Policies and disclaimer
Privacy and cookies policy
Last updated 2025.08.29
1. The controller
The controller is Oddvisory, registered auxillary trading name of Flawsome Ltd.
The controller is Oddvisory, registered auxillary trading name of Flawsome Ltd.
E-mail address: privacy@oddvisory.com
2. Purpose of the register
The personal data collected will be used to:
The personal data collected will be used to:
- We collect, store and process personal data only for predefined purposes. The main purposes for which we use and process personal data are:
- Provision and delivery of marketing services. We collect and process personal data in connection with the provision and delivery of marketing services. We share and process personal data in the course of contact requests. In the course of the customer relationship, we process personal data in particular for the purposes of customer relationship management, service delivery and billing.
- Marketing and customer communication. We aim to find new customers for our services and market them, especially through digital channels, and we may carry out direct marketing or customer communications, especially by email. We may also build profiles or target advertising or marketing based on people's past interests or visits. The processing and collection of personal data is necessary to carry out these activities. Personal data may also be processed to analyse and measure the effectiveness of marketing and use of the website. Marketing may also include automated decision-making and profiling.
3. What personal data does Oddvisory collect? What are the sources of the data?
We mainly collect and process personal data only in relation to our customers and potential customers.
We collect personal information about our customers and potential customers primarily from the individuals themselves. For new potential customers, we may also collect prospect information from sources such as LinkedIn, company websites or marketing tools such as Hubspot. For potential and existing customers, an important source of personal data is our website and its contact forms. We also collect data related to the use of our website through Pirsch Analytics. During the customer relationship, data is also generated and collected, but mainly related to the customer's business.
4. Grounds for data collection and processing
Customer data is collected and processed with the customer's consent, or to implement a contract with the customer.
Customer data is collected and processed with the customer's consent, or to implement a contract with the customer.
5. Data content of the register
Company name, Business ID, E-mail address, Phone number, Name.
Company name, Business ID, E-mail address, Phone number, Name.
6. Data retention period
We do not retain personal data for longer than is necessary for the purpose for which it is used or as required by contract or law. Retention periods for personal data may vary depending on the purpose, the legal basis for processing and the circumstances. We will also endeavour to update and delete unnecessary, inaccurate or outdated information from time to time.
We do not retain personal data for longer than is necessary for the purpose for which it is used or as required by contract or law. Retention periods for personal data may vary depending on the purpose, the legal basis for processing and the circumstances. We will also endeavour to update and delete unnecessary, inaccurate or outdated information from time to time.
7. Regular sources of information
The register collects information on:
The register collects information on:
- From the person themselves. From registers kept by the authority to the extent permitted by law.
8. Regular disclosures and transfers of data outside the EU or the European Economic Area
As a rule, data is not disclosed outside the company. Some of the third-party service or software providers used by the company may store data outside the EU or the European Economic Area.
As a rule, data is not disclosed outside the company. Some of the third-party service or software providers used by the company may store data outside the EU or the European Economic Area.
9. Use of cookies
We use cookies on our website. A cookie is a small text file sent to and stored on a user's computer that enables the website operator to identify frequent visitors, facilitate visitor logins and allow the compilation of aggregate information about visitors. This feedback allows us to continuously improve the content of our website. Cookies do not harm users' computers or files. We use them to provide our customers with information and services tailored to their individual needs.
We use cookies on our website. A cookie is a small text file sent to and stored on a user's computer that enables the website operator to identify frequent visitors, facilitate visitor logins and allow the compilation of aggregate information about visitors. This feedback allows us to continuously improve the content of our website. Cookies do not harm users' computers or files. We use them to provide our customers with information and services tailored to their individual needs.
If a user visiting our website does not want us to receive the above information by means of cookies, most browsers allow you to disable the cookie function. This is usually done through the browser settings.
10. Protection of the register
The data is transferred over an SSL-secured connection.
The data is transferred over an SSL-secured connection.
Electronic data is protected by usernames and passwords.
Only persons employed by the controller who need the data for their tasks have access to the data.
11. Rights of the data subject
The data subject has the right to check what data concerning him or her has been stored in the personal data register. The written request for inspection must be signed and sent to the person responsible for the register.
The data subject has the right to check what data concerning him or her has been stored in the personal data register. The written request for inspection must be signed and sent to the person responsible for the register.
The right of inspection is free of charge and is exercised no more than once a year.
The data subject has the right to request the rectification or erasure of inaccurate or outdated data or the transfer of data from one system to another. They also have the right to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation.
Data subjects have the right to withdraw their consent to the processing of their personal data or to lodge a complaint with a supervisory authority about the processing of their personal data.
Data subjects also have the right to object to the use of their data for direct marketing purposes.
Market research and client customer survey participation policy
Last updated 2025.08.29
1. The controller
The controller is Oddvisory, registered auxillary trading name of Flawsome Ltd.
E-mail address: privacy@oddvisory.com
2. What data do we collect?
The type of data, how it is collected, and data processing differ depending on the type of research conducted as specified below. Personal data may also include other data that you yourself disclose during the research.
2.1. Quantitative market research
2.1.1. Market surveys
- Data collected: No personal data is collected, answers are anonymous from third party supplier
- Data processing: Statistical analysis
- Third party partners: Consumer panel supplier(s), survey tool supplier(s)
- Retention: Data is stored indefinitely
2.1.2. Client customer surveys
- Data collected: Personal data can occur, as answers sometimes need to be traceable to a certain individual in Oddvisory client’s customer database
- Data processing: Statistical analysis and reporting on an aggregated level, and tagging of individuals into different segments used for analysis and marketing planning
- Third party partners: Survey tool supplier(s)
- Retention: Data is stored by Oddvisory until project is finalized, typically within one year. Oddvisory's clients can store data according to their personal data protection policy.
2.2. Qualitative market research
2.2.1. Focus groups
- Data collected: Personal data includes video recordings, first name, phone number
- Data processing: Qualitative analysis where data is anonymized to only gender and age before reporting (e.g. Female, 25)
- Third party partners: External moderators, survey tool supplier(s)
- Retention: Video recordings are stored by Oddvisory for two (2) years, and only accessible through booked meetings at Oddvisory facilities by our own staff or staff from our client that commissioned the research.
2.2.2. Online communities
- Data collected: Personal data is collected in participant lists, to send out invitations to community participation. No personal data is collected for other purposes, but may occur among respondents written answers and other information that you as a participant chose to provide.
- Data processing: Qualitative analysis where data is anonymized to only usernames before reporting (e.g. “Johanna”).
- Third party partners: External moderators, survey tool supplier(s), community platform suppliers
- Retention: Participant lists are stored, separated from community records, until project completion within one year. Full community records are exported and stored by Oddvisory indefinitely, and is not accessible to anyone outside the company and working project team.
2.2.3. Interviews (face-to-face, telephone, or video conference).
- Data collected: Personal data is collected in participant lists, to send out and administrate invitations to interviews. No other personal data is not collected, but may occur among respondents’ recorded answers and other information that you as a participant chose to provide.
- Data processing: Qualitative analysis where data is anonymized to only an anonymous identifier before reporting (e.g. Female, 25).
- Third party partners: Survey tool supplier(s) and external moderators.
- Retention: Participant lists are stored, separated from interview records, until project completion within one year. Voice recordings are stored by Oddvisory indefinitely, and is not accessible to anyone outside the company and working project team.
3. How data is processed, used, and anonymized
All responses to our research are completely confidential unless otherwise explicitly stated, for example if you are interviewed as an expert. We collect data in our studies for research purposes if not otherwise stated in the study, and the use of the information gathered will be limited to that purpose.
In the events that we report and present results or insights, all personal data will be anonymized to ensure that it cannot be connected to you as an individual.
4. Sharing your data
We do not rent, sell or share personal information to a third party for the purpose to directly contact individuals for marketing and sales of products or services.
We will share anonymized data and insights from the study with the client for whom we are conducting the research.
We may share some personal information with third parties for administrative purposes, for example to pay you for your participation. Our partner service providers are required to comply with GDPR regulations and agree to maintain the same strict confidentiality and provide the same level of data security as provided by us, and are not permitted to use or disclose your personal data except as necessary to perform services on our behalf or to comply with legal requirements.
5. Working with external research partners
Oddvisory conducts research in collaboration with a number of third party partners. Depending on the type of study the extent of collaboration may vary as specified above under types of research.
When we work with partners it is our duty to ensure that we remain compliant with the rules stipulated by GDPR and our company policy regarding personal data. This includes ensuring that we have a written commitment that the partner operates in a manner that is GDPR compliant.
6. Your rights
All research participation is voluntary, and you can always opt out at any time after agreeing to participate (be aware that any monetary compensation you are provided for participating is dependent on your participation, and that opting out of participating may make you ineligible to receive it).
According to GDPR regulations you have the right to request access to the personal data that we have collected about you for the purposes of reviewing, modifying, or requesting deletion of the data. You also have the right to request a copy of the personal data that we have collected about you and to have any inaccuracies in that data corrected. You can also request that we stop processing your personal data, except when processing is necessary for the performance of a contract where you are one of the concerned parties, if processing is necessary for us to comply with any legal obligations we have or protect the vital interest of an individual.
6.Participating in our market research
To participate in one of our research projects you need to consent that any information you provide for the duration of the research will be used as above described.
Intellectual property rights
ODDVISORY is a registered trademark being the property of Oddvisory. Oddvisory reserves all rights to the mentioned trademarks. Information which is published on Oddvisory’s website belongs to Oddvisory or is used with the permission of the rights holder. Making of copies, presentations, distribution, display or any other transfer of the information on the website to the public is, except for strictly private use, prohibited unless done with the consent of Oddvisory.
Disclaimer
Information published on Oddvisory’s website is only intended as general information. There is a risk that the content of this website is neither exhaustive nor completely updated. Any use of information on this website is done at the user’s own risk. Oddvisory is not responsible for, and has no obligations as regards, information on Oddvisory’s website or information on another website with a linking to or from Oddvisory’s website.
2026 © ODDVISORY
All rights reserved