Privacy Policy

Origo Group operates within the EU and complies with the General Data Protection Regulation (GDPR) (2016/679) as well as other applicable laws and regulations regarding personal data protection. Origo Group also follows the codes of conduct from relevant market and opinion research organizations, including but not limited to ESOMAR (www.esomar.org).

Our privacy policy explains how we at Origo Group AB and its subsidiaries (“Origo Group”) use information about you when you participate in surveys, visit the website, register for webinars/seminars, and/or receive communication from us for marketing or information purposes.

This privacy policy applies to individuals residing in any country worldwide. Origo Group has established procedures consistent with this policy and will require partners to do the same. Surveys collected and managed by Origo Group’s clients are not covered by this privacy policy.

We regularly update this privacy policy, and it may change from time to time.

Last updated: 2024-09-16.

For those contacted to participate in a survey:

When and why do we process your personal data?

Individuals participate in surveys conducted on behalf of Origo Group’s clients. In most cases, Origo Group’s clients are the data controllers, and Origo Group will only process your personal data as a data processor at the request of a data controller. For certain types of surveys, Origo Group may instead be the data controller, and in such cases, we will inform you of this.

Participation in Origo Group’s surveys is always voluntary. You can terminate a survey at any time, for example, if you do not wish to answer a question.

Your personal data may be used for a variety of purposes, as described in connection with a survey, during an interview, or similar. If you want more information, you are always welcome to contact us as described in the Contact Information section below.

The personal data processed may include contact information such as name, address, phone number, email address, date of birth, and other similar information necessary for the specific task. The personal data processed always has a purpose related to the current survey, usually based on legitimate interest, public interest, or through consent.

Personal data may have been voluntarily provided by you to Origo Group, provided by our clients or other database owners, or collected by Origo Group from public sources. In other situations, the data you choose to provide is recorded.

In some surveys, Origo Group may collect sensitive personal data, such as political opinions, religious beliefs, or philosophical beliefs, health information, or other data. If Origo Group collects sensitive personal data about you, Origo Group will always obtain your explicit consent for this processing.

When is Origo Group entitled to process your personal data?

Origo Group is entitled to process the personal data necessary to fulfill our clients’ legitimate interests or to perform a task of public interest. Origo Group is also entitled to process your personal data if you have given consent to such processing.

Who do we share your personal data with?

Your personal data is used by Origo Group and Origo Group’s data processors. We do not disclose personal data to other companies, authorities, or organizations unless we are required to do so by law, regulation, or government decision.

The results of the survey in which you participate will be delivered to our client who commissioned the specific survey. However, individually identifiable information will not be given to the client or any third party.

If participation in a survey or other activity involves personal data being made available to a third party beyond Origo Group and Origo Group’s data processors, Origo Group will only share your personal data if you explicitly consent to this.

How long is personal data stored?

Origo Group does not store personal data longer than required to complete and report the current survey or as approved by you. The length of storage may also depend on applicable legislation.

What are your rights?

You have the right to obtain information about what personal data Origo Group processes about you on behalf of our clients. In such cases, you must request this in writing from Origo Group (see contact information below). If you believe that any data about you is incorrect or misleading or wish to be deleted, you can contact Origo Group and request correction or deletion in writing.

Upon receiving a request from an individual, Origo Group will try to provide the requested information within 30 days, provided the request is reasonable and can be answered within this period. If more time is required, Origo Group will notify you within 30 days.

As a respondent, you have the right to file complaints with the Swedish Data Protection Authority.

Privacy and Security

Your participation in a survey or other market research program is entirely voluntary, and Origo Group’s use of your personal data occurs with your consent.

No technical systems are entirely protected against intrusion. However, Origo Group has taken all reasonable technical security measures required to protect personal data from unauthorized access, alteration, and destruction. Only employees who need access to your data to perform their tasks are authorized to access your personal data. Origo Group has procedures to ensure data quality at every stage of the research process to ensure that all data, including personal data, is accurate and up-to-date.

Contact Information

If you have questions about our privacy policy or our processing of personal data, feel free to contact us via email at: data-privacy@origogroup.com

For more information about GDPR, we recommend you visit the Swedish Data Protection Authority: www.imy.se

Request to be removed

Origo Group conducts hundreds of surveys annually. To identify the survey you have been contacted for, we need to know how you were contacted (phone, mail, email, SMS) and your name/postal address or name/phone number, and which project/task/case it concerns. Email the information and the request to be removed to: data-privacy@origogroup.com

For those who have visited our website, received communication from us, and/or registered for webinars/seminars:

In this part of the privacy policy, we want to inform you about the purposes for which we collect and process personal data when you visit and use our website, register for webinars/seminars, and/or receive communication from us for marketing or information purposes.

Data Controller

Origo Group AB (“Origo Group”, organization number 559067-2027, Repslagargatan 17B, 118 46 Stockholm), hereinafter also referred to as “the Company”, is the data controller under the General Data Protection Regulation (GDPR) (EU) 2016/679) for the processing of personal data resulting from visits to the Company’s website and for the personal data processing carried out by the Company for marketing and information dissemination purposes.

Origo Group is responsible for ensuring that the personal data collected by the Company is used only for the intended purposes and is protected against unauthorized access and use.

Your personal data will never be sold or transferred to another party for purposes other than those specified in this policy. However, personal data may be transferred to companies within the Origo Group. Here is information about these.

Personal data may also be disclosed to subcontractors or suppliers hired by the Company to perform a service related to the purposes specified in this policy. Information about Origo Group’s subcontractors and suppliers is provided below under “Our data processors and suppliers.”

Purpose

Origo Group processes personal data for marketing and information dissemination, which more specifically includes the following purposes:

  • Sending information you request from our knowledge base/expertise/inspiration.
  • Informing you about news, offers, and webinars/seminars that may interest you.
  • Analyzing traffic and conversions on our website and in newsletters to tailor messages to the recipient.
  • Profiling based on activity on Origo Group’s website and social media to target our marketing to an appropriate profile.

Legal Basis

The right to process your personal data for the purposes listed above is based on the legal ground of legitimate interest. For the use of cookies, Origo Group relies on consent unless they are strictly necessary.

In our balancing of interests, we have assumed that we only communicate with you in your professional role and keep you informed about activities and research services that may be relevant and of interest to you or the organization you work for.

Collection of Personal Data When Visiting the Website

Personal data is collected on Origo Group’s website if you choose to provide information in contact forms and/or the chat function on the website. In these cases, you will be asked to provide personal data such as your name, title, organization name, email address, and/or phone number. This type of personal data is processed by us so that we can respond to a question or request from you regarding services or information we offer. They may also be used to send information that we believe may be relevant to you in your professional role or for the organization you work for.

We also collect personal data and other data that is automatically registered during your visit to our website. However, this only happens after an interaction (see the “Cookies and Log Files” section below).

Personal data collected via the website is stored in our CRM system, Upsales.

Other Collection of Personal Data

Participation in webinars/seminars offered by Origo Group may result in the collection of personal data to invite you to future webinars/seminars and communicate with you for marketing or information dissemination purposes. We may also communicate with you in your professional role without you having provided us with your personal data. For example, we may have received tips from one of your colleagues who has accessed our reports or research services, indicating that you may be interested in receiving information from us. In such cases, we store your contact details (personal data) in our CRM system, Upsales. These processes are also based on the legal ground of legitimate interest.

What Personal Data Does Origo Group Process?

  • Name
  • Title
  • Company
  • Organization number
  • Email address
  • Phone number
  • Image, film, and username/initials in Microsoft Teams are processed if you accept to participate in one of our recorded webinars as a non-anonymous participant.
  • Cookies, Log Files & Device Identifiers

How Long Is Personal Data Stored?

We store your personal data as long as the provision of our services requires it, considering the purpose of the processing. The right to process your personal data for our specified purposes (see the “Purpose” section) is based on the legal ground of legitimate interest.

What Are My Rights?

According to the General Data Protection Regulation (GDPR), you, as a data subject, have several rights, which are outlined below.

Right to Information and Access

As a data subject, you have the right to obtain information about how your personal data is processed by the data controller, both when it is collected and upon request.

You also have the right to receive a copy of the personal data being processed, as well as the information about the processing that must be provided when personal data is collected. The access request must be fulfilled within 30 days of the request being received. If it is not possible to provide access, this information must be provided within 30 days.

Right to Deletion, Correction, and Completion

You have the right to contact Origo Group to request the deletion, correction, or completion of your personal data for the purposes specified in this policy. You also have the right to receive confirmation when these actions have been taken.

Right to Restriction of Processing

As a data subject, you have the right to request the restriction of the processing of your personal data, meaning that they are marked and only processed for certain limited purposes. The right to restriction applies, for example, when you, as a data subject, believe that the data is incorrect and have requested correction. In such cases, you can also request that the processing of the data be restricted while the accuracy of the data is being verified. When a restriction is lifted, Origo Group is required to inform you of this.

Right to Object

As a data subject, you have the right to object to the use of your personal data for direct marketing purposes. If Origo Group receives such an objection from you, the Company will stop processing your personal data for this purpose.

Even when personal data is processed to perform a task in the public interest or as part of the exercise of official authority, a data subject has the right to object to the processing. In such cases, the data may only continue to be processed if it can be demonstrated that there are compelling legitimate reasons for the processing that outweigh the data subject’s interests.

Data Portability

Data portability means that individuals who have provided their personal data in a structured, commonly used, and machine-readable format have the right to retrieve the data to transfer it to another data controller. The recipient of the personal data is obliged to facilitate such a transfer of data. However, this right applies only if the data is processed based on the consent of the data subject or an agreement with the data subject, meaning it does not apply to purposes where the legal ground is legitimate interest. The right to transfer the data also only applies to data that the data subject has personally provided to the data controller, not data collected from other sources.

Automated Decision-Making and Profiling

Individuals have the right not to be subjected to automated decision-making, meaning decisions made entirely without human involvement if the decision can have legal consequences or similarly significantly affect them.

Automated decisions can be made with or without profiling. Conversely, profiling can be used without leading to an automated decision. Profiling refers to any form of automated processing of personal data to evaluate certain personal characteristics, particularly to analyze or predict an individual’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

Automated decisions made with or without profiling are not allowed if they would have legal consequences or similarly significantly affect the data subject. Exceptions are if it is necessary for a contractual relationship between the data subject and the data controller, the data subject has consented to automated decision-making, or if it is prescribed by Union or national law that automated decision-making is permitted.

Origo Group uses profiling for marketing purposes, but it is done without automated decision-making.

Right to Lodge a Complaint with a Supervisory Authority

You also have the right to lodge a complaint with Sweden’s national supervisory authority for personal data processing, the Swedish Authority for Privacy Protection (IMY) (www.imy.se), if you believe that your personal data is being processed incorrectly by Origo Group.

Contact

You can always contact us for help or information about your rights by sending an email to data-privacy@origogroup.com.

Our Collection and Communication Channels

This is a list of communication channels and partners where your personal data may be processed.

  • Forms and Emails: When you fill out a form on our website or receive emails from us, they are created and sent primarily from our CRM system, Upsales, from Upsales Nordic AB. If we contact you with offers or information for the first time, this is generally done via our supplier Qualifier’s search algorithm and lead generation service.
  • Chat Function: When you chat with us on our website, this is done via the supplier Leadoo Marketing Technologies. The personal data you choose to provide is integrated with our CRM system, Upsales.
  • Digital Advertising: When you are exposed to digital ads from us on platforms like Google or social media such as LinkedIn, this is done through our digital partner, Nokoby Nordiska Kommunikationsbyrån AB, which has access to our accounts.
  • Press Room: We use the supplier Notified for media monitoring and press room on the external domain (press.origogroup.com) as well as the distribution of press releases. If you are a journalist who has received a press release from us, it comes from Notified’s database.

 Links and External Websites

On Origo Group’s website (www.origogroup.com), there are links to other websites and social media platforms that we use and may share your personal data with. We are committed to protecting the privacy of those who visit the website and the social media platforms we use:

  • LinkedIn
  • Facebook
  • Instagram
  • YouTube (Google Inc)

Origo Group’s webinars and case studies that are recorded or filmed are posted on our YouTube channel to be embedded on our website. If you are a customer of ours or a webinar participant and participate in a recording, you agree that we have the right to publish it on YouTube.

This privacy policy does not apply to other websites or social media accounts, so you should review the privacy policies of those websites before providing your personal data. Origo Group ensures that the content we post on our accounts in these media complies with GDPR and the provisions of this policy.

Our Data Processors and Suppliers

  • Upsales Nordic AB
    We store your personal data in our CRM system, Upsales, from Upsales Nordic AB, a data processor for Origo Group. Our use of Upsales means that personal data is processed within the EU/EEA. You can view Upsales’ privacy policy here: https://www.upsales.com/sv/privacy-policy/
  • Leadoo Marketing Technologies Ltd
    The personal data you provide when you fill out our chat is handled and stored by Leadoo Marketing Technologies. Leadoo is a data processor for Origo Group for this processing.
    Origo Group uses Leadoo’s user tracking to monitor how visitors navigate the Origo Group website. We combine this data with user information, such as interactions in the chat function provided by Leadoo. Leadoo uses etag tracking, which differs technically from cookie tracking but is subject to the same legislation. In Leadoo Marketing Technologies Ltd’s privacy policy (https://leadoo.com/privacy-policy/), you can read more about what information is stored and what your rights are. You can stop the tracking by clearing your browser’s cache.
    Leadoo and their sub-processors prioritize your security and GDPR compliance. The personal data they collect on our behalf and with your consent (through filling in the chat function) is integrated with our CRM system, Upsales, and may be processed in third countries as long as it remains in Leadoo’s system.
  • Qualifier
    Qualifier (QLFR Artificial intelligence AB) is a search service with a built-in email system. The search algorithm finds relevant contact information from open sources or third-party providers and integrates it with our CRM system, Upsales. Qualifier does not store data. The information that Origo Group is interested in (name, title, company, email, and possibly phone number) is shared directly with Origo Group upon our request. All processing at Qualifier complies with GDPR. You can view Qualifier’s privacy policy here: https://qualifier.ai/sv/privacy
  • Nokoby Nordiska Kommunikationsbyrån AB
    Origo Group has hired the media agency Nokoby for advertising efforts and the analysis of traffic and conversions in digital channels, such as Google and social media. Nokoby Marketing Technologies AB acts as a data processor for Origo Group in this regard. As a data processor, Nokoby is responsible for processing personal data for the client in accordance with GDPR. Nokoby and its possible subcontractors primarily process personal data within the EU/EEA. Processing outside the EU/EEA may occur with Origo Group’s approval, provided that the legal requirements for processing personal data outside the EU/EEA are followed. If Nokoby, with Origo Group’s approval, hires a subcontractor outside the EEA, the legal basis for the transfer to third countries must be secured, for example through standard clauses to protect the transfer of personal data to a third country with the subcontractor.
  • Google Inc
    We have an account with Google to allow our media agency, Nokoby, to place ads, analyze our website traffic, pay for keywords, and create tags for certain conversion activities we want to measure.
    Google acts as a data controller in this regard, and they rely on legitimate interest when using personal data for activities such as displaying content-based ads and ad reporting. Although they rely on legitimate interest for processing, consent is required under GDPR to use cookies for these purposes from users in countries subject to the cookie regulations in the Privacy and Electronic Communications Directive. To opt-out of these ads, go to: https://myadcenter.google.com/. There you can turn off the function for personalized targeted ads from Google.
    Google transfers personal data to third countries as they are based in the USA. The same applies to the social media we use. See the section “Links and External Websites” above.
  • Notified
    To send out press releases or news to you as a journalist, Origo Group uses the supplier Notified. Notified is part of the American company Intrado Digital Media LLC. Notified is solely responsible for the personal data processing. You can view their privacy policy here: https://www.intrado.com/legal-privacy

Cookies

On the website www.origogroup.com, cookies are used, which are small text files stored on the visitor’s computer and can, among other things, save personal settings and track the visitor’s activity on the website.

When you visit our website, you will be informed about the different cookies the site uses. This allows you to decide whether to accept or reject cookies for any of the specified purposes.

Some cookies are necessary to display the content on our website, and these cannot be turned off if you want to access all the functionality on our site. These cookies do not store any information that can identify you as an individual. Some cookies are available to improve your user experience when you visit our site.

We use “analytics cookies” to evaluate and compile statistics on the general behavior of our website visitors, such as:

  • Which external pages visitors come from
  • Which search terms are used
  • Which subpages are visited most frequently

We collect statistics on the use and behavior of our website. This information is collected to make our website as user-friendly and relevant as possible for you as a visitor. All information collected for this purpose is aggregated at an overall level and is anonymous.

If you continue to use our website without changing your settings, we assume that you have no issues with receiving our cookies.

Log Files & Device Identifiers

When you use the internet from your computer or mobile device, certain information is transferred, so-called log files. This is a file that contains the log of the computer or mobile device, i.e., a chronological record of events and actions in the computer or mobile device. When you visit our website, this visit is stored in your log files. This information is anonymous and cannot be traced back to you as an individual.

We use device identifiers to customize content and ads for users, provide social media features, and analyze our traffic. We also share such identifiers and other information from your device with the social media, advertising, and analytics companies we collaborate with. (See “Our Data Processors and Suppliers” and “Links and External Websites”).
These companies may, in turn, combine the information with other data you have provided or that they have collected when you used their services.