Privacy Policy for Netpanel Media application users

The Policy applies to you if you have installed the Netpanel Media application on your mobile device. (we refer to the Netpanel Media application as "Netpanel Media" in the Policy). Netpanel Media is an application intended for panelists and collects data for conducting audience measurements on various markets.'We', 'us', 'our' in this Policy means Gemius S.A. company developing Netpanel Media and conducting audience measurement on markets.

Principles of processing personal data

The audience measurement (“Research”) aims to define the profile of internet users who use internet resources, i.e., who visit websites and use applications, including a statistical profile of media audiences, including the profile of recipients of advertising campaigns carried out on the Internet. The collected data allow us to present collective statistical information on the media users.

Netpanel Media is one of the ways we obtain data for Research. To properly implement the purpose of the Research, we need socio-demographic data collected through the Research questionnaire, which we may ask you to complete.

After completing the Research questionnaire, we may ask you to install the Netpanel Media. If you did not complete the Research questionnaire but installed the Netpanel Media, we kindly ask you to uninstall the Netpanel Media application.

Our identity and responsibilities

Your data controller in the Research is Gemius S.A., Domaniewska 48 Street, 02-672 Warsaw, Poland.

You can always contact your Data Controller by using the email address - netpanel-media@gemius.com or by postal address above.

If you did not complete the Research questionnaire but installed the Netpanel, your data controller is Gemius S.A., based in Warsaw, 48 Domaniewska Street (02-672). However, since, in such a case, your data is useless to us for conducting the Research, we kindly ask you to uninstall the Netpanel Media.

Regarding your requests, if the requests are directed to Gemius S.A. through the Gemius Privacy Tool website, Gemius S.A. will handle them directly. If the requests are directed to the contact point email, it will promptly forward such requests to Gemius S.A., acting as an intermediary in communication with you.

What kind of data is collected?

Netpanel Media collects the following data:

• Information about the TV and radio channels and advertisements you interact with, collected through "sound matching" technology, which we describe below. For the processing of this data, we need your consent, and we ask that you grant the appropriate permissions for the application on your operating system;
• Approximate or precise location data, depending on the settings of your mobile device; For the processing of this data, we need your consent and we ask that you grant the appropriate permissions for the application in the operating system;
• Your online identifiers; Gemius cookies, operating system and browser version, screen resolution, battery consumption parameters;
• Modified IP address to prevent identification of your full IP address;
• Data about the websites you visit, i.e., the URL of the website you visit and the time the website was opened;
• Data about the ads displayed while using the Internet or applications;
• Data about the applications you use on your Smartphone, i.e., the names of the processes you run, the start and end time of each "screen" in each application you run;
• Advertising ID, which is an ad display ID assigned by Google Play Services that you can reset or block using your operating system settings;
• User agent (a string of characters sent by the application; contains information on, for example, the type of mobile device, operating system, version of the application, and your identifiers).

What is the "sound matching" technology

"Sound Matching" technology is used to recognize radio and TV stations. It consists in the fact that the Smartphone converts the collected sound samples into numerical values at certain intervals and sends these values to us. We compare them with similar samples created from the signal received from TV and radio stations.

With this technology, the original sound, content or flow of the conversation cannot be reproduced in any way. This kind of audio recognition solution is used by many research companies around the world to measure media usage, including via smartphone. It is also used by some applications, such as for song recognition.

Purposes of data processing and data retention

We process data for the following purposes:

Purpose 1: Conducting the Research in accordance with this Policy
The legal basis of this processing activity is your consent (Article 6(1)(a) of the GDPR). You can withdraw it at any time. The data is processed for the period of conducting the Research in your country and then for the expiry of claims directed to us by our contractors. After that period, the data is anonymized. The data is also anonymized when you withdraw your consent.

Purpose 2: Technical support provision
The legal basis of this processing activity is the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR), consisting in providing you with technical assistance. The data is processed for the expiry of claims resulting from the provided technical support unless you object to the processing earlier, and it will be positively considered.

Purpose 3: Contacting you, in particular in the following circumstances:
providing information and interesting facts about the Research, inviting you to broader participation in the Research, inviting you to participate in lotteries, competitions, or loyalty programs.

The legal basis of this processing activity is the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR), consisting in contacting you on the above issues. The data is processed for the period of conducting the Research in a given country unless you object to the processing earlier.

If we invite you to participate in an additional project (for example, by supplemental questionnaires), you will be appropriately informed about the collected data.

To whom may we disclose your data?

We may share your data with the following:

• our subcontractors, including providers of IT systems and analytical and hosting services;
• a company that orders Research on a given market – to verify our calculations and statistics. In such a situation, the shared data scope is minimalized by us;
• our business partners for their research and statistical purposes consistent with the purposes of the Research. In such a situation, we provide your data in a form that prevents any direct or indirect identification (for example, we can limit the data scope, encrypt the identifiers, replace part of the data with a pseudonym, and take other measures of data protection);
• entities organizing competitions or loyalty programs - if we organize such activities.

Is your data passed outside the European Economic Area (“EEA”)?

The data is not passed outside the EEA.
If you are a Panelist from outside the EEA, your data may be transferred to the country you come from. In such a situation, we apply appropriate agreements and regulations to ensure the proper processing standard security and the legality of such an operation.
If it is necessary to transfer your data outside the EEA, then we will follow the relevant provisions of law, in particular:

• we will ask you for your express consent to such transfer and
• we will inform you about the risks associated with such a transfer.

What are your rights?

Respecting your rights, we support data protection according to the binding law regulations. You have the right to:

• withdraw your consent at any time;
• erasure of personal data which concerns you;
• rectification of your data;
• restriction of your data processing;
• right to request access to the data which concerns you;
• object to the processing of your data;
• data portability of your data.

To exercise these rights, contact us at the email address netpanel-media@gemius.com, the Data Controller’s postal address, or visit the Gemius Privacy Tool website.

Remember - if you have completed the Research questionnaire, installed Netpanel Media, and want to withdraw consent, you should also uninstall Netpanel Media. If you do not do this, your data will be sent to us; however, after you withdraw your consent, the data will not be used for Research. If you reinstall Netpanel Media after uninstalling the application, it will indicate that you are giving us your consent again to process your data.

Obligation to provide data

You do not have to share your data. You can always withdraw the consent by contacting us at netpanel-media@gemius.com or the Data Controller's postal address. Such an action brings on that your data are not processed for the purposes of the Research anymore. If you object to e-mail communication (e.g., you click the appropriate link in the e-mails you receive), you will not receive invitations to competitions or loyalty programs.

Additionally - if you had installed Software, you should uninstall it. If you do not do this, the data will be sent to us, however, after the consent withdrawal, the data will not be used for the Research statistics calculations.

Are your interests or other information predicted based on the collected data?

No, we do not use the data for profiling.

Contacting us about the data processing

Any questions and doubts about the scope of data processing might be sent to the e-mail address netpanel-media@gemius.com, or at the postal address of the Data Controller.

Right to complain

If you think that we act against this Policy or have any questions, please get in touch with us at the address above. You can also apply with a formal complaint to the personal data protection authority.

Updates to this Policy

We protect your rights and freedoms in accordance with the law. If we make a vital change to this Policy, we will make all reasonable efforts to inform you at least 14 calendar days before implementing this essential change.