GDPR & Data Protection

1. Our Commitment

Core Market Research is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page explains how we handle your data and your rights as a data subject.

2. Data Controller

Core Market Research acts as the data controller for personal data collected through our website and services. We determine the purposes and means of processing personal data.

Contact:
Empire State Building, NYC New York, NY 10001, USA
Email: contact@coremarketresearch.com

3. Lawful Basis for Processing

We process personal data based on the following lawful grounds:

• Consent: Where you have given clear consent for us to process your data for a specific purpose
• Contract: Where processing is necessary to fulfill a contract with you
• Legal Obligation: Where we need to comply with legal requirements
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights

4. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing

5. Exercising Your Rights

To exercise any of your rights, please contact us with:

• Your name and contact information
• Description of the right you wish to exercise
• Any relevant details to help us locate your data

We will respond to your request within 30 days. In complex cases, we may extend this by an additional 60 days with notice.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary based on data type and purpose.

7. International Data Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequacy decisions.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection
• Incident response procedures

9. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in high risk to you, we will also notify you directly.

10. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local Data Protection Authority. However, we encourage you to contact us first so we can address your concerns.

11. Contact Our Data Protection Team

For any GDPR-related inquiries or to exercise your rights:

Data Protection Officer
Core Market Research
Email: contact@coremarketresearch.com