MKOR Privacy Policy

Version: 3.1
Last updated: 2026-09-24
DPO Contact: [email protected]

---

Visual Summary

Exercise your rights: mkor.eu/contact or [email protected]

---

Table of Contents

---

1. About Us

Data Controller

Data Protection Officer (DPO)

About MKOR

MKOR Consultanta SRL is a market research agency providing surveys, opinion polls, and consumer preference analysis. We operate the MKOR Panel, a community of participants who contribute to our research studies.

This policy describes how we collect, use, and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

---

2. Definitions

---

3. What Data We Collect

We organize information based on your relationship with MKOR:

3.1 MKOR Panel Members

If you have joined the MKOR Panel or participate in our studies:

Anonymization of Study Responses

Important: To protect your privacy, we apply the following anonymization measures:

• Data decoupling: Your questionnaire responses are separated from personal identification data. This means that responses cannot be directly associated with your identity.
• Anonymous codes: Instead of names or emails, responses are stored using anonymous codes or pseudonyms.
• Aggregated reporting: Study results are delivered to our clients exclusively in aggregated and statistical form, without the possibility of identifying individual respondents.
• ESOMAR Standards: We comply with international market research standards (ESOMAR/ICC) regarding respondent protection.

Thus, even if you participate in our studies, your identity remains protected, and responses cannot be traced back to you.

Note: The MKOR Panel has its own detailed privacy policy, available upon registration.

3.2 Website Visitors

When you visit MKOR’s websites (mkor.eu, mkor.ro and MKOR subdomains) or subscribe to the newsletter:

For cookies: Consult the Cookie Policy for full details.

3.3 Employees and Candidates

Job Candidates

Talent database: With your consent, we may keep your CV for future opportunities for 2 years.

Employees

Applicable legislation: Labor Code, Fiscal Code, Law 319/2006 (OHS), GD 905/2017 (REVISAL).

Exit Interview: Upon termination of the employment contract, we may collect feedback (legitimate interest), kept for 2 years.

3.4 Business Partners

Clients, suppliers, and collaborators:

Video conferences (Zoom, Teams): We may record meetings, with participants being informed and, where the law requires it, with their consent. We keep recordings only for as long as the purpose for which they were made requires. For MKOR events, see section 3.5.

3.5 MKOR Event Participants

When you register for an MKOR event (for example MKOR Talks or a webinar), we collect your registration data (for example your name, contact details and company) and information about your participation in the event.

How we use the data. We use it to organise the event, to communicate with you about it and about upcoming MKOR events, and to send you the MKOR newsletter. You can unsubscribe at any time from any email we send you or by writing to [email protected].

Event partners. We may share limited data about participants (for example name and company) with the partners, co-hosts or guests of an event, who process it as independent controllers.

Recordings. Events may be recorded. We may use recordings and excerpts from them to inform participants and to promote MKOR events, including on MKOR’s websites, video platforms and social media. Published materials feature the event’s speakers. If you do not want to appear in a recording, you can write to us at [email protected].

Analytics and advertising technologies. Providers. On event pages we may use analytics and advertising technologies (for example pixels), in line with section 10 and your cookie choices. The data is also processed on MKOR’s behalf by providers of CRM, email, hosting and communication services (see section 5).

Public company information. We may supplement the data with publicly available business information about your company, so that we can offer you relevant information and proposals.

Legal basis and retention. We process this data to handle your registration (Art. 6(1)(b) GDPR), on the basis of our legitimate interest in organising and promoting MKOR events (Art. 6(1)(f)) and, where the law requires it, on the basis of your consent (Art. 6(1)(a)). We keep the data for as long as these purposes require (see section 7).

Your rights. You have the rights described in section 8, including the right to object to processing for marketing purposes and to withdraw your consent at any time. You can write to us at [email protected].

---

4. Legal Basis for Processing

We process your data only based on a valid legal basis:

Withdrawal of Consent

• You can withdraw it at any time, as easily as you granted it
• Withdrawal does not affect the lawfulness of processing prior to it
• To withdraw: mkor.eu/contact or [email protected]

---

5. Who We Share Data With

Categories of Recipients

Important regarding research studies: Our clients receive exclusively aggregated data and statistics. We never share respondents’ personal data with clients who order studies. Responses are decoupled from participants’ identity before any analysis or reporting.

Main Infrastructure Providers

• IT and communications: Orange, DIGI, Google Cloud, Zoho, Microsoft Teams, Zoom, Tracking Time, as well as providers of CRM and email, web hosting and security, video platforms and social media
• Financial services: BCR Bank, ING Bank, EDENRED, Benefit
• HR services: Occupational medicine companies, Health and Safety (SSM), Fire Safety (PSI), payroll
• Archiving: Global Archive Management
• Recruitment: E-jobs, Bestjobs

---

6. International Transfers

Some data may be transferred outside the European Economic Area (EEA).

Transfer Mechanisms

Protection Measures

• Encryption in transit: TLS for all transfers
• Data minimization: We transfer only the strictly necessary data
• Impact assessments (TIA): We have evaluated the legislation in third countries

You can request a copy of the Standard Contractual Clauses at: [email protected]

Third-Party Provider Policies

For details about data processing by our providers:

• Google Privacy Policy
• Meta/Facebook Privacy Policy
• TikTok Privacy Policy
• Microsoft Privacy Policy
• Zoom Privacy Policy
• Zoho Privacy Policy

---

7. How Long We Keep the Data

After the periods expire, the data is deleted or anonymized.

---

8. Your Rights

Summary Table of Rights

Deadlines and Costs

• Response time: Maximum 1 month from receipt of the request
• Extension: For complex or multiple requests, the deadline may be extended by another 2 months (we will notify you)
• Cost: Exercising your rights is free of charge
• Exception: For additional copies or unjustified repetitive requests, we may charge a reasonable fee

Identity Verification

To protect your data, we may request additional information to confirm your identity.

Limitations

Certain rights may be limited when:

• We have legal retention obligations (e.g., tax documents, HR)
• Data is necessary for defense in court
• The rights and freedoms of others would be affected

Filing a Complaint with ANSPDCP

If you are not satisfied with the way we handled your request, you can file a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)

Complaints can be filed in Romanian or English, online, by mail, or in person.

Recommendation: Before contacting ANSPDCP, please contact us at [email protected]. We will make every effort to resolve your issue.

---

9. Data Security

Protection Measures

Incident Reporting

In case of a data security breach:

• We will notify the ANSPDCP within a maximum of 72 hours (if there is a risk)
• We will notify the affected persons without delay (if there is a high risk)

---

10. Cookies

The mkor.eu website uses cookies for:

• Correct functioning of the website
• Analysis of usage
• Personalization of experience
• Marketing (with your consent)

For complete information, see the Cookie Policy

MKOR Panel

The MKOR Panel platform has its own privacy policy, available upon registration.

---

11. Policy Changes

Change History

How We Inform You About Changes

• Email: For panel members and newsletter subscribers
• Website banner: For all visitors
• Reconfirmation request: If the changes affect the legal basis

Previous versions are available upon request: [email protected]

---

12. Contact

Data Protection Officer (DPO)

DPO Responsibilities

• Information and advice regarding GDPR obligations
• Monitoring compliance
• Point of contact for ANSPDCP and data subjects
• Coordination of data subject requests

We will respond as soon as possible, but no later than 1 month.

---

MKOR Consultanta SRL

Website: www.mkor.eu

Contact: [email protected]