This privacy notice covers the user research that Goaco carries out.
Why are we processing your personal data?
We need information about you when inviting you to take part in research to ensure that:
- you meet the criteria for this piece of research
- we are including a wide range of people
We need to collect data during the research session to ensure that we have an accurate record of what happened and what was said. This is important, because we then analyse this information and use it to draw conclusions about what we should do next.
We will always tell you about the information that we wish to collect about you and how we will use it. We will seek your consent for the collection and use of your data in specific research projects. Full details will be given to you in an information sheet.
Who collects your personal data
Goaco is the controller for the personal data we collect:
Goaco, Kent Space Business Centre, Springhead Road, Northfleet, Ebbsfleet Valley, DA11 8HJ
If you need further information about how Goaco uses your personal data and your associated rights, you can contact the Dorian Stefan at: gdpr@goaco.com or: Goaco, Kent Space Business Centre, Springhead Road, Northfleet, Ebbsfleet Valley, DA11 8HJ
The data protection officer for Goaco is responsible for checking that Goaco complies with the legislation. You can contact them at: gdpr@goaco.com or: Goaco, Kent Space Business Centre, Springhead Road, Northfleet, Ebbsfleet Valley, DA11 8HJ
What personal data we collect and how it is used
Goaco may collect your:
- name and contact details
- views and experiences of a topic
- internet protocol (IP) address
- kind of device used
We may sometimes ask for more sensitive personal data such as your:
- age
- education or skills
- health or disability
- level of income
- location
- observed behaviour
- race and ethnicity
Your personal data may be used as part of the user research that Goaco carries out. For example, Goaco may use personal data to understand how people’s attitudes and behaviours can differ depending on demographic factors.
Goaco will give details of what personal data is collected and how it is used when it invites you to take part in the research.
Legal basis for processing your personal data
The legal basis for processing your personal data is:
- your consent
Legal basis for processing your special category personal data
The legal basis for processing your special category personal data is your explicit consent.
Consent to process your personal data
Where the processing of your personal data is based on consent, you can normally withdraw your consent, and have personal data removed. You can do this using the contact details provided by Goaco when you take part in the research.
However, you may not be able to withdraw your consent once Goaco has incorporated it into its analysis. If this is the case, Goaco will tell you when you take part in the research.
How long Goaco holds personal data
Goaco will keep your personal data for up to 3 years after the end of your research session. Data that has been made anonymous may be kept for longer.
Personal data will be deleted earlier if no longer needed for research purposes. Goaco will tell you this if this is the case when it invites you to take part in the research.
Who we share your personal data with
Goaco does not normally share your personal data with third parties. If we need to, we will tell you when we invite you to take part in the research.
Information requests
Goaco respects your personal privacy when responding to access to information requests.
Data that has been made anonymous
Normally, Goaco makes any personal data it shares with third parties anonymous. This may involve removing your personal data or combining it with other data.
Your anonymised information may be shared in the form of:
- presentations
- processed data
- reports
- video clips
What happens if you do not provide the personal data
Goaco may not be able to gather your views and experiences. You will not be able to contribute to the specific goals of the research.
Use of automated decision-making or profiling
The personal data you provide is not used for:
- automated decision making (making a decision by automated means without any human involvement)
- profiling (automated processing of personal data to evaluate certain things about an individual)
Transfer of your personal data outside of the UK
Goaco will only transfer your personal data to another country that is deemed adequate for data protection purposes.
Your rights
Find out about your individual rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 by contacting the Information Commissioner’s Office at www.ico.org.uk or phoning 0303 123 1113.
Complaints
You have the right to make a complaint to the Information Commissioner’s Office at any time at www.ico.org.uk or phoning 0303 123 1113.
