PRIVACY POLICY Last Updated: 28 July 2020, Version 1

1. Introduction

This study is conducted by Kantar Singapore Pte Ltd performed by the Insights Division of Kantar Singapore with a mailing address “50 Scotts Road, #02-01, Singapore (228242)”. Learn more about Kantar at www.Kantar.com.

We ask you to read this privacy policy carefully.

Kantar Singapore respects an individual’s right to privacy and has based its privacy policy on the Singapore Personal Data Protection Act (“PDPA”), California Consumer Privacy Act (CCPA), and General Data Protection Regulation (“GDPR”).

For the purpose of this policy, the definition of ‘personal data’ is information relating to an identifiable a living individual and/or a specific household, if you are located in California. The terms personal data and personal information are used interchangeably.

Kantar Singapore is committed to protecting the privacy, confidentiality and security of the personal data you provided to us or to the client which contracts their services to us.

By participating in this research, you agree to the processing of your personal data as described by the policy. We ask you to read this privacy policy carefully.

2. Lawful Collection and Use

This Policy explains how we collect, store and use the personal information you provide when participating in the market research studies.

When we conduct surveys, our interviewers/invitations/platforms and questionnaires clearly identify us and explain the purpose(s) of our contact and if applicable, the purpose for our collecting your personal data.

You may decline to answer any questions or withdraw from participation in a survey at any time.

Kantar Singapore collects, uses and discloses your Personal Data for the following purposes:

· Verifying your identity and quality data checks;

· Requesting feedback or participation in surveys, as well as conducting market research and/or analysis for statistical, profiling or other purposes for Kantar Singapore to provide business solutions and recommendation to our client, understand customer behaviour, preferences and market trends, and to review, develop and improve the quality of client products and services;

· For notifying you if there are any incentives or rewards;

· Responding to, processing and handling your queries, requests and feedback;

· Complying with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities; and/or

· Any other purpose relating to any of the above.

We collect and process personal data for the purposes described above, but we do not share or sell your personal data to any third parties.

All survey data are reported on an aggregate level.

We will never misrepresent ourselves or what we are doing. If you receive an email that concerns you, purporting to be from us, please let us know as shown below in ‘11. Contact us’.

3. International Data Transfers

The data that we collect from you may be transferred to and/or stored outside your country or territory. It may also be processed by staff operating outside your country or territory who work for us or for one of our suppliers. If your personal data is transferred to, stored at or otherwise processed outside your country or territory, and that country or territory has not been recognized as providing an adequate level of data protection, we will put in place additional safeguards to protect your personal data, as required by applicable law. For example, if you are in the EEA, standard contractual clauses would be used if we process your data outside the EEA.

4. Confidentiality and Industry Requirements

We take appropriate technological and organisational measures to protect the personal information submitted to us, both during transmission and once we received it. Our security procedures are consistent with generally accepted commercial standards used to protect personal information.

All our employees are contractually obliged to follow our policies and procedures regarding confidentiality, security and privacy.

We adhered to the following standards and industry requirements:

· Kantar Singapore is a Kantar company and Kantar corporate information security policy is based on ISO 27001:2013 standard;

· Mission critical network and computing resources are secured in separate and diverse data centres with security features including smart card access, on-site security officers, video surveillance, UPS and generator-backed power supply, HIVAC controlled environment;

· Kantar Singapore uses several layers of network security to prevent unauthorized network access to its systems and data. Internet security is provided by a layered network access architecture, which includes features such as multi-layer firewall, data centre systems managed via private, firewalled, back-end leased line, network and server performance monitoring automation for WAN, LAN and production servers;

· Only relevant team members are authorised to have access to the data collected;

· Where required, access to job folders and/or Personal Data are restricted to only nominated team member;

· All Personal Data in hard copy will be locked in a secured place;

· Whenever data containing personal details are transmitted, they will be sent via an encrypted secured file transfer facility or encrypted email with password protection;

5. Cookie Disclosures

Cookies are small text files stored on your computer by a website that assigns a numerical user ID and stores certain information about your online browsing. They are used by web developers to help users navigate their websites efficiently and perform certain functions. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website’s server.

For behavioural tracking research, we use optional cookies / software applications.

As it is true of most online surveys, we gather certain information automatically and store it in survey data files. This information may include things like Internet Protocol addresses (IP address), browser type, internet service provider (ISP); referring/exit pages, operating system and date/time stamp.

We use this automatically collected information to analyse trends such as browser usage and to administer the site, e.g. to optimise the survey experience depending on your browser type. We may also use your IP address to check whether there have been multiple participations in the survey from this IP address.

6. Accuracy

We take all reasonable steps to keep personal information in our possession or control, which is used on an on-going basis, accurate, complete, current and relevant, based on the most recent information made available to us by you/or by our client.

We rely on you to help us keep your personal information accurate, complete and current by answering our questions honestly and you are responsible for ensuring that the data controller (which may be us – more often – our client) is notified of any changes to your personal data.

7. Children’s Data Collection

When we collect children’s data (all persona ages below 16 years of age at time of collection), we require consent from their parent or legal guardian. This must be verified with ID from that individual and they must confirm that no further consent from any other parent or guardian is required. We do not sell children’s personal data we have collected.

8. Rights of Individuals

To request access to personal information that we hold about you, you should submit your request in writing to the email address shown below in ’11. Contact us’.

Under current EU data protection laws, CCPA and Personal Data Protection Act (Singapore), you have the right to access, rectify or erase your personal information from our systems, unless we have legitimate interest reasons for continuing to process it.

You may also have the following rights if we hold personal information about you:

· Right to restrict processing of your personal information

· Right to withdraw consent to use your personal information

· Right to access your personal data

· Right to rectify your personal data

· Right to erase your personal data from our systems, unless we have legitimate interest reasons for continuing to process the information

· Right to transfer your personal data (portability right)

· Right to object to the processing of your personal data

· Right to not be discriminated against for exercising any of the rights available to you under applicable data protection laws

If you notify us that you wish to exercise any of these rights, we shall respond within 4 weeks. We shall also notify our sister companies to whom we have transferred your personal information of these changes. You may be able to access this personal information and correct, amend or delete it where it is inaccurate. Note that while we communicate to these other parties, we are not responsible for the actions taken by these other parties to answer your request. You may be able to access your personal data held by these other parties and correct, amend or delete it where it is inaccurate.

9. Data Storage and Retention

Personal information will be retained only for such period as is appropriate for its intended and lawful use, unless otherwise required to do so by law. Personal information that is no longer required will be disposed of in ways that ensure their confidential nature is not compromised.

As part of the Company Business Continuity plan and in certain instances the law, our electronic systems are backed up and archived. These archives are retained for a defined period of time in a strictly controlled environment. Once expired, the data is deleted and the physical media destroyed to ensure the data is erased completely.

10. Notification of Material Changes

We keep our privacy policy under regular review and it may be amended from time to time. We will always have the most up-to-date policy on this web page. We will record when the policy was last revised.

Date created: 01/06/2018

Date revised: 28/07/2020

11. Contact Us

If you have any comments, questions or complaints relating to this study or Privacy Policy, you may contact us via:

Email: dpo_sg@kantar.com