer your queries. If your data is in our address pool, we will also use your registration/master data for requests to participate in our research studies.
Applicant data
If you apply for a job at INSIGHT, we will collect and process your contact details and applicant information for the purpose of decision-making as to potential employment with us. This includes information in relation to your professional life as well as information stated in your CV, certificates, transcripts, and employment reference letters.
Research/survey data
This includes all types of personal data collected from you during your participation in our research. The aim is to analyse behaviours, opinions, and attitudes. It does not involve interpreting your personal data but that of a group of people in anonymised form.
Group discussions and one-to-one interviews for market research purposes are generally recorded on video for subsequent note-taking and analysis. In addition, third parties who have commissioned us to conduct research (hereinafter referred to as “CLIENTS”) may, from time to time, follow discussions or interviews live via a screen set up in a different room for quality assurance purposes. Whenever this is the case, data protection and participant identity protection will also always be ensured. We are not permitted to pass on any video recordings to our CLIENTS without your prior written consent.
We work with TYPEFORM S.L. Carrer Bac de Roda, 163, 08018 Barcelona. (typeform.com) for our online surveys. Your answers will be stored on typeform.com. Typeform's data is hosted on Amazon’s AWS service. For more information about Typeform’s data security, click the following link: https://www.typeform.com/help/what-happens-to-my-data/
Data stored on Typeform will be deleted two months after completion of a respective research project.
Publicly available sources
We may collect additional information (contact details) about you as a representative of a client or prospect from publicly available sources. These sources are mainly, but not exclusively, professional social media networks, such as LinkedIn and XING, but also your respective company’s websites and possibly other websites as well. We use this data to optimise communication with you or, depending on the research purpose, to ensure that your profile fits the target group we are looking for.
Financial transaction data
Bank details, payment information (e.g. to compensate you for participation in studies, or payments made by you for services purchased from us).
Personal data provided to us by our Clients
We may receive your contact details from a Client who has commissioned us to conduct a survey about a specific target group. For example, a Client may provide us with a list of their end customers for this purpose. The Client who provides the list is subsequently responsible for processing your contact details and research data. In such instances, we will inform you as to where we received your contact details from.

INSIGHT does not collect or process any personal data of children under the age of 16 without prior parental consent pursuant to the relevant law. If we become aware that personal data of a child has been collected without parental consent, we shall proceed to erase that data immediately.

If necessary to fulfil a project-related research purpose, we may process particularly sensitive data about you ("sensitive data"). Sensitive data is personal data revealing racial and/or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data uniquely identifying a natural person, data relating to administrative and criminal law proceeding or sanctions as well as in relation to social welfare measures, health-related data or data concerning the sex life or sexual orientation of a person. We may process sensitive data if you have voluntarily given your prior, explicit and separate consent to do so within a specific context for a specific purpose, e.g. within the scope of your participation in a market research project. We may also process sensitive data you have disclosed publicly if it corresponds to the project purpose. purpose. We may also disclose sensitive data if this is necessary to assert, exercise or defend legal claims.

Unless your explicit consent to transfer personal data to other third-party categories has otherwise been given, we shall only disclose your personal data for the purposes and to the third parties as set out below. INSIGHT shall take reasonable steps to ensure that your personal data is processed, secured, and transferred in accordance with applicable law.
External service providers
If necessary, we commission the services of other companies and individuals with whom we have entered data processing agreements for the purpose of performing certain tasks to aid in the provision of our services. For example, we may share personal data with external facilitators/interviewers or providers who manage our databases and applications for the purpose of providing data processing services or for transmitting information requested by you, or we may share data with call centres for the purpose of providing support services or conducting surveys within the scope of market research projects. We will only share this data with external service providers, or allow external service providers access to this data, to the extent necessary for the respective purpose. This data may not be used by the external service providers for other purposes, in particular, this data may not be used by the external service providers for their own purposes or for the purposes of third parties. INSIGHT's external service providers are under contractual obligation to keep your personal data confidential.

Public authorities
We will only disclose your personal information to public authorities if required to do so by law. For example, INSIGHT will respond to requests made by courts, law enforcement agencies, regulatory bodies, and other public and government authorities, which may include authorities outside your country of residence.
External Clients
If we are recruiting (search for market research study participants) for another institute or company (Client), we will forward your details to our Client. You will be informed and your consent requested in advance before passing on any such details. We will not pass on any personal data without your prior consent. Our Clients are also under the obligation to use the data exclusively for the research purposes that have previously been defined. Both we and our Clients are under the obligation to protect your data from misuse and to ensure that the principles of data protection are observed at all times.
Our Clients may request recordings of group discussions and one-to-one interviews for further analyses or internal training. We may only pass on these video recordings to our Clients with your written declaration of consent. We will not pass on any recordings or any other personal data to our Clients without your declaration of consent.

When participating in international studies, it may be necessary for INSIGHT to transfer your personal data to countries other than Switzerland. In the event of any international transmission of your personal data you will be informed in advance and asked for your consent.

Your participation in our market research studies is always voluntary. You may therefore discontinue your participation, and thus your disclosure of personal data to us, at any time. If you withdraw your consent to the processing of your personal data, (i.e. also erasure of collected personal data, with exception of anonymous information derived from personal data) or terminate your membership in our address pool, you will no longer receive requests for future studies and will no longer be entitled to any participation incentives or compensation that INSIGHT offers to participants.
If the processing of your personal data is necessary to fulfil a contract between you and us, and you fail to provide the required information, we may discontinue our services under the contract. In that case, we will notify you in advance.
If data processing is necessary to prepare or conclude an employment contract with you and you fail to provide personal data that we require for this, we may be unable to process your application.

We transmit personal data to the extent that this is reasonable and necessary in the context of reorganisations, mergers, divestitures or other transfers of business assets ("Business Transfers"). We will ensure that the recipient of your personal data agrees to treat your personal data in a manner that complies with applicable data protection law and is in keeping with the original purposes of data processing. We will continue to ensure that personal data remains confidential and will inform affected data subjects before their personal data is transferred to another responsible party.

Certain circumstances may require that we use and store personal data for legal reasons, for example, to prevent, identify or investigate a criminal offence, or to prevent a loss, fraud or other misuse of our services and IT systems. We may also use your personal data to comply with our internal and external audit requirements or for data security purposes, or to protect our rights, data security, safety, property, or the rights of other persons.

INSIGHT takes data security very seriously. We take all necessary physical, electronic, and administrative security measures to protect the data we collect, including personal data, from accidental or unlawful destruction, loss, alteration and unlawful disclosure, and to prevent unauthorised access to personal data transmitted, stored or otherwise processed. Our information security policies and procedures are based on generally recognised international standards and are reviewed and updated on a regular basis as necessary to meet our business needs, technological changes and regulatory specifications. Access to your personal data will exclusively be granted to those INSIGHT employees, service providers or partners who require such access to fulfil the purposes previously defined.

Our employees are contractually obliged to comply with the following laws and industry standards:
• DSG/VDSG (Federal Act on Data Protection and the corresponding Data Protection Ordinance).
• Professional ethical standards and guidelines as set forth by the Swiss Data Insights Association (www.swiss-insights.ch)
• International Code on Market, Opinion and Social Research and Data Analytics (ESOMAR: www.esomar.org)Employee Privacy Policy

In the event of a data breach involving personal data, INSIGHT will comply with all applicable laws regarding its duty to notify in the case of a personal data breach.

Our databases are stored in secured environments. Personal data and survey data are stored separately where possible. Personal data can only be accessed by designated INSIGHT specialists. Our Clients do not have access to personal data.

As a general principle, we erase the personal data we have collected from you as soon as it is no longer needed to fulfil the purpose for which it was originally collected (generally after two years). However, we may, under certain circumstances, be required by law to retain your personal data for a longer length of time.
Moreover, we will not automatically erase your personal data if you request us to not contact you again in future. To comply with this type of request, INSIGHT keeps records with information about individuals who do not wish to be contacted again (e.g. in the form of email newsletters or recruitment campaigns for market research projects). Unless you instruct us otherwise, we will treat your request to not be contacted again as consent to store your personal data for the purpose of keeping such records.

We reserve the right to change our data protection practices at our discretion and to update or amend this Privacy Policy at any time. This Privacy Policy is effective as of the "last updated" date stated at the top of this Privacy Policy. We will treat your personal information in accordance with the Privacy Policy under which it was collected unless we have your consent for use of an updated Privacy Policy or for your personal data to be treated in a different manner.