MIS Group Privacy Policy - Professionals Research

MIS Group Privacy Policy applying to research involving contacts from a “Professionals File”

Purpose

In order to elicit feedback from professionals, as part of a market research study or scientific research, a company or a public body asked us (MIS Group) to conduct a research study involving the following activities:


  •   Sending one or more emails from a mailing list: invitation email and potential reminder email(s);

  •   Collecting data from an online questionnaire or contact form.


The company or public body that commissions the research study and sets the objectives/goals of the research study is the controller of the personal data, as per the allocation of roles outlined under the General Data Protection Regulation (GDPR).


MIS Group, which has been instructed by this company or public body, is the data processor.


The “Partner Site”, which we have enlisted and which has disclosed your contact details to us (see below), is the sub-processor.



Who are we?

Since 2001, MIS Group has been supporting large national and international brands, small businesses, research and consultancy firms, public institutions and universities/business schools with their marketing studies, with services such as online surveys, online discussion forums, consumer meetings and product tests.


To view the MIS Group Legal Notice: click here.



Data recorded in the mailing list

1. Source of the data

To meet specific needs for some of its research studies intended for professionals, MIS Group may solicit participants from the file of a “Partner Site” (“Professionals File”).

The “Partner Site” is a website specialising in creating contact files, which has recorded your contact details in one of its files on the lawful basis of Consent or legitimate interest.
The “Partner Site” then disclosed this file to MIS Group to enable us to send an invitation email as part of this research study.


2. Data concerned

The data that MIS Group uses from “Professionals Files” are limited to what is strictly necessary, depending on the research study.


Most often, this will be:


  •   Your email address;

  •   Your profession.


As part of this research study, these data have therefore been recorded by MIS Group in a mailing list to enable the invitation email to be sent.


The recipients recorded in this mailing list have been selected according to their profession to take part in the research study. They all received an invitation email similar to the one that you received from MIS Group.



3. Storing the data

The data disclosed by the “Partner Site” to MIS Group are stored in a secure database hosted on an OVH server in France, which is separate from the server on which the answers collected from the online questionnaire or contact form are stored.


Only MIS Group employees authorised to work on the research study may access this database: the research managers from the department involved in the study, staff from the IT department and the Data Protection Officer (DPO).
This database will therefore remain confidential throughout the research study, and after it.
Under no circumstances will the information stored in this database be used for any other purpose than conducting research studies.



4. Reminder emails

You do not have to take part in the research study.
However, you will likely receive one or more reminder emails in the next few days if you have not yet taken part and if you have not removed yourself from the mailing list using the link at the bottom of the email.



Data collected from the questionnaire or contact form

By agreeing to take part in the research study (e.g., by clicking on the button in the email), you will be directed to a questionnaire or a simple online contact form.


We guarantee that your answers collected from the questionnaire or the contact form will be completely confidential:


  •   These answers are collected directly by MIS Group, and stored in a secure database hosted on an OVH server in France (separate from your contract information outlined above);

  •   Therefore, only authorised MIG Group employees may access these answers, in the same way as your contact information used to send the personalised invitation email;

  •   The storage period for these answers is as short as strictly necessary for the purposes of the research.



Session information

In addition to the answers that you enter in the online questionnaire or contact form, session information is automatically collected when you take part in the research study.


This includes the following session information:


  •   The IP address used when taking part in the research study;

  •   The device used when taking part in the research study: device type (PC, tablet, smartphone) and web browser;

  •   The dates and times of taking part in the research study: dates and times of visiting the Introduction and Conclusion of the questionnaire, or visiting the contact form.


This session information is stored in the same way as the answers, in the same secure database hosted on an OVH server in France (see above: Data collected from the questionnaire or contact form).



Lawful basis for data processing

1. Consent

The answers collected from this research study are processed on the lawful basis of Consent.

You are under no obligation to take part in this research study, and you may leave the questionnaire or contact form in progress by simply exiting the page from your web browser.



2. Legitimate interest

The information (contact details) disclosed by the “Partner Site” to MIS Group is processed by MIS Group, as part of this research study, on the lawful basis of Legitimate Interest.

This information has been recorded by MIS Group in a mailing list solely to enable an invitation email (and any reminders) to be sent to take part in a research study, the purpose of which is to elicit feedback from professionals working in specific sectors of activity.

Furthermore, as the amount of this information that MIS Group records in the mailing list is limited to the strict minimum, it may be established that MIS Group’s legitimate interest is proportionate to the limitation of the legitimate interest of the data subjects.
No other method, which would involve processing less personal data, is available for carrying out the activities required for this research study.


About “Partner Sites”:


To date, the list of websites likely to disclose “Professionals Files” to us for market research or scientific research is as follows:


  • www.base-emails.com
  • www.fichierentreprise.fr

Your contact details have therefore been disclosed to us by one of these websites. We invite you to refer to their Privacy Policy for information on how they collected and processed your contact details.



3. Summary

Data collectedLawful basisPurposeRecipients
Information (contact details) recorded in the mailing listLegitimate interestSending you an invitation email (and any reminders) to take part in the research studyMIS Group only
Answers to the research studyConsentProcessing the answers as part of a market research study or scientific research
  • The data controller
  • MIS Group (the data processor)
IP address used to take part in the research studyLegitimate interest
  • Security: identifying robot intrusions and ensuring server protection
  • Identifying potential duplicate answers
MIS Group only
Device used to take part in the research study (device and browser)Legitimate interestIdentifying malfunctions on research studies depending on the device usedMIS Group only
Date and time of taking part in the research studyLegitimate interest
  • For some research studies (questionnaires): calculating the time spent by participants on the questionnaires (to validate whether or not the answers are serious)
  • Producing statistics on the days and times of participation in research studies
  • The data controller
  • MIS Group (the data processor)


Exercising your rights

If you have any questions about how your personal data are processed in connection with this research, and/or if you would like to exercise your right of access, right to rectification, right to erasure and right to portability over your data, please contact us at this email address: Mr Michaël Saulnier - dpo@misgroup.io


Date of last revision: 16 February 2022


See all Policies