Influence Your World | Toluna

Last updated: May 2025

Who are we?

We are Toluna SAS, with its registered address being at 5 avenue du Château, 94300 Vincennes, Paris, France. Toluna SAS is part of the Toluna global group of companies, which include, Harris Interactive, KuRunData, Brainyak (Gutcheck) and MetrixLab ("We" "Our" "Us" or "Toluna”). These are our group members

Toluna is a global panel provider, using its insights and technology to provide high-quality market research data to its clients, including quantitative and qualitative research solutions, which may be DIY, Hybrid or Full Service.

Toluna SAS is the controller and responsible for your personal data.

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO at [Contact Us].

This privacy notice does not apply where you have agreed to participate in surveys by clicking on a link and entering into surveys administered by third parties. In these situations, Toluna is not the sponsor of the survey and the technologies/media of those surveys and the survey results or survey data are and will be controlled by the sponsor of those surveys, as made known to you when you participate. Please refer to the relevant sponsor’s privacy policy to learn more about those sponsor’s privacy practices.

What is our Privacy Commitment to you?

We respect your privacy and are committed to protecting your personal data. This privacy notice describes how we collect, use, share and secure personal data you provide on https://www.toluna.com (our "site”) and/or via our Mobile app when you become a member of our Global Panel Community and participate in surveys and/or research studies ("surveys”) that we conduct for and on behalf of our clients. It also explains your privacy rights and how laws that are applicable to you may protect you. This privacy notice is intended to supplement other notices and privacy policies and not to override them.

The registration, use of and access to your membership and use of our systems and media ("Services”) are subject to the terms of this privacy notice and to the Terms of Use and Membership.

Frequently asked questions:

• What personal data do we collect about you?

• How do we use your personal data?

• Who do we share your personal data with?

• Do we transfer your personal data to other countries?

• What other ways can you become a member of our Global Panel Community? – Our mobile app

• What cookies do we use on our site?

• What other tracking technologies do we use for surveys you participate in and for other purposes?

• What is our winner’s policy and privacy guarantee?

• What security measures do we undertake to protect your personal data?

• What are our data retention and destruction policies?

• Business Transfers

• Links

• Children’s privacy

• Your rights

  • How do you access your information; use the member services area and/or update, correct or delete your information?

  • How do you terminate your influencers' panel membership?

  • Data Retention

  • How do you ask a question or make a complaint?

  • Your other rights

  • Your rights in the EEA

• Changes to the privacy notice and your duty to inform us of changes

• Privacy contact details

What personal data do we collect about you?

Personal data means any information about an individual from which that person can be identified, either directly or indirectly. It does not include data where the identity of the individual has been removed (i.e. anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• (A) Identity data – name (includes first, last, maiden and married names), date of birth, marital status, gender, panellist id, username, image and/or voice.

• (B) Contact data – postal address, email address, and telephone number.

• (C) Special categories of personal data – ethnic/racial origin, health, genetics, political opinion, religion, sexual orientation and sex life.

• (D) Demographic/Profile data – interests, preferences, feedback and survey responses and including, but not limited to; age, marital status, gender, birthday, household size, income, education, and employment status.

• (E) Technical data includes internet protocol (IP) addresses, hashed email addresses, device identifiers (e.g. Mobile Ad ID’s) and information about; login data, browser type, and version, time zone setting and location, browser plug-in types and versions, operating system and platform, user metrics/statistics such as CPU and app version and Geo-location and other technology on the devices you use to access this website.

Global Panel Community Members

When you agree to become a member of our Global Panel Community ("Member"), you are able to participate in our surveys. We will ask you to complete the registration form via the site or via links displayed on our partners’ websites and you may also register to be a Member via our mobile app.

Non-members of our Global Panel Community

If you are not a Member of our panel ("non-member") but take a survey with us and provide us with your personal data, the only personal data we may preserve about you is your email address, gender, age information, full or partial zip/postal code, machine/device ID and IP address. We do this so we may:

• contact you if you have won a prize or are entitled to an incentive, in which case, we will collect and maintain such personal data, to the extent required by any applicable law or regulation (e.g. for tax reasons, if applicable);

• for quality and/or fraud checking and/or troubleshooting purposes;

• to match you against the survey you are taking; and

• improve the user experience.

We will not contact you for any other reason.

Public Forums and Blogs

Our website offers publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them.

We display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent, we may post your testimonial along with your username. If you wish to update or delete your testimonial, you can contact us at [Contact Us].

You should be aware that any personal data you choose to make public on the site, in the Community area (under a public message on your wall, as an opinion, topic, battle, thumb it, or any other public area or forum) can be read, collected, stored and/or used by other users and could be used to send you unsolicited messages.

How do we use your personal data?

We set out below a more detailed explanation of the ways in which we use your personal data. Where we use any third parties for modelling, analytical or data matching purposes, please be assured that such parties are not allowed to use your personal data for any reason, other than the reasons we state in the table and we enter into contracts with those third parties to ensure your data is kept secure, confidential and erased in accordance with our data retention and destruction policies as set out in this Privacy Notice.

Artificial Intelligence (AI)

Some of Toluna's tools incorporate artificial intelligence capabilities when using your data, which are used for the following purposes:

Who does this policy impact?

Participants in surveys, including Toluna Panellists, members of non-Toluna third party panels and from Toluna client own databases

What AI tools does Toluna use and how do they use them?

Toluna’s Artificial Intelligence (AI) tools, include Machine Learning (ML) and third party Generative Artificial Intelligence (GenAI) tools (“AI Tools”). Toluna uses these tools to deliver an improved experience for its clients and to enhance the quality of its’ services and for fraud and quality checking purposes. If you consent, we may use your image in a qualitative survey in connection with AI tools to give further insights to clients. Your personal data are never used within any third party AI Tools.

If you see this sign on the survey platform when you participate in surveys or whilst using our website, you are being made aware of the use of these AI Tools.

Participants who agree to participate in the pre-survey facial verification program

If you agree to participate in our pre-survey facial verification program, we will use a third-party software identity verification service provider. Those service providers use Machine Learning, computer vision, and algorithmic checks to verify your identity for fraud prevention purposes.

How will this impact on what surveys they will be selected for and how many?

If we use your image for identity verification purposes, this is considered “Biometric Data” under the GDPR. As used in this AI Policy “Biometric Data” means personal data resulting from specific, technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images. Biometric data are special categories of personal data under the GDPR and we enter into a contract with our identity verification service provider, ensuring that it uses reasonable care when it stores your Biometric data and undertakes appropriate security and technical and organisation measures, designed to protect your data from unauthorised disclosure or access.

You may elect to opt out from participating in surveys where identity verification is required. If you do opt in to participating in such surveys, we do not share your personal data (including your image) with any other party. Instead, we will confirm your identity has been verified to our client who is the sponsor of the relevant survey. Please be aware that any use of your data prior to the time you were opted out will not be erased, but we will cease to use your personal data for ID verification purposes for any new surveys you participate in.

Who do we share your personal data with?

• Toluna Group Members

Any of our group members may access or use your personal data for the purposes set out in the table above and/or to carry out our regular business activities, such as to provide, maintain and personalise our sites and services, to communicate with you, and to accomplish our legitimate business purposes, pursuant to contractual safeguards.

• Clients

In general, responses we collect from you via our surveys are provided to our clients either anonymised and aggregated, or are pseudonymised data. If we provide the results in anonymised and aggregated form, the results include information about groups of individuals and not on an individual level. If we provide the results in pseudonymised form, the results will be on an individual basis, using unique identifiers, such as your assigned panellist ID, but will not include your Identity data or Contact data.

Pseudonymised data are data that may be processed about you, which if combined with other data, together may be capable of identifying (or re-identifying) you, but direct identifiers, such as; your name and Contact data are removed. Examples include; unique/persistent identifiers such as your panellist ID, hashed email address or Technical data.

We may share your unique panellist ID (UID) with our clients, who may write, set or read cookies or use other Technical data about you from multiple locations, including our own servers or systems. These technical identifiers are used for fraud and quality checking purposes.

Identity data or Contact data about you would only be provided to our clients in specific surveys for the purposes of research and we would never provide such data to our clients unless we have first received your consent and confirmed with them that their use is in accordance with applicable law and market research codes of practice.

• Our sub-processors

• Cloud Hosting providers: Toluna uses cloud hosting providers whose servers may be based in other countries. Such data transfers are subject to data transfer agreements, e.g. the EU standard contractual clauses.
• Amazon Web Services USA. AWS EU SCC’s
• Microsoft Azure W Europe

Braze - Toluna uses Braze as its Content Delivery Network (CDN) provider, which helps us to speed up our content delivery and communicate with you better. Braze uses AWS and other sub-processors in Braze Subprocessors | Braze. Details on their processing and privacy and security measures can be found here Legal Information | Braze. From time to time, we may use third parties for panel management purposes, e.g. to deliver your rewards in return for your participation in surveys, to manage our email invites or to match our Members to members of other lists or panels or to validate the accuracy of personal data you provide. We may also use Data Management Platforms for the purposes of those parties providing us or our clients with services such as; data processing, data modelling/enrichment or analytics services or to append data they previously collected about you. Such third parties are only allowed to use your personal data for the agreed processing purposes, pursuant to our written instructions and we enter into contracts with those third parties to ensure your personal data is kept secure, processed in accordance with applicable laws and erased in accordance with our data retention and destruction policies.

• Lawful requirements

Though we make every effort to preserve your privacy, we may be required to disclose your personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your personal information as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, to protect your safety or the safety of others, to investigate fraud or breaches of our site terms, or to respond to a government request.

Please see the table above for more on these uses.

In many countries, we are required by law to explain the legal bases we rely on when we process your personal data. These legal bases are listed as follows and we may use more than one lawful basis when processing your personal data.

Consent – In certain cases, we collect and process your personal data with your consent e.g. when you participate in surveys, we will ask you if you wish to participate.

Contractual obligations – In some circumstances, we need to process your personal data to comply with a contractual obligation e.g. when we use your personal data to send you your rewards.

Legal compliance – If the law requires us to, we may need to collect and process your personal data in response to lawful requests by public authorities or if e.g. we believe in good faith that disclosure is necessary to protect our rights, to protect your safety or the safety of others, or to respond to a government request.

Legitimate interest – means the interest of our business in conducting and managing our business (e.g. to investigate fraud or breaches of our site terms and to ensure we provide quality services to our clients, in accordance with best market research practice) and to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Do we transfer your personal data to other countries?

Toluna is a global company and your personal data is transferred to other group members of the Toluna group of companies and our trusted service providers, who are located in countries other than where you live. Please be aware that laws in other countries may differ from the laws applicable in your own country of residence.

If you reside in the EEA, to comply with the General Data Protection Regulation (GDPR), Toluna has put in place adequate safeguards to protect your data and your rights, including standard data protection contractual clauses for the transfer of personal data to third parties in non-adequate countries as decreed by the European Commission.

What other ways can you become a member of our influencers panel? – Our mobile app

Mobile Applications

You may choose to become a Member by using our mobile application (app). When you download and use our mobile app, we automatically collect system and performance information on the type of device you use, operating system version, device identifier and hardware usage statistics such as CPU, RAM, storage, and app version. We will use the information we collect via our mobile app in accordance with the terms of this privacy notice and the provisions set out below.

We send you push notifications from time-to-time in order to notify you about surveys and ask you if you would like to participate in certain marketing research studies in accordance with this privacy notice. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information.

SMS

We may make available a service either directly or through third parties by which you can receive messages on your wireless device via short message service ("SMS Service")

Your provider's standard data and messaging rates apply to all SMS correspondence. All charges are billed by and payable to your mobile service provider. You represent that you are the owner or authorised user of the wireless device on which messages will be received and that you are authorised to approve the applicable charges. Personal data obtained from you in connection with this SMS Service may include your Identity data and Contact data, your provider's name, and the date, time, and content of your messages. The use of this information will be in accordance with this privacy notice. Your wireless carrier and other service providers may also collect data about your wireless device usage, and their practices are governed by their own policies. You acknowledge and agree that the SMS Service is provided via wireless systems which use radios (and other means) to transmit communications over complex networks. We will not be liable for any delays in the receipt of any SMS messages, as delivery is subject to effective transmission from your network operator. SMS message services are provided on an as-is basis. We do not guarantee that your use of the SMS Service will be private or secure, and we are not liable to you for any lack of privacy or security you may experience. You are fully responsible for taking precautions and providing security measures best suited for your situation and intended use of the SMS Service. You can opt out from this service at any time by going to your account page and unticking the option “I agree to receive invitations to surveys by SMS” in the Personal Details tab. If available in your country, you may also be able opt out by text by following the instructions given to you in the SMS we send you.

Single Sign-ON

You can log in to our site using sign-in services such as an Open ID Connect provider. These services will authenticate your identity and provide you with the option of becoming a Member. Services like OpenID Connect give you the option to post information about your activities on this site to your profile page to share with others within your network.

Referral

If you choose to use our referral service to tell a friend about our site, you may pass your unique referral link to your friend and if your friend becomes a Member, we will provide you with Toluna points as a reward.

What cookies do we use on our site?

Our site uses cookies to distinguish you from other users of our site, and estimates visits and click throughs for specific campaigns. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. These cookies expire when your browsing session ends. By continuing to browse the site, you are agreeing to our use of cookies.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

For detailed information on the cookies we use and the purposes for which we use them, see our cookie policy.

What other Tracking Technologies do we use for surveys you participate in and for other purposes?

Surveys - client cookie tracking, including for Ad effectiveness campaigns

We may share your unique panellist ID (UID) with our clients, who may write, set or read cookies or use other Technical data about you from multiple locations, including our own servers or systems. If you participate, your UID will be stored or associated with those Technical data to allow us and/or our clients to conduct online ad-effectiveness campaigns, track your visits to websites, use your Demographic/Profile data to create look-a-like segments and/or gain other online insights about you. If you have interacted with the online ad or promotion, our client will send your UID and the specific survey to us and we may provide you with the opportunity to complete the survey.

Other Technologies – pixel trackers, bot detection

We use Validity and Braze technologies that collect usage statistics about your interactions with our sites and in surveys (“Use”), including the links, objects, products and benefits you view, click or otherwise interact with (also known as “Clickstream Data”). Our emails may also contain tracking pixels that identify if and when you have opened an email that we have sent you, how many times you have read it and whether you have clicked on any links in that email. In connection with your Use, we will create and assign to your device an identifier that is similar to an account number. In addition, in certain circumstances, we may collect the name you have associated with your device, device type, telephone number, country, and any other information you choose to provide, such as username, character name, or e-mail address. We may also infer your approximate geographic location based on your IP address.

You can delete the pixel by deleting the email. If you do not wish to download the pixel to your computer or other device you can unsubscribe from our mailing list at any time on your Account page on our website.

"Google reCAPTCHA" (hereinafter "reCAPTCHA") is implemented on our websites. The eCAPTCHA service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

hCaptcha is implemented on our websites. The hCaptcha service is provided by Intuition Machines inc.,350 Alabama St, San Francisco, CA 94110 USA. You can read the terms of use for Google services and products at Google terms.

We use eCAPTCHA and hCaptcha on our websites for the purposes of distinguishing between users that are bots and those that are real people. reCAPTCHA and hCaptcha analyse various information of the respective visitor (e.g. IP address, mouse movements of the user, length of stay on the website). By using reCAPTCHA, data is transferred to the relevant provider, which is used to determine whether the visitor is a human being or a (spam) bot.

Our legal basis for this data processing is legitimate interest, so we can ensure our panel members are real people (and not bots). You can read which data is collected by Google and HCaptcha and what this data is used for at https://policies.google.com/privacy and/or at https://www.hcaptcha.com/privacy. You can read the terms of use for Google services and products at https://policies.google.com/terms.

Automated technologies or interactions.

As you interact with the site, we will automatically collect Technical data about your equipment, browsing actions and patterns. We collect this Technical data by using cookies, server logs, digital fingerprinting technologies and other similar technologies. We may also receive Technical data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.

To identify and record when you have received, opened or engaged with our website or electronic communications (please see our cookie policy for more information).

Server log files

We may collect Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. This Technical data may be combined with other information collected about you for the purposes of improving our services, site functionality and collecting analytical data.

Digital Fingerprinting Technologies

In general, digital Fingerprinting technologies assign a unique identifier or "Machine-ID" to a user's computer to identify and track your computer. We will not use digital fingerprinting technology (the “Technology") to collect your Identity or Contact data or track your online activities and will not disrupt or interfere with the use or control of your computer or alter, modify or change its settings or functionality. Occasionally, in specific market research programs, we will use the Technology to assist our clients in ensuring the integrity of survey results. The Technology will analyse publicly available information and data obtained from your computer's web browser and from other publicly available data points, including the technical settings of your computer, the characteristics of your computer, and its IP Address, to create a unique identifier, which will be assigned to your computer. The unique identifier will be an alpha-numeric ID In order to assist our clients in protecting and ensuring the integrity of survey results, we may; (a) link or associate your unique identifier to you and any of your personal data; (b) share your unique identifier with our clients and with other sample or panel providers; and (c) receive or obtain a unique identifier linked to you from a third party, including without limitation a sample or panel provider or our client, however we will only provide such information to any third parties (including our clients) on an aggregated and anonymised or pseudonymised basis. In addition, any unique identifier(s) received or obtained by us and linked to you will be protected in accordance with this privacy notice and if required by law, we will ask for your consent in advance.

We shall do everything we can to ensure that the Technology is safe, secure and does not cause undue privacy or data security risks and we shall use and distribute the Technology in a professional and ethical manner and in accordance with (a) this privacy notice, (b) any other statements and/or disclosures made by us to you and (c) applicable laws and market research codes of practice. In the event that we discover or learn of any unethical conduct in connection with the use of the Technology, or that the Technology is being used in a manner that is inconsistent with the statements and/or disclosures made by us to you or is in breach of applicable laws and the market research codes of conduct, we will take immediate action to prohibit such unethical conduct and to ensure the proper administration of the Technology.

Advertising

We partner with third parties to either display advertising on our site or to manage our advertising on other sites. Our third-party partners may use technologies such as cookies to gather information about your activities on their site and other sites in order to provide you advertising based upon your browsing activities and interests. If you are located in the EEA and wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here. Please note this does not opt you out of being served ads. You will continue to receive generic ads.

Social Media Widgets

Our site includes Social Media Features, such as the Facebook Like button (and Widgets, such as the Share This Button or interactive mini-programs that run on our site). These Features may collect your IP address; which page you are visiting on our site; and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our site. Your interactions with these Features are governed by the privacy notice of the company providing it.

What is our winner’s policy and privacy guarantee?

Members and others who take our surveys are randomly selected to win prizes for participation in surveys, content, games and other promotions. All winners are notified by email or via our site of their winnings. Toluna shall post the usernames of winners on our site and on our own blogs and newsletters. For more information, please visit our Terms and Conditions page. Cash and other prizes awarded to non-members will be awarded directly.

What security measures do we undertake to protect your personal data?

Keeping your personal data secure is important to us and we are committed to protecting the information we collect. We maintain administrative, technical and physical safeguards designed to protect the personal data you provide or we collect against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed, which includes ensuing your personal data are stored on our dedicated managed server behind a firewall and using SSL encryption on our website. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Although we do everything we can to keep your data safe, unfortunately no systems can guarantee they are 100% secure. If you have questions about the security of your personal data, or if you have reason to believe that the personal data that we hold about you is no longer secure, please contact us immediately as described in this Privacy Notice.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator or supervisory authority of a breach where we are legally required to do so.

What are our data retention and destruction policies?

How long will you use my personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, the applicable legal requirements and best market research practice.

If you are a citizen or resident of the EEA, or we are processing your personal data in the EEA, in some circumstances you can ask us to delete your data: see the section entitled Your legal rights below for further information.

As the results of the surveys and other aggregated or Pseudonymised data are used for research, scientific, historical and/or statistical purposes (whether publicly or privately funded), we and our clients or other third parties may use this information for such purposes in accordance with the terms indefinitely without further notice to you.

Business Transfers

As we continue to develop our business, we might sell or buy additional assets. In such transactions, Toluna's right to contact you as a Member and the information you have voluntarily provided in your user profile would generally be one of the transferred business assets. Any merger, sale or transfer of Toluna of substantially or all of its business assets (which included our influencer panel), or other fundamental corporate transaction would be to an entity that agreed to comply with all of the material terms of our privacy notice. You will be notified via email and/or a prominent notice will be posted on our site if any transaction may result in any new proposed uses of your personal data which are incompatible with the uses set out in this Privacy Notice and of the choices you may have regarding your personal data.

Links

From time to time we may offer visitors the ability to voluntarily link to other sites. Toluna does not review, and is not responsible for, the content or effect of the privacy policies of these sites.

Children’s privacy

Toluna will not knowingly collect any personal data from any child under the age of 16 (or a higher age as required by applicable law) (“minority age”). If a child under the minority age participates in a survey, we will first ask permission from his/her parents, legal guardian or an adult responsible for the care of the child. Eligible ‘young people’ (individuals aged between 16 and 17) may be invited to participate in our Teens panel from time to time. We comply with COPPA, the EU “Safer Internet programme”, the General Data Protection Regulations and the ESOMAR guidelines in relation to surveys concerning children and young people. If you are a parent or guardian of a child under the minority age and become aware that your child has provided personal data to us, please [Contact Us] and we will take reasonable steps immediately to remove any such information.

Your rights

How do you access your information; use the member services area and/or update, correct or delete your information?

Upon request, Toluna will provide you with information about whether we hold any of your personal data. You may access, correct, or request deletion of your personal data, or terminate your membership by logging into your Member Account. By following the appropriate directions, your information should be automatically updated in our database. For these purposes, and if you are unable to correct your personal data yourself via the Account, you may write to us at the postal address found at the end of this privacy notice, or contact us here. We will respond to all requests within a reasonable timeframe.

How do you terminate your panel membership?

If you choose to end your membership with Toluna or to require us to cease processing your personal data, you may discontinue your membership by going to “Account” and selecting the "Unsubscribe" tab or by going directly to the page "Unsubscribe page". By following the appropriate directions, your record will be marked as "do not contact", and once you have complied with our instructions that we will subsequently send to you, you will no longer receive communications from Toluna. In addition, you will forfeit any incentive balance that has not been requested as of the time you opt out. As an alternative, you may send an email directly using the Contact us form requesting to be removed. Email links are provided on the site so that you may contact us directly with any questions or concerns you may have. Please note until you have been fully unsubscribed, you may continue to receive communications during this short period after changing your preferences while our systems are fully updated.

Data Retention

If you terminate your membership, we will no longer use your personal data to contact you, but in accordance with our backup procedures, we will retain your personal data until your personal data are eventually destroyed in accordance with our data retention and destruction policies and we will continue to employ the security procedures and technologies to keep your personal data safe.

How do you ask a question or make a complaint?

You can direct any questions or complaints about the use or disclosure of your personal data to our Privacy Contact. We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of your personal data within 30 days of receiving your complaint.

If you are based in the EEA and have an unresolved privacy or data use concern that we have not addressed satisfactorily, then please refer to your rights to make a complaint under the paragraph below entitled make a complaint at any time to a data protection regulator.

Your other rights

You may:

• request access to your personal data and we may conduct ID checks before we can respond to your request.

• have your personal data erased, corrected or restricted if it is inaccurate or requires updating. You may also have the right under certain circumstances to request deletion of your personal data; however, this is not always possible due to legal requirements and other obligations and factors. You can update your account information via your Account or by contacting us at the address given below.

• object to the processing your personal data if we are not using your personal data for the purposes set out in this privacy policy.

Your rights in the EEA

If you are in the EEA, you additionally will have the right to:

• have your personal data transferred to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

• make a complaint at any time to a data protection regulator. A list of National Data Protection Authorities can be found here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html.

We would, however, appreciate the chance to deal with your concerns before you approach the data protection regulator so please contact us in the first instance.

Changes to the privacy notice and your duty to inform us of changes

This version was last updated on the date at the top of this privacy policy.

We reserve the right to modify this privacy statement at any time, so please review it frequently. If we do decide to change our privacy notice, we will post those changes to this privacy statement on the homepage, or other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this policy, we will notify you here, by email, or by means of a notice on our home page prior to the change becoming effective.

It is important that the personal data we hold about you is accurate and current. Please keep your Account details updated if your personal data changes during your relationship with us.

Privacy contact details

You may contact us by writing to:

The Data Protection Officer
Toluna SAS
5 avenue du Château,
94300 Vincennes,
PARIS
France