Legal
Privacy Policy
This policy explains what personal data Dnexus Global collects through this website and through the research we conduct, why we hold it, and what rights you have over it.
Draft. This document has not yet been reviewed by legal counsel. It describes what we intend to do and is published for transparency, not as a contractual or legal guarantee.
Who we are
Dnexus Global provides market research fieldwork services to research agencies and brand insight teams. For research we conduct on behalf of a client, that client is usually the data controller and we act as a processor on their instructions. For this website and for direct enquiries, we are the controller.
What we collect
- Enquiry details you submit through a form on this site: name, organisation, email address and whatever you choose to tell us about your project.
- Job application details where you apply through the careers section, including your CV and the information in it.
- Research participation data where you take part in a study we operate, as described in that study's own participant information.
- Basic technical information about your visit, such as pages requested and approximate location derived from your IP address.
Why we hold it
Enquiry data is held to respond to you and, if we work together, to run the project. Application data is held to assess your application. Research participation data is held for the purposes set out in the study you took part in, and for the period that study requires.
We do not sell personal data, and we do not use enquiry or application data for advertising.
Legal bases
- Legitimate interests, for responding to a business enquiry you sent us.
- Contract, for administering a project once we are working together.
- Consent, for research participation and for any marketing communication.
- Legal obligation, where we are required to retain records.
How long we keep it
Enquiry data is retained for up to 24 months from the last contact. Application data is retained for 12 months unless you ask us to keep it longer for future roles. Research data is retained for the period stated in the study participant information, which is set by the client as controller.
Where we retain a record of an automated screening decision for audit purposes, we separate that record from the personal identifiers and delete the identifiers on the schedule above.
Who we share it with
Research data is shared with the client who commissioned the study, on the terms set out in that study's participant information. We use service providers for email delivery, hosting and analytics; each is bound by contract to process data only on our instructions.
Where fieldwork is carried out by a local partner, that partner processes participant data under contract with us and to the same standards.
International transfers
We work with partners in markets around the world, so personal data may be transferred outside the country it was collected in. Where that happens we rely on appropriate safeguards, including standard contractual clauses.
Your rights
- Access a copy of the personal data we hold about you.
- Ask us to correct data that is inaccurate.
- Ask us to delete data, where we have no overriding obligation to keep it.
- Object to or restrict processing based on legitimate interests.
- Withdraw consent at any time, where consent is the basis we relied on.
- Complain to your data protection authority.
Contacting us
Data protection questions and rights requests can be sent to the enquiry address on our contact page. If your request relates to a research study, tell us which study, and we will pass it to the client as controller where that is the correct route.