Participants Privacy Policy

TANDEMZ, a simplified joint stock company with capital of €2560, whose registered office is located at 4 rue de Ventadour, 75001 PARIS, registered with the Paris Trade and Companies Registry under number 881 896 187,(hereinafter "TANDEMZ") is concerned about the protection of Personal Data and undertakes to protect them in accordance with applicable regulations and in particular Regulation (EU) No. 2016/679 of 27 April 2016 known as the "General Data Protection Regulation" or "GDPR" and Law No. 78-17 of 6 January 1978 as amended, known as the "Data Protection Act" as amended.

When it collects the Personal Data of Participants, TANDEMZ implements the processing thereof for which it is qualified as a "data controller", within the meaning of the aforementioned texts. When recruiting Participants, it acts as a subcontractor if it has no influence on the selection of Participants, but most of the time as a joint controller. 

TANDEMZ acts exclusively as a subcontractor for the planning and organisation of the Sessions.

The Participants are the Data Subjects within the meaning of the Regulations applicable to the protection of personal data.

TANDEMZ undertakes to comply at all times with the requirements of the Regulations applicable to the protection of Personal Data and to process Personal Data only in accordance with the conditions set out below.

1. Definitions

In this privacy policy, the terms identified below by a capital letter have the following meaning, whether they are used in the singular or plural:

  • Personal Data: refers to data which, within the meaning of the Regulations applicable to the protection of personal data, makes it possible to designate or identify, directly or indirectly, a natural person.
  • Participant: refers to any natural person of legal age and capacity who accesses the Platform in order to take part in a Session, regardless of where they are and how they access it.
  • Research Partner: means any research institute, university, academic researcher, research centre, media and consultancy agency, marketing or UX department, company innovation and statistics department, and any other organisation or company carrying out statistical surveys, interviews, product tests or online communities with Participants.
  • Platform: refers to the test platform entitled "Tandemz", published by TANDEMZ and made available to the Participant via the Internet, on the Site.
  • Data Subject: has the meaning given to it in the General Data Protection Regulation or "GDPR".
  • Regulations applicable to the protection of personal data: means any regulations applicable to the protection of personal data and in particular Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 known as the "General Data Protection Regulation" or "GDPR" and Law No. 78-17 of 6 January 1978 as amended known as the "Data Protection Act".
  • Sessions: refers to the study and test sessions offered on the Platform, enabling a Participant to take part in a study on a product, a service, a Participant test, a Participant interview or a focus group, it being specified that these sessions may take place outside the Platform.
  • Site: refers to the https://www.tandemz.io/ website published by TANDEMZ and providing access to the Platform and the Sessions.

2. Purposes of processing Personal Data

TANDEMZ processes the Participant's Personal Data for the following purposes:

  • Registration of the Participant on the Tandemz panel ;
  • Eligibility and participation of the Participant in Sessions ;
  • Propose Sessions to Participants according to their profile;
  • Organisation of the dates and times of the Sessions (excluding the online questionnaire) and, if necessary, their location;
  • Improving the performance and functionality of the Platform ;
  • Handling your requests and complaints;
  • Administration and management of counterparties ;
  • Your participation in the sponsorship programme ;
  • Prevention and detection of fraud, malware (malicious software) and management of security incidents;
  • Management of any disputes;
  • Monitoring and analysis of Platform traffic; and
  • For statistical purposes.

3. Personal data processed

As data controller, TANDEMZ processes the following Personal Data:

Participant data collected when registering on the Platform or on the panel :

  • Full name ;
  • Email address ;
  • Telephone number ;
  • Date of birth ;
  • Age
  • Profession
  • Average income
  • Type
  • Languages spoken
  • Digital equipment owned
  • Familiarity with digital technology or the operating system used
  • Postcode, town and country of residence
  • Diploma level
  • Professional situation
  • Family situation
  • Hierarchical level
  • Type, size and industry of company

Participant data collected when browsing the Platform :

  • IP address ;
  • Browser and indirectly the device and operating system (via browser version)
  • Language
  • Time zone

Participant data that may be collected when requesting to take part in a Session, depending on the specific requirements of each Session:

  • Full name ;
  • Email address ;
  • Telephone number ;
  • Date of birth ;
  • Profession
  • Average income
  • Type
  • Languages spoken
  • Digital equipment owned
  • Familiarity with digital technology or the operating system used
  • Postcode, town and country of residence
  • Diploma level
  • Professional situation
  • Family situation
  • Hierarchical level
  • Type, size and industry of company
  • Consumption habits
  • Interests.
  • Other items requested in the questionnaire (on a case-by-case basis)

‍

We also record whether you have participated in one or more Sessions (without knowing the content of these Sessions) and whether there was any difficulty or problem during the said Session (this information being provided to us by the Study Partner).

The compulsory or optional nature of data entry is specified at the time of collection, by an asterisk next to the data that must be filled in. The compulsory provision of certain personal data is necessary for TANDEMZ to implement the above-mentioned purposes. Optional data enables TANDEMZ to get to know the Participant better and to offer the Participant Sessions adapted to his/her profile.

If the application questionnaire for a Session contains questions asking for sensitive personal information, additional express consent will be requested from the Participant to process this Personal Data. Sensitive data is, in application of the Regulations applicable to the protection of personal data, information which reveals the alleged racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, data concerning health, data concerning the sex life or sexual orientation of a natural person.

In addition, the Participant is informed that the personal data communicated during the Session may be processed by the Study Partner (and not TANDEMZ).

4. Legal basis for processing

Depending on the case, we process your personal data in our capacity as (co-)controller, in the performance of pre-contractual or contractual measures, on the basis of your consent, our legitimate interest or in compliance with legal obligations:

  • contract (performance of pre-contractual measures/performance of the contract): we process your personal data on the basis of the performance of pre-contractual measures or the performance of the Contract in order to (i) register you and connect you to the Platform, (ii) process and respond to your requests and complaints, (iii) administer and manage your Rewards, (iv) schedule Sessions (excluding online questionnaires), (v) analyse your profile and your use of the Site and the Application in order, in particular, to select you to respond to our Study Partners' Surveys and (vi) invite you to participate in our Partners' Surveys and programmes.
  • Legitimate interests: in certain cases, we process your personal data in our legitimate interests, provided that we do not disregard your interests or your fundamental rights and freedoms. This is the case, for example, in order to (i) inform you of updates and services on the Platform, (ii) monitor your satisfaction, (iii) improve the ergonomics of the Site and the Application, (iv) provide you with a better survey experience, (v) ensure the safety and security of the Platform and the Site, (vi) detect and prevent fraud, including by establishing files of persons suspected of fraud,(vii) prevent the deletion or exclusion of data, in particular to prevent the same person from completing the same Survey more than once, (viii) to improve and monitor the quality of our services, (ix) to carry out sociological research, (xi) to analyse your paradata for specific research projects, (x) to provide our Partners with our services for the purposes of market research, opinion research and sociological research, (xiii) to compile anonymous statistical data.
  • Legal obligations: we may be required to process your personal data in order to comply with legal, regulatory, judicial or administrative obligations, and in particular in the context of (i) the management of our general accounting and tax obligations, and (ii) the management of your IT rights and freedoms.

‍5. Retention period of Personal Data

The Participant's Personal Data collected for the purposes of registering for the panel as well as for offering the Participant Sessions adapted to his/her profile are kept for a maximum period of 2 years after the last participation. As the end of this retention period approaches, TANDEMZ will send an e-mail to the Participant informing him/her of the forthcoming deletion of his/her Personal Data. Beyond that, Personal Data is archived by TANDEMZ, in a secure environment, for the legal period of prescription for the purposes of proof for the establishment, exercise or defence of a legal right. Beyond this period, the Personal Data is anonymised for scientific research and statistical purposes (art. 89, paragraphs 1 and 2 of the General Data Protection Regulation of 27 April 2016), as the anonymisation of this data no longer makes it possible to identify the persons concerned.

The Participant's Personal Data collected as part of the Participant's participation in Sessions are only kept by the Study Partner of the said Session in accordance with the conditions indicated by the latter. 

6. Recipients of Personal Data

The Participant's Personal Data is strictly confidential and intended exclusively for TANDEMZ and the Study Partner organising the Session(s) in which the Participant participates. As part of the organisation of a Session, TANDEMZ will send the Study Partner concerned by the Session:

  • The Participant's first name ;
  • The first letter of the surname and then, once the appointment has been made, the full surname;
  • The address chosen by the Participant for the meeting
  • The Participant's answers to the Session registration or pre-selection questionnaire.
  • The telephone number, once the appointment has been made or at the time of registration, if the Partner has chosen the option of calling the Participant to confirm certain elements of the selection questionnaire with him/her.
  • The email address once the appointment has been made.

The information communicated by the Participant to an online questionnaire or during a Session is not known to TANDEMZ but only to the Study Partner.  TANDEMZ therefore does not process this data.

Unless legally or judicially obliged to do so, TANDEMZ will never disclose, assign, rent or transmit the Personal Data processed on the Platform to third parties other than its customers and the following technical service providers:‍

‍

These service providers act as subcontractors of TANDEMZ within the meaning of the regulations applicable to the protection of Personal Data, on the instructions of TANDEMZ and under the contractual conditions signed with TANDEMZ respecting the Regulations applicable to the protection of Personal Data.

The staff of Tandemz and its subcontractors within the Bilendi Group who need access to this data, and the staff of certain service providers or subcontractors (including chartered accountants, statutory auditors, IT development companies, technology services companies, and companies providing and ensuring the delivery of offsets) will also have access to the aforementioned personal data.

‍7. Safety measures implemented

TANDEMZ undertakes to ensure the security and integrity of the Personal Data processed on the Platform. To this end, TANDEMZ implements and maintains technical and organisational security measures for the Platform and, more generally, for its information system, adapted to the nature of the Personal Data processed and the risks presented by their processing. These measures are designed to (i) protect Personal Data against destruction, loss, alteration or disclosure to unauthorised third parties, (ii) ensure that the availability of Personal Data is restored and that access to it is possible within an appropriate timeframe in the event of a physical or technical incident.

8. Transfers of Personal Data outside the European Union

The Participant acknowledges that he/she has been informed that his/her Personal Data is hosted on the servers of Amazon Web Services Inc. located in the United Kingdom.

The Participant acknowledges that he/she has been informed and accepts that his/her Personal Data may be communicated to subcontractors whose services are hosted in countries outside the European Union. TANDEMZ's subcontractors guarantee that these transfers are carried out under appropriate and suitable conditions of security and confidentiality so as to guarantee a level of protection of the Participant's Personal Data equivalent to the level required within the European Union, in accordance with the Regulations applicable to the protection of Personal Data.

9. Rights of Data Subjects to their Personal Data

Data Subjects have the following rights with respect to their Personal Data at all times:

  • Right of access: to obtain confirmation of the processing of his/her Personal Data and a certain amount of information about the processing, it being understood that this information is in any case given in this Personal Data protection policy;
  • Right of rectification: to obtain rectification of Personal Data that is inaccurate or incomplete;
  • Right to erasure ("right to be forgotten"): obtaining the erasure of Personal Data when it is no longer necessary for the purposes for which it was collected or when the Data Subject objects to the processing of his or her Personal Data;
  • Right to the limitation of processing: to obtain the limitation of the processing of his/her Personal Data when the Data Subject disputes the accuracy of the data, when the data retention period has expired but the Data Subject still needs to retain the Personal Data for the establishment, exercise or defence of legal claims, or if the Data Subject has objected to the processing;
  • Right to portability: to obtain communication of the Personal Data that the Data Subject has communicated to TANDEMZ in a readable format, or to request that TANDEMZ transmit the Personal Data that the Data Subject has communicated to another data controller;
  • Right to object: to object at any time, on grounds relating to his or her personal situation, to the processing of his or her Personal Data, in particular where such objection concerns commercial canvassing, including profiling;
  • Withdrawal of consent: withdrawing consent to the future processing of Personal Data by TANDEMZ, where processing is based on consent;
  • Right to lodge a complaint: lodge a complaint with the Commission Nationale de l'Informatique et des Libertés if the Data Subject considers that the processing carried out by TANDEMZ constitutes a violation of his/her Personal Data. In France, this can be done at https://www.cnil.fr/fr/plaintes or by post to the following address: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

The rights of Data Subjects to their Personal Data may be exercised at any time by contacting TANDEMZ by email at the following address: rgpd.tandemz@bilendi.com . The Data Subject will be asked for proof of identity.

The contact details of our Data Protection Officer are as follows:
Name: HARLAY AVOCATS, 83 boulevard Haussmann 75008 Paris 

10. Cookie management

TANDEMZ uses cookies for the proper operation of the Platform and to monitor and analyse traffic on it. A "cookie" is a small data file sent to the Participant's browser by a web server and stored on the Participant's computer hard drive. There is no risk of damage to the computer.

The information collected by means of cookies is solely and strictly intended for TANDEMZ, in compliance with the regulations applicable to the protection of Personal Data. Cookies from third-party publishers (Google, Facebook) allow these publishers to access the information collected through their cookies, according to the methods specified in the table and the "Social Networks" clause below.

The list of cookies used by TANDEMZ is available in its acceptance window.Click here to see it again

The Participant is free to consent to the use of all or some of the cookies (other than those strictly necessary for the operation of the Platform) used by TANDEMZ on the Platform. The Participant can make their choice when they first connect by clicking on the categories of cookies they accept.The Participant is also free to withdraw their consent to the use of cookies at any time by clicking here

The Participant may also configure their browser to accept or deactivate cookies.

Cookie instructions for the most commonly used browsers are available at the following links:

11. Do Not Track

The Site and Platform respond to the Do Not Track ("DNT") signal. For more information on DNT, visit https://allaboutdnt.com/.

‍

‍

‍Updated: October 2024

‍