Considering that this project is run by a “natural person” and the nature of the work of the project is at this time “in the course of a purely personal or household activity” then it is explicitly not covered by the GDPR in Article 2. See: “Material Scope” Paragraph (2c). However, student projects do progress at times into start-ups, and hence, we have some legal stuff below for you to enjoy, if you have overstocked on coffee and can't sleep.
Pushback.online is an ethical user of personal data. Without the trust of everyone who answers our questions, we could not produce the research that helps our clients make better decisions. The security of your personal data is important to us, too.
We’ve tried to make the privacy and cookies notice that follows as easy to read as possible. If anything in here is unclear, please contact us at [email protected]
, and we’ll be happy to clear it up, though as this is currently a student project, please be considerate of our limited human resources for processing of your correspondance.
What this notice covers
As an organisation that relies on the use of personal data, Pushback.online is responsible for collecting and using your data in a responsible and safe way, and that starts with clearly telling you how we collect, use and protect your personal data. This privacy and cookies notice sets out:
What kind of personal data we may collect from you;
How and why we collect and use your personal data;
Why we may share personal data within Pushback.online and with other organisations; and
The rights and choices you have when it comes to your personal data.
Pushback.online is made up of a number of companies, each of which separately controls the data provided to it by our panellists and those who otherwise participate in surveys or browse our website (“user”). If you are a user or panellist who registered in the UK, Pushback.online (referred to as “we”, “us”, “our” or “Pushback.online”) is the controller of your personal data. This means we choose why and how that data is processed.
Personal data we collect
In this section we explain what personal data we may collect when you become a Pushback.online member, use our website and participate in surveys, as well as data that we may collect from other sources
Data that we collect from you
When you interact with our website or take part in Pushback.online surveys, you provide us with the data that powers our business. While there are certain data that you must provide to use some of our services, such as account details when you join Pushback.online, you control how much data you share with us. Whether you only want to complete certain surveys, or all of them – it’s your choice.
We will only retain your personal data for as long as we need to in order to fulfil the uses we describe in this notice (or until you exercise your right to erasure, which is explained in the section about your rights).
When you register with Pushback.online, we collect:
Contact details such as your name, email and postal address
Demographic data, such as your age, gender, and general economic and household information
Your account login details, which will be your email address and the password that you have chosen
Referral partner IDs, if you arrived on our website by clicking a ‘Join Pushback.online’ advertisement online, or a link in an email from one of our recruitment partners (we only use this to track recruitment effectiveness and to pay our partners)
Some specific data you have shared with Facebook, but only if you choose to register with Pushback.online using Facebook Connect and give Facebook permission to share this information with us during that process. (Each item is specified as part of that process.)
When you answer questions in surveys, or on our website or mobile apps, we collect:
Your opinions on social and political issues, companies and brands
Information about your behaviours, for example what shops you like to shop in, what TV shows you have recently watched, or what kind of things you own
Device and browser “metadata” (basically an audit trail of your device and browser use), including IP address, the make, model and operating system of the device you have used and browser type (this data is collected automatically when you answer questions in surveys or browse our website or mobile apps)
If you have agreed to download tracking software (you will have been specifically invited to do this, it doesn’t happen automatically), we collect:
Your geolocation data, showing where you have been while carrying your mobile device
Device and browser metadata
Information about websites you have visited, which applications you have downloaded onto your computer and mobile devices, and how and when you use them (we never collect any information you enter into login and password fields when browsing the internet).
If you have been invited to participate in online or in-person qualitative research, we collect:
Your opinions on the topics that the research is exploring
We may also record these interviews with you, but in such cases you will be given full information about the research project and the opportunity not to participate
When you browse our website or use our mobile apps, we collect:
When you contact us or interact with our website or social media pages, we collect:
Any personal data that you may you provide about yourself, including your name and contact details and the conversation history of our communications with you
Any comments you make on our website or social media pages, and whether you have chosen to ‘follow’ any other Pushback.online member on our website
Special categories of personal data
Some of the data that you provide us will fall within what EU data protection law describes as ‘special categories of personal data’, such as your racial or ethnic origin, political opinions, religious beliefs or information concerning your health or sexual orientation. For example, during a survey we may ask you about your voting history or intention, or whether you regard yourself as belonging to a particular religion. We use this information in the same way we use all the other information we collect, but the law requires that we have your explicit consent to collect and use it.
You will be explicitly asked to consent to Pushback.online using those categories of data if you register to the Pushback.online Members' Area. Each time we ask a question that falls into one of these categories, if you haven’t consented to our use of data in that category we’ll remind you that we need it. You will always have the option to skip these questions if you would prefer not to allow us to use that category of data, and you can always change your consent settings on your Account page. From the moment you withdraw your consent for any category we will make no further use of any data you have shared in that category when producing research or providing services to our clients, unless and until you choose to re-consent.
Personal data collected from other sources
We may also use personal data you have shared with us to derive additional information from other sources:
Public sources: for example, we may compare your postcode against public registers to determine that you live within a certain catchment area for a particular local authority or electoral constituency.
Data matching partners: we may purchase data from companies which helps us to categorise our panellists’ data into groups or ‘segments’ based on a classification of consumers devised by the data matching partner. We add the segment information we purchase to the data we hold about you (click here for more information about how we share personal data with these companies to add these segments to our own data).
You may still receive invitations to participate in our research activities if you have not joined pushback.online. In these cases we will have received your email address either from a client, or we’ll have acquired it from an organisation that maintains databases of contact details so that companies like Pushback.online can contact you. We only send emails where we have guarantees from those providing the email addresses that the recipient (that’s you) has agreed to receive third-party (e.g. from Pushback.online) communications, and we will always tell you where we’ve got your details from and give you the option to opt-out of receiving further emails from us.
How and why we use your personal data, and who we share it with
In this section we explain how and why we use your personal data, the choices you have over how your data is used, and which other organisations we share it with
Uses of personal data for basic market research
We use the data that you share with us, or that we receive from the other sources mentioned above, to give you the best experience possible, and to provide useful research for our clients. The uses we describe below form the basic agreement we have with our panellists.
We use personal data to…
Register, authenticate and administer your account
If you register with the Pushback.online Members' Area, we will use your email address and password to create your account and authenticate your identity each time you log on, and your account details to help us to answer your questions when you contact us
Select and invite you to participate in Pushback.online’s research activities
If a client wanted to know what people who live in a certain region and demographic think about soft drinks, we will use your postcode and other demographic data to determine whether you qualify for a particular project, and then use your name and email address to invite you to participate in a survey. We reserve the right to share data with any future organisation that may be formed to present Pushback.online, PoliticoAnalytica, or that may acquire, absorb, subsume it, or otherwise form affiliation.
Credit you with the points and rewards that you earn from participating in research opportunities
We will use your contact details to tell you if you have won a prize draw, and your bank account details to pay you if you convert your points into money
Produce aggregated and anonymous research for our clients
Once we’ve gathered your survey answers, we combine them with answers from other respondents and turn them into valuable insights for our clients, either in the form of statistical spreadsheets or aggregated reports. Some of your answers go directly into our major global brand tracking product (BrandIndex) and our segmentation and planning tool (Profiles). Our clients access these tools to create their own aggregated insights – they don’t see anything that identifies you
Produce anonymised but non-aggregated respondent-level data for clients
We may provide our clients with spreadsheets that contain each of your survey answers; these data sets are not aggregated but do not reveal your identity and recipients are contractually bound to not attempt to re-identify the individuals who provided the answers
Create articles and other content for our website
We use survey responses to write interesting articles that may be published on our website or included in news articles on third party websites
Develop and improve our services
We use your survey responses to improve our research tools and methods, which helps us ensure that we are giving you and our clients the best possible experience
Respond to you when you exercise any of your rights relating to the data we hold about you (more information about the rights you have over your data is set out below)
We will use your account information and internal identifiers to identify the data that is relevant to your request and respond to you
Detect and prevent fraudulent activity
We use your IP address to ensure your location matches the location of the panel that you joined, and we sometimes repeat questions during surveys to check for inattention or other indicators of poor quality responses
In order to use your personal data in the ways described above, we may share it within Pushback.online, with trusted third parties who provide services to us, and on rare occasions with clients (but only if you have agreed to that specifically, within the relevant survey). Here is some more information about the types of organisation and what we may share with them:
Pushback.online Group companies
Pushback.online instends to become a global organisation. This means that some of the personal data that we collect may be transferred within a future Pushback.online Group of companies, for example when a client wants to run a survey in multiple countries, or our global data teams analyse data from across our global panel.
Our business is built on providing clients with anonymised research insights. On occasion, our clients may ask to combine your survey responses with their own data to obtain even greater insights. In such cases you will be asked in the relevant survey if you are willing to provide certain identifying data (such as your email address or a social media handle) to our clients to enable this. Whether you share this data or not is completely up to you – if you do not want to provide the requested data it will have no impact on the points you can earn or your participation in future research opportunities.
Our service providers
We work with trusted service providers that carry out certain functions on our behalf so we can provide our services to you.
These organisations process data on our behalf. They only have access to the personal data that they absolutely need to provide the specific service to us, and in all cases we have contractual safeguards in place to ensure that they do not disclose or use it for any other purposes. In some cases, these organisations (for example our payment processors) may need to process your personal data for their own specific purposes, for example to ensure they are compliant with regulations or laws governing their own sectors.
Our intent is for service providers to fall within the following categories (and process your data in the following location(s)):
Processors of cash payments, gift cards and other incentives (European Economic Area (“EEA”), USA)
Data collection technology providers (EEA, USA)
Cloud data storage (EEA, USA)
Data centre storage (EEA, USA)
Communications platforms and technologies (EEA)
Online advertising (EEA, USA)
Our data matching partners
Our data matching partners create and sell consumer classifications that help companies understand the demographics, lifestyles, preferences and behaviours of consumers. This information is valuable to our clients, and if requested we will add this data to the insights we provide to them.
To do this we share certain personal data, such as your name, email address and postcode, so that our partners can match it against their own data and tell us which of their segments you belong to. As with our other service providers, we only share the personal data that our data matching partners need to match our data to theirs, and we have contractual safeguards in place to ensure that they do not disclose or use the data for any other purposes.
Our data matching partners include:
Experian (from whom we receive Mosaic, FSS and Consumer View codes)
Acxiom (from whom we receive Personicx codes)
CACI (from whom we receive Acorn and Fresco codes)
These circumstances are unusual, but we may share personal data with other organisations if:
we have to share your information to comply with legal or regulatory requirements (or we reasonably believe that we need to disclose your information for such purposes);
we need to share personal data in order to establish, exercise or defend our legal rights, including with our legal and other professional advisors;
we deem the data to be vital to another of our student projects or start-ups or other organisation of our creation;
we restructure our business or if we buy or sell any business or assets we may share your data with the prospective buyer or seller;
PoliticoAnalytica wishes to confirm analytica analysis, but without public disclosure of your name;
all or substantially all of our company assets are acquired by another party, your data will be one of the transferred assets
If you don’t want us to make use of your personal data in any of the ways described above, sharing your data with Pushback.online and using our services is not for you – you should unsubscribe here, or contact us and ask us to do that for you. We need to use your data in these basic ways to be able to give your opinions meaning in the world, and to conduct the research that allows us to exist as a business.
Uses of personal data for advanced research and modelling
In addition to the uses we describe above, provided you choose to participate as a panellist in this way, we may also share your data with trusted partner organisations. Our partners use this data to create and improve their products and services, and to create audiences for advertisers to target with more relevant communications and propositions (although you will never be included in these audiences). Here is some more information about our partners and what we may share with them:
Our partners for advanced research and modelling
By matching personal details (for example your name, email address and postcode or a unique identifier) or online identifiers, our partners can use survey responses to:
Create and improve products and services, such as consumer segmentations, to help other organisations better understand the likely characteristics of their customers; and
Create audiences for advertisers to target with more relevant communications and propositions (the advertising audiences are created by finding people in the population who have similar characteristics to you, via a process called lookalike modelling, so you will never be included in these audiences).
Provided you choose to participate in this way, we would may, in circumstances in future arise, share your personal details with the following partners for these purposes:
Acxiom / LiveRamp
MediaBrands, part of IPG
Again, provided you choose to participate in this way, we may share online identifiers with the following partners for these purposes:
mPlatform, part of GroupM
You have complete control over whether we use your data in this way (i.e. non-anonymously). You can choose not to participate in these uses by changing your permission setting on your Account page.
Legal grounds for processing your personal data
Pushback.online is committed to the lawful, fair and transparent use of personal data. For every use of your personal data we have described so far, we process your personal data on the grounds that our processing is necessary for legitimate interests we pursue as a business, namely that our business relies entirely on the ability to use your personal data to produce research and insight for our clients.
If you have any questions about the grounds under which we process your personal data, or would like to find out more about the approach we take to determine that these grounds apply, please contact our Data Protection Officer using the contact details in the ‘Contact Us’ section at the bottom of the page.
Transferring personal data outside the EEA
We take all steps possible to ensure that your personal data remains within the European Economic Area (“EEA”). However, in some cases we may in future need to share data with other Pushback.online group companies or third parties that are in countries outside the EEA, as described earlier. These countries may not have similar data protection laws to the UK and so they may not protect the use of your personal information to the same extent.
In these cases we put in place appropriate safeguards to make sure your personal data remains adequately protected. Specifically, we intend to make use of one of the following:
Standard contractual clauses: we use standard contractual clauses for the transfer of personal data to organisations outside the EEA. These contractual commitments have been adopted by the European Commission and ensure adequate protection for personal data transferred to countries outside the EEA by binding recipients of personal data to certain data protection standards including obliging them to apply appropriate technical and security measures. We use standard contractual clauses when we transfer data to other Pushback.online Group companies and for transfers to recipients that are neither Privacy Shield certified nor located in a country covered by an adequacy decision (see below).
EU-US Privacy Shield: the Privacy Shield is a program agreed between the EU and US which aims to protect the personal data of anyone in the EU when it is transferred to the US by placing data protection obligations on US companies that receive personal data from the EU. Pushback.online may rely on these safeguards when transferring data to companies based in the US where those companies are Privacy Shield certified.
Adequacy decisions: where the European Commission has determined that a country outside the EU offers an adequate level of data protection, personal data may be sent to that third country without implementing any other safeguards mentioned above. Pushback.online may rely on adequacy decisions when transferring data to companies based in countries where such assurances have been given.
Please contact us using the details at the end of this notice for more information about the protections that we put in place and to obtain a copy of the relevant documents.
How we store and protect your personal data
We know how important it is to protect your personal data while we have it. This section describes some of the measures we take to ensure that it is kept secure
We do everything we can to protect your personal data from loss or misuse, and from unauthorized access, disclosure, alteration and destruction. This section describes some of the measures we take to ensure that your personal data is secure:
We use data centres that have a high level of physical security measures to host and protect your data and our systems;
We conduct independent penetration tests on an annual basis and are continuously scanning our systems and applications for vulnerabilities in our systems; if you ever think that you have found a security issue or vulnerability in one of our systems please let us know at [email protected]
We use encryption to secure your personal data whilst it is in transit and in storage;
We allow access to attributable data (by which we mean data that directly identifies you) only to those Pushback.online project members, PoliticoAnalytica project members, and as intended in future, employees of any organisation the project is registered as, acquired by, or affiliated with, who need it to carry out their job responsibilities, for example our support team to allow them to respond to you when you contact us;
We make security the responsibility of all our employees and we train our project members to identify security risks and protect your data.
Our website may from time to time contain links to and from other websites. If you follow a link to any of those websites, please note that those websites ought to have their own privacy notices and that we do not accept any responsibility or liability for those websites. Please check those privacy notices before you submit your information to those websites.
Emails and notifications
This section explains the choices you have when it comes to emails and notifications we may send to you
If you register as a Pushback.online Members' Area List, it is integral to your participation that we, PoliticoAnalytica, and/or any organisation the project is registered as, acquired by, or affiliated with, are able to send you emails and notifications inviting you to participate in research or other projects, which could be conducted online via survey, by downloading a mobile app, or in person. By its nature most of our research is time-sensitive, and without the ability to notify you that we would like your opinion you’ll be at a disadvantage to other panellists because you’ll miss out on opportunities to share your opinion and earn points.
If you would prefer not to receive these service and news messages, you will need to withdraw from the panel entirely.
Separately, we, PoliticoAnalytica, and/or any organisation the project is registered as, acquired by, or affiliated with, may want to send you emails and notifications when your opinions feature in the news, or other news items, or to encourage you to refer your friends and family to join too. You can opt out of these communications at any time on your Account page on the website.
In relation to all the emails and notifications mentioned above, we rely on our legitimate interest in running our research operation – and ensuring our panellists are adequately informed about their account with us – as the legal grounds for this processing.
Cookies and similar technologies
We use “cookies” to improve your experience as you use our website and mobile apps. This section tells you about the cookies that we use, what they do and your choices when it comes to cookies
What this cookies is used for
When this cookie has been placed on our website and those of our clients, we can use it to understand when you have visited those websites, or seen an online advertisement. We use this information, in combination with your survey responses, to help our clients understand if they have directed their advertising efforts at the right kinds of people, and may subsequently invite you to take part in our research activities for those clients.
This cookie enables us to present you with a relevant pop-up message when you return to the website after completing a survey
This cookie allows us to recognise you during your use of our website
This cookie allows us to provide you with feedback messages, such as authentication errors, with an external partner like Facebook
This cookie enables us to ensure that we can display content in the correct language, according to your preference
This cookie is associated with the Django web development platform, and is designed to protect a website against software attacks on web forms
This cookie tells us when you have accepted our cookie alert so that we do not repeatedly show you the same message
Third party cookies
The table below lists and describes the third party cookies that we are placed on our website and mobile apps. You can learn more about the cookies we use by clicking on the links provided below.
What these cookies are used for
Cookies we use to achieve this
We use analytics cookies to understand how you use our websites and mobile apps so we can monitor performance and ultimately improve them. For example, by understanding how you use certain features and pages on the Pushback.online website, we can identify and fix page errors and improve the design and navigation of the website.
Google Search Console
iTunes Connect iOS
Google Analytics (website and apps)
Google Tag Manager (website and apps)
Google Firebase (apps only)
Fabric (apps only)
Cookies can also be used to deliver online ads and to track ad campaign performance and efficiency. The marketing cookies on our website collect information about your online browsing activity, such as the pages you have viewed, and use that information to create relevant online ads that you will see on third party websites.
Google DoubleClick Counter
We rely of certain cookies to communicate with you, and you with us. For example, the ‘Support’ button on our website, and the ability for you to comment on our online content are both powered by cookies.
These cookies allow our partners to combine your survey data with their own data using common online identifiers. Our partners use this data to create and improve their products and services, and to create audiences for advertisers to target with more relevant communications and propositions (although you will never be included in these audiences).
You can find more information, including how you can opt-out of this activity, in the ‘Uses of personal data for advanced research and modelling’ section of this privacy notice.
mPlatform, part of GroupM
Your choices when it comes to cookie
Some of the emails we send to you may contain a ‘web beacon pixel’ or tracked links which allows us to identify when you have opened the email and to verify which links contained in the email you have accessed. We use this information to determine which parts of our emails are of most interest to you.
You can delete the pixel by deleting the email. If you do not wish to download the pixel to your computer or other device you can unsubscribe from our mailing list at any time on your Account page on our website.
This section explains the rights that you have in relation to the personal data that we hold about you
You have certain rights in relation to the personal data that we hold about you, which are designed to give you more choice and control over your personal data. These rights are explained below.
What does this mean?
Is it available to you?
The right to request access to personal data
You can request a copy of the data we hold about you and related information
The right to request rectification of personal data
You can ask us to correct any inaccurate data about you and to complete any incomplete data that we hold about you
The right to request erasure of personal data
You can request that we delete the personal data we hold about you
Yes, in certain situations
The right to request a restriction on processing of personal data
You can request that we restrict our use of your data to storage only, that we stop using it for all other purposes or that we retain data that was due for deletion.
Yes, in certain situations
The right to object to the processing of personal data
You can object to certain types of processing of your personal data in certain specific circumstances
Yes, in certain situations
The right of data portability
You have the right to receive a copy of your personal data in a structured and machine-readable format and, where possible, have this sent to another organisation
Generally, no. This is because almost all our processing activities rely on the grounds of our ‘legitimate interests’ to lawfully process your personal data.
Automated decision making
We do not envisage that any decisions that will have a legal or other significant effect on you will be taken about you using purely automated means, however we will update this notice if this position changes and notify you of those changes.
Exercising your rights
You can exercise any of these rights by using the contact details below. Once you have submitted your request we may contact you to request further information to authenticate your identity (because we want to make sure it is actually you requesting your data) or to help us to respond to your request. Except in rare cases, we will seek, limited by human resource as student project, to respond to you within 1 month of receiving this information or, where no such information is required, after we have received full details of your request. As noted above, while some rights apply generally, some are only available in certain circumstances, so if we feel that any right is not available to you we will seek to let you know along with the reason for our decision.
Email: [email protected]
Lodging a complaint with a regulator
You have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live, where your legal rights have been infringed or where your personal information has or is being used in a way that you believe does not comply with data. The contact details for the Information Commissioner’s Office (“ICO”), the UK’s independent regulatory body that upholds information rights, are available on their website, which also contains details on how to make a complaint. However, we encourage you to contact us before making any complaint and we will seek to resolve any issues or concerns you may have.
How to contact us
If you have questions about this notice, or about how we collect, store and use personal data, you can contact our Data Protection Officer.
Email: [email protected]
Updates to this notice
This notice was last updated on the date that appears at the beginning of the notice.
While we reserve the right to change this notice at any time, if any material changes are made we will provide notice to you via email or any other appropriate means to give you the opportunity to review the changes before they become effective.
If you object to any future changes, you may close your account by going to your Account page and clicking ‘Delete Account’.
Effective: 23 March 2019