US Privacy Policy

Privacy Notice

 

Forsta Inc. and its affiliates (“Forsta”, “us” or “we”) understand privacy is an important part of our commitment to you, our clients, other survey participants, and the general public. This privacy notice, (the “Notice”) describes our practices specific to the collection and use of your personally identifiable information (however named in your jurisdiction) (“PII”)  when you participate in research surveys owned and operated by Forsta, (collectively known as the “Sites”).

For information specific to the following jurisdictions please click the link below:

European Economic Area

United Kingdom

California

Colorado

Connecticut

Utah

Virginia

Brazil

Mexico

Forsta has appointed a Privacy Officer who is responsible for monitoring and enforcing compliance with this Notice. Should you have any questions regarding this Notice, you can contact our Privacy Officer by email at privacy@forsta.com.

 

Data Collection & Use

Our surveys are focused on providing you with the opportunity to voice your opinions on a variety of topics and issues. Your opinion is important to us and is the primary focus of the data we collect. Your opinion will be used to offer you or others like you with better tailored products and services.

We will process your PII on the basis of your informed consent, which may be withdrawn as described herein.  

In order to facilitate your membership and ensure that we are including you in relevant studies, we must create a profile of you. To do this, we may collect PII from you such as your name, email address, gender, age, race, and other household information. On occasion, we may automatically add information from your survey responses to your profile. We may also request information about others residing in your household, however, this information will not be PII. All information is viewable by us, and may be shared with third parties only as outlined below.

When filling out surveys, we ask that you do not provide PII unless it is explicitly requested. For example, do not provide information about a health condition in a field that is requesting information about your favorite food.

 

Any time you participate as a respondent in one of our surveys, you can be assured that your individual responses will be kept confidential and will only be shared as outlined in this Notice. You are free to choose whether or not to participate in a survey, free to choose not to answer any specific questions and free to discontinue participation at any time.

 

Security of Data

The security of your PII is important to us. We follow generally recognized industry standards and all legally required measures to protect the PII submitted to us during transmission and once it is received. You may read about some of our technical and organizational measures to keep data safe here: Technical and Organisational Measures available at: https://legal.forsta.com/legal/forsta-technical-and-organizational-measures/.

 

Sharing of Information / Third Parties

We only provide PII to third parties when necessary to help analyze, organize, and manage the information received for our legitimate purposes. Our clients who purchase insight data from us receive aggregate, anonymized data and survey results that do not identify any individual respondents. From time to time however, we may share your PII with others including our clients and other third parties under the following circumstances:

  • The third party provides a service to us, such as a hosting provider, and is contractually bound to protect the confidentiality of your PII and to respect the laws that apply to it;
  • To administer points, sweepstakes/contests and other promotions that you have opted-in to;
  • You have consented to participate directly in a study conducted by or on behalf of our client (and you were made aware of such arrangement);
  • You post the information while participating in an open discussion forum; or
  • When we believe it necessary to comply with the law, to protect the rights or safety of our website, other users, or third parties.

We will never use your PII for reasons that we have not disclosed to you, including selling it to marketers or advertisers for their own purposes.

We reserve the right to use and share all non-PII with others without limitation.

 

Communications from the Site

In order to participate in our surveys, you must opt-in to receive emails from us. The first email you receive from us will be sent to confirm your subscription and verify that the email address you have provided is valid. Subsequent emails will be sent to invite you to participate in surveys, to respond to your inquiries and support requests. 

 

Cookies and Related Technologies

When you visit the Site, participate in a survey, access the member portal, or interact with a survey invite email, we use certain technologies to retain your preferences and provide other Site functionality. These technologies include cookies, web beacons, and digital fingerprints. There is a separate opt-in for these technologies and more information will be provided with such opt-in request.

 

Opting-Out / Withdrawing Consent

At any time, you may choose to opt-out of a survey by clicking the Unsubscribe link at the bottom of our emails, by using the Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed above. Please note that when you unsubscribe, we will not only cease sending you emails, we will also deactivate your membership. Any information you have submitted to us, including survey invites and PII will continue to be retained in accordance with our data retention practices outlined below. Any points you have accumulated and/or sweepstakes eligibility will be immediately forfeited and cannot be reclaimed even if you sign up again at a later date.

Opting-out of a survey does not unsubscribe you from other surveys you have chosen to join. If you have opted-in to participate in one of our other surveys and wish to be removed, you will need to unsubscribe using the respective link at the bottom of our emails or the specific Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed above.

Certain communications are transactional in nature and do not provide you the ability to opt-out.

 

Jurisdiction-specific information

European Economic Area

Your Rights

Under applicable data protection law you have the following rights:

  • The right to be informed as to what we do with your information. This includes but is not limited to the right to know what information we gather, process and store, what we do with it, who we share it with and how long we keep it for
  • If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by notifying us using the Privacy Officer contact details. The lawfulness of our historic processing based on your consent will not be retrospectively affected by your withdrawal of consent
  • The right to access a copy of your information which we hold. This is called a ‘subject access request’
  • The right to object to processing of your information. You can notify us of your objection to us processing your PII using the Privacy Officer contact details.
  • The right to prevent us processing your information for direct marketing purposes. We will inform you and gain your informed consent (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing (i.e., withdrawing your consent) by contacting us using the Privacy Officer contact details or via the various Unsubscribe links in survey emails and in your member access portal.
  • The right, in certain circumstances, to have your information rectified, blocked, erased, or destroyed if it is inaccurate.
  • The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.
  • Enhanced rights to request that we erase, rectify, cease processing and/or delete your information; and
  • In certain circumstances, the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services. This right is called ‘data portability’.
  • The right to lodge a complaint with a supervisory authority regarding Forsta’s data privacy practices. The operations of Forsta AS of Norway are Forsta’s main establishment in the EEA for EU GDPR purposes. The Norwegian Data Protection Authority may be contacted to lodge a complaint. If you wish to formally complain about something you believe is a breach of the EU GDPR, you must send a written inquiry to the postal address: Datatilsynet, PO Box 458 Sentrum, 0105 Oslo, Norway. See https://www.datatilsynet.no/en/about-us/contact-us/how-to-complain-to-the-norwegian-dpa/ for more details.

 

Forsta’s role

Forsta will act as a data controller in relation to the PII we collect via our surveys. Forsta AS is the specific data controller responsible for your PII unless otherwise stated in another more specific privacy notice. The operations of Forsta AS are Forsta’s main establishment in the EEA for EU GDPR purposes. Forsta AS’s privacy officer can be reached to exercise your rights at privacy@forsta.com. The registered office of Forsta AS is Karenslyst allé 51, 0279 Oslo, Norway.

 

 

Purposes of Processing

The purposes of the processing are either stated in the consent note we obtain from you prior to processing your PII, or alternatively:

  • To fulfill your transaction request;
  • To provide you with support;
  • To verify your identity;
  • To provide information on products, services, or callback requests;
  • To send you specific marketing materials, where you have consented to such;; and
  • To invite you to complete web surveys.

 

Recipients of PII

The recipients of your PII will be selected Forsta employees and third parties such as affiliates, hosting providers, web-based software tool providers, and contractors working for Forsta. All such recipients will always be under contract with Forsta ensuring data protection levels equivalent to those set forth in this privacy notice and required by applicable law. Further details may be provided upon request.

 

International Transfers

For purposes of complying with data privacy laws throughout the EEA, Switzerland, and the UK, where Forsta transfers PII to an entity which is outside of these areas and in organized in a jurisdiction which has not received an ‘adequacy decision’ or similar from the relevant regulatory body, Forsta makes such transfers only if subject to an adequate transfer mechanism as described by the relevant data privacy law, e.g., standard data protection clauses(including EU, UK, and Swiss SCCs), model clauses, standard contractual clauses, etc.

 

United Kingdom

Your Rights

Under applicable data protection law you have the following rights:

  • The right to be informed as to what we do with your information. This includes but is not limited to the right to know what information we gather, process and store, what we do with it, who we share it with and how long we keep it for
  • If we are processing your data on the basis of your consent then you have the right to withdraw that consent at any time. Consent can be withdrawn by notifying us using the Privacy Officer contact details. The lawfulness of our historic processing based on your consent will not be retrospectively affected by your withdrawal of consent
  • The right to access a copy of your information which we hold. This is called a ‘subject access request’
  • The right to object to processing of your information. You can notify us of your objection to us processing your PII using the Privacy Officer contact details.
  • The right to prevent us processing your information for direct marketing purposes. We will inform you and gain your informed consent (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing (i.e., withdrawing your consent) by contacting us using the Privacy Officer contact details or via the various Unsubscribe links in survey emails and in your member access portal.
  • The right, in certain circumstances, to have your information rectified, blocked, erased, or destroyed if it is inaccurate.
  • The right, in certain circumstances, to claim compensation for damages caused by us breaching data protection law.
  • Enhanced rights to request that we erase, rectify, cease processing and/or delete your information; and
  • In certain circumstances, the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services. This right is called ‘data portability’.
  • The right to lodge a complaint with a supervisory authority regarding Forsta’s data privacy practices. The operations of Forsta Worldwide Limited are Forsta’s main establishment in the UK for UK GDPR purposes. The British Data Protection Authority (the ICO) may be contacted to lodge a complaint. Visit https://ico.org.uk/global/contact-us/contact-us-public/ for contact details.

Forsta’s role

Forsta will act as a data controller in relation to the PII we collect via our surveys. Forsta AS is the specific data controller responsible for your PII unless otherwise stated in another more specific privacy notice. The operations of Forsta Worldwide Limited are Forsta’s main establishment in the UK for UK GDPR purposes and such entity is the UK representative for the Forsta group. Forsta Worlwide Limited’s privacy officer can be reached to exercise your rights at privacy@forsta.com. The registered office of Forsta Worldwide Ltd is Blue Fin Building, 110 Southwark Street, London, SE1 0SU, UK.

Purposes of Processing

The purposes of the processing are either stated in the consent note we obtain from you prior to processing your PII, or alternatively:

  • To fulfill your transaction request;
  • To provide you with support;
  • To verify your identity;
  • To provide information on products, services, or callback requests;
  • To send you specific marketing materials, where you have consented to such;
  • and
  • To invite you to complete web surveys.

Recipients of PII

The recipients of your PII will be selected Forsta employees and third parties such as affiliates, hosting providers, web-based software tool providers, and contractors working for Forsta. All such recipients will always be under contract with Forsta ensuring data protection levels equivalent to those set forth in this privacy notice and required by applicable law. Further details may be provided upon request.

 

International Transfers

For purposes of complying with data privacy laws throughout the EEA, Switzerland, and the UK, where Forsta transfers PII to an entity which is outside of these areas and organized in a jurisdiction which has not received an ‘adequacy decision’ or similar from the relevant regulatory body, Forsta makes such transfers only if subject to an adequate transfer mechanism as described by the relevant data privacy law, e.g., standard data protection clauses(including EU, UK, and Swiss SCCs), model clauses, standard contractual clauses, etc.

 

California

  1. Your Rights: Subject to certain exceptions, the CCPA affords you the following rights:
    • Right to know/access PII collected, disclosed, or sold.
    • You have the right to request that we disclose the following information for the 12-month period preceding your request:
      • The categories of PII that we have collected about that consumer;
      • The categories of sources from which the PII was collected;
      • The business or commercial purpose for collecting or selling the PII;
      • The categories of third parties with whom we share the PII; or,
      • The specific pieces of PII we have collected about that consumer.
    • Right to Request Deletion of Personal Information. You have the right to request that we delete any personal information about the consumer that we have collected or that we maintain. Please note that there are exceptions to this deletion right, such as the information we need to keep complying with the CCPA, that is permitted to be retained under the CCPA, or is required or permitted to be retained under other applicable laws.
    • Right to Not Be Discriminated Against. You have the right not to receive discriminatory treatment from us for the exercise of the privacy rights conferred by CCPA and listed in this CCPA Privacy Notice.
      If you make a request to us under this section, we are required to verify your identity before complying with your request. Your request should come from the same e-mail address that you registered with us. We may need to ask for additional verification details as applicable from time to time. You may designate an authorized agent to make a request under the CCPA on your behalf, but you must verify that you authorize your agent to do so.
  2. You are able to opt out of our sale of your PII to third parties. You may do so by requesting such via an email to privacy@forsta.com.
  3. We collected the following categories of PII from consumers over the past twelve months:

    Category of PII collected

    Categories of sources from which this category of PII was collected

    Business or commercial purpose for which this category of PII was collected

    Categories of third parties with whom Forsta shares this category of PII

    Personal identifiers

    Consumers and our service providers

    Marketing, sales, SaaS, and support thereof

    Service providers which assist us with SaaS, marketing and sales, and support thereof

    PII

    Consumers and our service providers

    Marketing, sales, SaaS, and support thereof

    Service providers which assist us with SaaS, marketing and sales, and support thereof

    Internet or other electronic network activity information

    Consumers and our service providers

    Marketing, sales, SaaS, and support thereof

    Service providers which assist us with SaaS, marketing and sales, and support thereof

    Professional or employment-related information

    Consumers and our service providers

    Marketing, sales, SaaS, and support thereof

    Service providers which assist us with SaaS, marketing, sales, and support thereof

    Consumer profiles

    Consumers and our service providers

    Marketing, sales, and support thereof

    Service providers which assist us with support

  4. We have not sold PII of consumers in the past twelve months.
  5. We have disclosed PII to service providers for a business purpose in the past twelve months. The categories of personal information we disclosed are stated in the table above.
  6. We have contractual requirements in place with our service providers so that they will not further collect, sell, or use PII except as necessary to perform our business purpose.
  7. We do not sell PII of minors under 16 years of age without affirmative authorization.
  8. To make any requests pursuant to this section, or if you have any questions or comments for us in regards to this section, please contact us privacy@forsta.com.

Colorado

  • Your Rights under the laws of Colorado
    • Right to Access
      • You have the right to know and see what personal data we have collected about you in a usable format.
    • Right to Delete
      • You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
    • Right to Correct
      • You have the right to request that we correct inaccurate personal data.
    • Right to Portability
      • You have the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services
    • Right to Opt Out of Profiling
      • You have the right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
    • Right to Opt Out of Targeted Advertising and Sale of Personal Data
      • You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Connecticut law).
  • Making Access, Deletion, and Correction Requests
    • To make an access, deletion, or correction request, please email privacy@forsta.com. Before completing your request, we will need to verify your identity.
  • Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data or Profiling
    • To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” or “profiling”, you may by clicking the Unsubscribe link at the bottom of our emails, by using the Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed herein.
  • Right to Appeal
    • You may appeal our refusal to take action on your request to exercise a right mentioned in this section. To appeal our decision regarding a request related to these rights, email us at privacy@forsta.

Connecticut

  • Your Rights under the laws of Connecticut
    • Right to Access
      • You have the right to know and see what personal data we have collected about you in a usable format.
    • Right to Delete
      • You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
    • Right to Correct
      • You have the right to request that we correct inaccurate personal data.
    • Right to Portability
      • You have the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services
    • Right to Opt Out of Profiling
      • You have the right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
    • Right to Opt Out of Targeted Advertising and Sale of Personal Data
      • You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Connecticut law).
  • Making Access, Deletion, and Correction Requests
    • To make an access, deletion, or correction request, please email privacy@forsta.com. Before completing your request, we will need to verify your identity.
  • Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data or Profiling
    • To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” or “profiling”, you may by clicking the Unsubscribe link at the bottom of our emails, by using the Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed herein.
  • Right to Appeal
    • You may appeal our refusal to take action on your request to exercise a right mentioned in this section. To appeal our decision regarding a request related to these rights, email us at privacy@forsta.

Utah

  • Your Rights under the laws of Utah
    • Right to Access
      • You have the right to know and see what personal data we have collected about you in a usable format.
    • Right to Delete
      • You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
    • Right to Portability
      • You have the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services
    • Right to Opt Out of Targeted Advertising and Sale of Personal Data
      • You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Utah law).
  • Making Access, Deletion, and Correction Requests
    • To make an access or deletion request, please email privacy@forsta.com. Before completing your request, we will need to verify your identity.
  • Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data

To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data”,  you may by clicking the Unsubscribe link at the bottom of our emails, by using the Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed herein.

Virginia

  • Your Rights under the laws of Virginia
    • Right to Access
      • You have the right to know and see what personal data we have collected about you in a usable format.
    • Right to Delete
      • You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
    • Right to Correct
      • You have the right to request that we correct inaccurate personal data.
    • Right to Portability
      • You have the right to request the information we hold on you in a machine-readable format so that you can transfer it to other services
    • Right to Opt Out of Profiling
      • You have the right to opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
    • Right to Opt Out of Targeted Advertising and Sale of Personal Data
      • You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Virginia law).
  • Making Access, Deletion, and Correction Requests
    • To make an access, deletion, or correction request, please email privacy@forsta.com. Before completing your request, we will need to verify your identity.
  • Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data or Profiling
    • To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” or “profiling”, you may by clicking the Unsubscribe link at the bottom of our emails, by using the Unsubscribe option in the Profile area of the member portal, or by contacting us directly via the contact information listed herein.
  • Right to Appeal

You may appeal our refusal to take action on your request to exercise a right mentioned in this section. To appeal our decision regarding a request related to these rights, email us at privacy@forsta.

Brazil

Subject to certain exceptions, you have certain rights regarding your PII, as described below. Under the LGPD you have the right to:

  1. A. Confirm whether we process or not your PII;
  2. B. Request access to your PII that is being processed by us;
  3. C. Rectify incomplete, inaccurate or outdated PII;
  4. D. Request the anonymization, blocking or deletion of unnecessary or excessive data or data processed in noncompliance with the provisions of the LGPD;
  5. E. Request data portability;
  6. F. Be informed about third parties with whom your PII has been shared;
  7. G. Request a review of automated decisions that affect your interests.

When the legal basis under which your PII is being processed is consent, you also have the right to:

  1. H. Information on the possibility of not providing consent and on the consequences of such refusal;
  2. I. Withdraw consent for that specific processing, and
  3. J. Have your PII deleted after withdrawing your consent, under certain circumstances.

There are limits to the rights that you have in relation to your personal information and in certain circumstances we may not be required or able to meet your request, or we may meet your request in part only. Where this occurs, we will provide you with an explanation as to why we are unable or not required to meet your request.

Requests made under the Art. 18 of the LGPD are free of charge. Please note that under the LGPD, Forsta may in good-faith reject, deny, or otherwise not respond to requests that are duplicative, excessive, and/or repetitive.

International Transfers

For purposes of complying with Brazil law, where Forsta transfers PII to an entity which is outside of Brazil and organized in a jurisdiction which does not provide a degree of protection of personal data appropriate to the provisions of Brazil law, Forsta makes such transfers only if Forsta offers and proves guarantees of compliance with the principles of Brazil data privacy law, the rights of the holder, and the data protection regime provided for in Brazil data privacy, in the form of (a) specific contractual clauses for a given transfer; or (b) standard contractual clauses.

Mexico

  • Your Rights:
  • Your consent is required before personal data can be collected, processed, or transferred. Your consent is implicit where you have been informed of this Privacy Notice and have not objected to or refused the processing of personal data as described.
    • Right to access, rectify, cancel, or object to how personal data will be used or processed (known as “ARCO” rights), or to revoke consent.
  • Contact Information for Forsta
    • HQ Address: 1173 Ignition Dr., South Bend, IN 46601, USA
    • Email for privacy concerns and to exercise ARCO rights: Privacy@forsta.com

 

  • Transfers
    • No transfers, as defined by Mexico law, of PII will be made in relation to this processing described herein. Instead, only transmissions, as defined by Mexico law, to processors that will process PII on behalf of Forsta under appropriate data protection obligations.

Data Retention

We will retain your PII and survey responses for as long as it remains necessary or relevant for the purposes we have identified or as permitted/required by law. For example, we may need to retain the PII of an unsubscribed member for the purposes of maintaining the integrity of the study, or to honor that member’s opt-out preference (by retaining the email address). If you would like to explicitly request the removal of your PII, please contact us using the contact information listed above. Non-PII is not subject to any retention limitations and may be retained indefinitely.

 

Changes to This Notice

Forsta encourages you to periodically review this Policy to stay informed of how we manage your PII. If any changes are made to this Policy, Forsta will revise the "Last Updated" date that is indicated on the Policy.