TGM Privacy Notice

We respect the right to privacy of people whose personal data we store, in particular using appropriate technological solutions and legislative measures that prevent unauthorized entities from intruding on their privacy.

This Policy contains information about what you can expect when we contact you, when you contact us, when you register for and use an account on the Statbox platform, or when you otherwise use one of our services.

By reading the following content you will find out:

  • Why we process your personal data
  • The purposes for which we do it
  • Whether the provision of data is mandatory
  • How long we keep the data
  • Whether there are other recipients of your personal data
  • What rights you have

Please be advised that our websites may also include external links which allow direct access to other websites, or that when using our services you may place cookies in your end device in order to enable integrated functions (for instance: Facebook, LinkedIn, YouTube). Each of these suppliers defines the rules of using cookies in its own privacy policy; we therefore have no influence on the privacy policies of those providers and their use of cookies.

Personal Data Controller – Who is TGM?

TGM provides a global online and mobile platform for market and opinion research and insights that connects Panel Owners to market researchers, brands, Panel Members and research Participants for the sharing of consumer opinions and data. The Statbox platform is part of these services and allows users to create and manage an account in order to access the platform's features. TGM Research operates globally with entities in Singapore and Vietnam, among others.

The entity deciding on the purposes and methods of using your personal data (meaning their controller according to GDPR) is TGM Research.

You can contact us via:

  • Phone
  • Vietnam: +84 328 445 688
  • Singapore: +971 5 4421 4421

E-mail

Mail

  • Vietnam: 8th Floor, 30-32 Yersin Street, Ben Thanh Ward, HCMC, Vietnam
  • Singapore: 6001 Beach Rd, #22-01 Golden Mile Tower, 199589

Or via the contact form available at www.tgmresearch.com.

TGM's data protection representative

Considering the security and transparency of the processing of personal data and the need for their constant control, we have appointed a TGM data protection representative as Data Protection Officer – Marcin Kaleta

The representative is mandated by TGM to be addressed in addition to or instead of TGM, in particular by supervisory authorities and data subjects, on all issues related to processing, for the purposes of ensuring compliance with the law on personal data protection.

You can contact the appointed representative using privacy@tgmpanel.com.

TGM protects your privacy

The security of your personal data is very important to us. Accordingly, TGM has put in place reasonable technical, physical and administrative safeguards to protect the information TGM collects. Only those who need access to your information in order to perform their duties are authorized to have access to your personal data.

TGM has also implemented high standards to support the maintenance of a reliable information security management system. In particular, TGM strives to conform its privacy practices to binding laws, codes and regulations, and to the codes of standards of applicable market and opinion survey research associations, including, without limitation, ESOMAR (www.esomar.org) and the Insights Association (www.insightsassociation.org).

Protecting your account and login credentials

When you register for an account on the Statbox platform, we take additional measures to protect your account. Your password is stored in encrypted (hashed) form and is not accessible to our staff. We strongly recommend that you choose a strong, unique password, keep your login credentials confidential and do not share them with anyone. You are responsible for activity carried out through your account. If you suspect that your account has been accessed without your authorization, please contact us immediately at privacy@tgmpanel.com.

How do we get information?

We collect or process personal data only to the extent necessary to achieve the purposes for which they were collected and the purposes of the law or the conditions of the service provided. The scope of data will vary and depend on the purpose of the processing. Most of the personal data is collected for one of the following reasons:

  • We obtained it directly from you or from a third party authorized to provide us with your information
  • You created an account on the Statbox platform and provided us with your registration details
  • You filed a complaint or inquiry
  • You asked us for information
  • You represent your organization
  • You use one of our services

Account registration data

When you register for an account on the Statbox platform, we collect and process the data you provide during sign-up and while using your account. Depending on the type of account, this may include:

  • Identification and contact details, such as your name, email address and (where applicable) phone number
  • Account credentials, such as your username and password (stored in encrypted form)
  • Account and profile settings, such as your preferred language, country, time zone and communication preferences
  • Where relevant to participation in research panels, optional profile information you choose to provide (for example demographic information)
  • Technical and usage data related to your account, such as login dates, IP address, device and browser information, and records of your activity on the platform

You decide what optional information to provide. However, certain information (for example your email address and password) is required to create and secure your account; without it we will not be able to register you or give you access to the platform.

The basis for the processing

In any case, when we process your personal data, we must have a so-called “legal basis”. The legal bases result directly from the law (Article 6 and Article 9 of the GDPR). Below are those on which we most often rely:

  • Consent: You have indicated that you agree to the processing of your data for a defined purpose, e.g. to receive marketing messages or to provide optional profile information.
  • Legitimate interests: Only if the processing is necessary for our business and does not interfere with your right to privacy, e.g. for direct marketing of our products or services, publication of publicly available documents, ensuring the security of the platform and preventing fraud or abuse of accounts.
  • Performance of the contract: We must process your personal data in order to provide you with one of our products or services, including creating, maintaining and managing your Statbox account and giving you access to the platform, or because you are a party to a contract concluded with us.
  • Legal claims: When data processing is necessary to establish, enforce or defend legal claims.
  • Legal obligation: When we are obliged under law to process your personal data, e.g. if you are our employee, we are obliged to process your data in accordance with labor law.

How we use your personal data

We use the data only for the purposes for which they may be processed in accordance with the law. There are many ways in which we may use your personal data, depending on how you interact with us. For example, if you do not provide us with your contact details or the address of the company you work for or represent when negotiating or purchasing one of our products or services, we will not be able to sell you that product or service.

When you register for an account, we use your registration data to:

  • Create, authenticate and manage your account on the Statbox platform
  • Provide you with access to the platform and its features
  • Communicate with you about your account and about services you use, including service-related messages, security notifications and important updates
  • Maintain the security of the platform, verify identity where necessary and prevent fraud or unauthorized access
  • Improve and develop the platform and the services we offer
  • Comply with our legal obligations

We may also want to tell you about offers, ideas, products and services that we think may interest you. If we have your consent or it is in our legitimate interest, we can do this via mail, email, text message or other electronic means of communication. We will not send you marketing messages if you do not want them, but if you purchase a service from us or hold an account with us, we can send you messages related to that service or account.

Who might we share your personal data with?

In addition to TGM Group, several entities may have access to data. They may be service providers with whom we cooperate and who help us deliver the products and services you expect from us or support us in our business — for example, providers of hosting, IT infrastructure, authentication, email delivery or analytics for the Statbox platform. These entities process personal data on our behalf and must meet high security standards. We only share information that allows them to provide us with services or facilitate their provision to you.

Under certain circumstances, we may also be legally obliged to disclose information about you — for example, by court order, law or a public authority decision. In any case, we make sure that we have a legal basis to share information about you and we document our decisions.

Where orders are processed using external suppliers, including TGM Research, or via redirects, data may be transferred to the specified entities for the purpose of fulfilling the order.

International transfers of personal data

In the scope of achieving the processing purposes described in this policy, we may transfer your personal information to our suppliers, partners or service providers located outside the European Economic Area (EEA). In any case, if your data can be found outside the EEA, we will inform you about it.

At the same time, we take care of the security of your data, strictly follow the rules of their transfer resulting directly from the GDPR, and provide data only where the degree of security is guaranteed in accordance with the decisions of the European Commission (e.g. to the USA only to entities on the so-called Data Privacy Framework list) or where binding corporate rules apply.

How long we keep your personal data

As a rule, we store personal data only for the period of time necessary to achieve the purposes for which they are processed, as specified in this privacy policy, in other regulations or in contracts, and in accordance with the law (GDPR) and relevant provisions. We never store personal data longer than necessary.

In particular, we keep the data associated with your Statbox account for as long as your account remains active. When you close your account, or ask us to delete it, we delete or anonymize your account data, except where we are required or permitted to retain certain information — for example to comply with a legal obligation or to establish, enforce or defend legal claims — in which case we keep only the data necessary for that purpose and for no longer than required.

Is there an obligation to provide personal data?

As a rule, providing your personal data is completely voluntary; however, it may be necessary for the provision of specific services or the handling of your requests, e.g. for contact, the conclusion of a contract, the creation of an account, the execution of your processing rights, etc. Providing data may also be necessary due to applicable law. If you choose not to provide the data required to register, we will not be able to create your account or give you access to the platform.

Age requirement

The Statbox platform is not intended for children. You must be at least 13 years old to register for an account. We do not knowingly collect personal data from individuals below this age without the consent of a parent or legal guardian where such consent is required by law. If you believe that a person below the required age has provided us with personal data, please contact us at privacy@tgmpanel.com and we will take appropriate steps.

Your data protection rights

In accordance with the provisions of the law on the protection of personal data, you have specific rights depending on the basis for processing your data.

Right to access personal data

You have the right to know whether and how we use or store your personal data — the so-called right to access personal data. By exercising this right, you can also ask us for a copy of your data.

Right to correct personal data

You may question the accuracy of the data we process and ask us to correct it. This is the so-called “right to rectification”. If your data is incomplete, you can also ask us to complete it, e.g. by adding new information. If you hold a Statbox account, you can also update much of your information directly in your account settings.

Right to erasure

You can ask us to delete your data, and in some circumstances we must do so. This is the so-called “right to erasure”. This right is not absolute and applies, among others, in the following circumstances:

  • We no longer require your data
  • You initially agreed to the processing, but have now withdrawn your consent
  • You objected to the use of your data
  • We processed your data unlawfully

We may deny the right to erasure in the following circumstances:

  • When we are legally obliged to store your data
  • When data storage is necessary to establish, enforce or defend legal claims

If you hold a Statbox account, you can request the closure and deletion of your account at any time, subject to the retention rules described above.

Right to restrict use of your data

You have the right to limit the way we use your data, especially if you are concerned about the accuracy of the data or how it is used. This right is closely related to your right to question the accuracy of your data and to object to its use.

The right to export the data (data portability)

You have the right to obtain access to your personal data in a format that can be opened on a computer, e.g. a CSV file. You can also ask us to send your personal data to another organization. We can do this only where, as stated in the GDPR, it is technically possible. This applies only to the information you provided to us yourself, and the export is delivered in electronic format.

The right to withdraw consent

If the processing of personal data is based on consent, you can withdraw your permission at any time. However, this does not affect data processed before the withdrawal.

The right to make a complaint to a supervisory authority

The processing of personal data in our company is subject to the highest standards of security. If you have any questions or doubts, please contact us and we will answer. If you are still not satisfied with the answer given or with the enforcement of your rights, you can make a complaint to a supervisory authority (e.g. in Poland, to the President of the Personal Data Protection Office).

The execution of your rights

You can ask for the enforcement of your rights in written or oral form. If your request is made orally, we advise you to also send us a written form or an e-mail message to provide a record of the correspondence. This correspondence gives us clear evidence of your action and helps us answer in line with your expectations as soon as possible.

The enforcement of your rights is free of charge, and we answer no later than one month after the request. In case of possible delays, you will be informed immediately. If you want to ask about data processing, contact us via:

  • Phone
  • Vietnam: +84 328 445 688
  • Singapore: +971 5 4421 4421

E-mail

Mail

  • Vietnam: 8th Floor, 30-32 Yersin Street, Ben Thanh Ward, HCMC, Vietnam
  • Singapore: 6001 Beach Rd, #22-01 Golden Mile Tower, 199589

Or via the contact form available at www.tgmstatbox.com.

California Consumer Privacy Act (“CCPA”)

The California Consumer Privacy Act (CCPA) provides multiple privacy rights to California consumers (like the GDPR in the EU). Under the CCPA, California residents have the right to:

  • declare their preferences on the sale of data for advertising and marketing purposes — to say no to the sale of personal information;
  • know whether their personal information is sold or disclosed and to whom.

If you live in an area covered by CCPA jurisdiction, please change your privacy preferences as you wish.

Cookies

Our website may use cookies, which are IT data, especially text files, that are stored on the Data Terminal Equipment (DTE). In general, cookies contain the www address of the page from which they came, the time of storage in the DTE and a unique number.

The usage

Cookies are used to:

  • provide services;
  • make browsing the website easy;
  • identify the device on which the files were already downloaded, in case of reconnecting with the website;
  • keep you signed in and maintain your session when you are logged into your account;
  • create statistics that help in understanding how users browse the website or what could improve the structure and content of the website;
  • adjust the content of the website to specific preferences and optimize browsing, all adjusted to the individual needs of users;
  • exchange information with our business partners in order to broker the supply of their services while using the website.

The types of cookies

We may use the following types of cookies on our website:

  • “session” — stored on the DTE until the user leaves the page or closes the browser;
  • “permanent” — stored on the user's DTE for the time determined in their parameters or until deleted by the user;
  • “performance testing” — record information on how the web pages are used;
  • “functional” — make it possible to remember settings chosen by the user and to personalize the interface;
  • “internal” — provided by the website;
  • “external” — sourced from a site other than our website;
  • “unclassified cookies” — cookies that we are in the process of classifying, together with the providers of individual cookies.

Managing website settings

The software used to browse the website, i.e. the web browser, usually allows the storage of cookies on the DTE by default. You can change these settings. The web browser allows you to delete cookies. You can also automatically block cookies. More detailed information can be found in the “help” option or in the records of your browser.