Privacy Policy of Amsterdam Insight Research B.V.
Effective date: 21 July 2026
1. Introduction and company information
This Privacy Policy explains how Amsterdam Insight Research B.V. (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data in connection with our market-research activities and related services.
Amsterdam Insight Research B.V. is the data controller for the processing of personal data described in this Privacy Policy.
Company details:
- Legal name: Amsterdam Insight Research B.V.
- Address: H.J.E. Wenckebachweg 123, 1096 AM Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 6832
This Privacy Policy applies when you participate in surveys, interviews, focus groups, panels, research communities, testing sessions, or when you otherwise interact with our website, communications, or services.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your interaction with us:
- Identification and contact data: name, email address, telephone number, postal address, and similar contact details.
- Demographic data: age range, gender, education, employment status, household composition, location, and other profile attributes relevant to research screening.
- Research participation data: survey responses, interview transcripts, opinions, preferences, feedback, rankings, recordings, and notes taken during research sessions.
- Technical data: IP address, device information, browser type, operating system, language settings, log data, and usage information collected through our website or research platforms.
- Communication data: correspondence with us, including emails, messages, and support requests.
- Recruitment and screening data: information used to assess eligibility for specific research projects, incentives, or panel participation.
- Payment and incentive data: where applicable, limited financial data necessary to process reimbursements, incentives, or rewards.
- Special categories of personal data: only where necessary and with appropriate legal grounds and safeguards, for example when you voluntarily disclose such information in a research context or where explicit consent is obtained.
We generally collect personal data directly from you, but we may also receive data from clients, panel providers, recruitment partners, public sources, analytics providers, or other lawful third parties.
We process personal data by means including collection, recording, organisation, structuring, storage, consultation, analysis, anonymisation, pseudonymisation, disclosure, and deletion.
3. Purpose of data processing
We process personal data for the following purposes:
- to recruit, screen, and manage participants for market-research projects;
- to conduct surveys, interviews, focus groups, usability tests, and other research activities;
- to analyse research data and produce aggregated, anonymised, or pseudonymised insights;
- to communicate with participants, clients, and research partners;
- to administer incentives, reimbursements, or compensation;
- to verify identity and eligibility for participation where necessary;
- to maintain research quality, integrity, and fraud prevention;
- to improve our services, methodologies, website, and operations;
- to comply with legal obligations, regulatory requirements, and lawful requests;
- to establish, exercise, or defend legal claims.
Where possible, we use aggregated or anonymised data for analysis and reporting. We do not intentionally use research findings to identify individuals unless this is necessary for the specific research purpose and is lawfully permitted.
4. Legal basis for processing
We process personal data only where we have a valid legal basis. Depending on the context, our processing is based on one or more of the following grounds:
- Consent: where you have given clear consent for one or more specific purposes, such as participation in a survey, recording of an interview, or receipt of certain communications.
- Performance of a contract: where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you, including participant arrangements and incentive administration.
- Legal obligation: where processing is necessary to comply with laws or regulations applicable to Amsterdam Insight Research B.V.
- Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This may include research administration, quality assurance, fraud prevention, service improvement, and internal analytics.
- Vital interests: in rare cases, where processing is necessary to protect your vital interests or those of another person.
Where special categories of personal data are processed, we apply an additional lawful condition where required and take suitable safeguards.
5. Data sharing and third parties
We may share personal data with the following categories of recipients, where necessary and lawfully permitted:
- Clients and commissioning organisations: for whom we conduct research, typically in aggregated, anonymised, or pseudonymised form, and only in identifiable form where appropriate and disclosed to you.
- Service providers and processors: survey platforms, hosting providers, IT support, communication tools, panel management services, transcription providers, analytics vendors, and payment/incentive providers acting on our behalf.
- Research partners and subcontractors: where they assist with project delivery under contractual confidentiality and data protection obligations.
- Professional advisers: legal, accounting, audit, and insurance advisers.
- Authorities and public bodies: where disclosure is required by law, court order, or other lawful request.
We require third parties that process personal data on our behalf to implement appropriate technical and organisational measures and to use the data only according to our instructions and applicable law.
6. Data transfer to third countries
Some of our service providers or research partners may be located outside the European Economic Area (“EEA”) or may process data in countries outside the EEA. In such cases, we take appropriate steps to ensure that your personal data receives an adequate level of protection.
These safeguards may include:
- adequacy decisions issued by competent authorities;
- standard contractual clauses or equivalent transfer mechanisms;
- additional technical and organisational measures where appropriate;
- where applicable, your explicit consent or another lawful transfer basis.
Upon request, we can provide further information about the relevant transfer safeguards, subject to confidentiality and legal restrictions.
7. Storage duration
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may vary depending on the type of data and purpose, for example:
- Research participation data: retained for the duration of the project and thereafter as necessary for analysis, quality control, audit, or legal defence.
- Contact and account data: retained while your participation or relationship with us continues and for a reasonable period thereafter.
- Financial and incentive records: retained for the period required by applicable tax, accounting, or regulatory rules.
- Marketing or consent-based communications: retained until you withdraw consent or object, subject to legal retention obligations.
When personal data is no longer needed, we delete, anonymise, or securely archive it in accordance with our retention procedures.
8. User rights
Subject to applicable law, you have the following rights in relation to your personal data:
- Right of access: to obtain confirmation of whether we process your personal data and, where applicable, a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of your personal data in certain circumstances.
- Right to restriction: to request limitation of processing in certain circumstances.
- Right to data portability: to receive personal data you have provided to us in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Right to object: to object to processing based on legitimate interests and, where applicable, to processing for direct marketing purposes.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.
Please note that these rights are not absolute and may be subject to legal exceptions, for example where retention is required by law or where disclosure would adversely affect the rights of others or the integrity of research.
9. Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You can withdraw consent by contacting us at [email protected] or by following any unsubscribe or opt-out instructions provided in our communications.
In some cases, withdrawing consent may mean that you can no longer participate in a particular research project or receive certain services, especially where consent is necessary for that activity.
10. Right to complain
If you believe that our processing of your personal data infringes applicable privacy law, you have the right to lodge a complaint with the competent supervisory authority.
You may also contact us first so that we can try to resolve your concerns directly. We take privacy matters seriously and will do our best to address complaints promptly and fairly.
For individuals in the Netherlands, the relevant supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), subject to applicable law and jurisdiction.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures may include, as appropriate:
- access controls and least-privilege permissions;
- encryption in transit and, where appropriate, at rest;
- network and system monitoring;
- secure storage and backup procedures;
- staff confidentiality obligations and privacy training;
- vendor due diligence and contractual safeguards;
- incident response procedures and breach management.
While we use reasonable safeguards, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.
12. Contact information
If you have questions about this Privacy Policy, our processing of your personal data, or if you wish to exercise your rights, please contact:
- Amsterdam Insight Research B.V.
- Address: H.J.E. Wenckebachweg 123, 1096 AM Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 794 6832
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technology, or business operations.
When we make material changes, we will take reasonable steps to inform you, such as posting the updated policy on our website or contacting you directly where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how Amsterdam Insight Research B.V. processes personal data.