Survey Participant Privacy Notice
This notice specifies how your personal data is processed for Reputation and Trust Analytics’ research purposes. Only indirect identifiers related to your personal data are processed. Individual respondents cannot be identified from the results of the survey. Participation in the survey is voluntary.
Controller of the study
Reputation and Trust Analytics Oy (1099844-1)
Keilaranta 1
02150 Espoo
Finland
The controller of the survey ensures that the processing of the research material is in compliance with data protection law.
Contact person
Eila Lahti, Data Collection Manager, DPO
eila.lahti@reptrust.com
Contact information sources
As a respondent, you have the right to know from which sources your contact information has been retrieved for a single survey. Contact information is retrieved from three sources:
- The register of the party conducting the study
- A commercial register (including Profinder)
- Public sources
Collection of respondents’ personal data
Reputation and Trust Analytics collects data on respondents from three sources:
- The data provided directly by the respondents, such as responses to the survey and the background information of the respondent
- Data inferred from the respondents’ background information and responses to the survey, such as various types of segmentation data
- The respondent’s e-mail address to which the invitation to the survey was sent.
Data retrieved with cookies are not used in our surveys or for the purpose of segmentation.
Varying types of background information is requested in the surveys. Types of background information requests include, for example:
- gender
- year/decade of birth
- mother tongue
- place of residence
- region
- field of education
- employment sector
- region of your workplace
- position within the organisation
- possible membership of a political party
- organisation background information
Legal basis and purpose of processing personal data
The processing of personal data is based on the legitimate interest of the data controller, the conduct of research activities, and the consent given by the data subject where consent is required. Personal data is collected only for predefined purposes and only to the extent necessary.
Our operating practices are based on EU and Finnish legislation.
Storage and processing of responses
Responses are stored in the data collection software’s memory for a pre-determined period of time, including the e-mail address to which the invitation to the study was sent. The data are stored only for the duration necessary for the purpose of processing the personal data.
Research invitations are technically sent through the research platform used by Reputation and Trust Analytics from the address survey.reptrust.com.
Data is uploaded for processing without email addresses, meaning that the processed data is anonymized. Research data is processed primarily in anonymized form. Individual respondents are not identified from research results, reports, or analyses. Background information provided by respondents is used primarily for the analysis and reporting of research results. Research results are always reported in a manner that ensures that individual respondents cannot be identified.
Artificial intelligence-assisted software tools, such as the Anthropic Claude service and the Microsoft Copilot service under enterprise licenses, may be used in the analysis of research data. Data transferred to AI services is pseudonymized whenever possible. Based on the enterprise licenses used, data entered into the services is not used by the service providers for training AI models.
Artificial intelligence is used solely to support manual analysis and is not used for automated decision-making that would produce legal or other significant effects concerning the data subject (Article 22 GDPR). Information analyzed with the assistance of AI is processed in accordance with the same data protection principles and practices as all other personal data.
Phone interviews are not recorded. Individual respondents cannot be identified from the results of the survey. Parties conducting surveys use the results for, for example, the purpose of developing their operations and planning their communications.
Small rewards can be given to respondents. Respondents are asked if they are willing to accept the reward. If the respondent is willing to accept the reward, they must provide their name and the address to which the reward will be sent. This information is stored in a different database than the responses to the survey until the reward has been sent.
Protection
Access to the data is restricted to the persons employed by Reputation and Trust Analytics’ and its subcontractors whose tasks require processing the data. We have ensured that all of our service providers comply with the Data Protection Act. The data are protected with appropriate safeguards: all computers and information systems are protected with technical measures. The data are not disclosed to third parties.
Rights of the respondent
Participation in surveys is always voluntary. Respondents have the right to know and verify what personal data and background information concerning them has been stored.
Participation does not require registration. No strong personal data are collected from respondents.
In accordance with applicable data protection legislation, the data subject has the right to inspect the data concerning them, request the rectification of data, object to processing, and lodge a complaint with the supervisory authority.
The receipt of research invitations may be opted out of at any time. If the data subject opts out of receiving research invitations, their data may be retained in a restricted suppression list to prevent future invitations. The suppression list may include, for example, the name, organisation, and contact details of the data subject, to the extent necessary to enforce the opt-out.
If you want to erase your data in our business study register, please send a request by e-mail to: tutkimus@reptrust.com.
Changes to this notice
Reputation and Trust Analytics reserves the right to make changes to this privacy notice and related information.
Reputation and Trust Analytics recommends data subjects to check this privacy statement regularly in order to learn about any changes to it.
This privacy notice was last updated on 17 June 2026.
