These terms are currently in effect as of 3rd July 2026. Except as otherwise set out in an active Order, if you used the Services on or after this date, these are the terms that govern your use of the Services. To view previous versions, use the drop-down menu above. To return to the legal page, click here.
BY ENTERING INTO AN ORDER OR OTHER AGREEMENT WHICH INCORPORATES OR REFERENCES THIS AGREEMENT, BY CLICKING TO ACCEPT THIS AGREEMENT OR ACCESSING OR USING ANY GWI SERVICES, YOU ARE ACCEPTING ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT. THIS AGREEMENT IS LEGALLY BINDING. IF YOU DO NOT AGREE TO THIS AGREEMENT, YOU MUST NOT USE ANY SERVICES.
These Custom Activation Product Specific Terms (“Custom Activation T&Cs”) supplement the Main T&Cs under which GWI provides the Custom Activation Services. Defined terms shall have the meaning set out below, in these Custom Activation T&Cs. Any terms used but not defined below shall have the meaning as set out in the Main T&Cs.
CCPA: means the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act and all applicable regulations, in each case as may be amended, superseded or replaced from time to time;
Custom Activation Services: means GWI providing the Custom Segment to permit the Panel Provider to model and scale the Modeled Segment to allow your delivery of direct marketing through the Platform;
Custom Segment: means the segment of GWI Respondents as instructed by you in the Custom Segment Specification;
Custom Segment Respondents: means GWI Respondents selected to meet the specification of the Custom Segment;
Custom Segment Specification: the details and specification for the Custom Segment as instructed by you and set out in your Order;
GWI Respondents: means respondents to a GWI survey;
Modeled Segment: means a scaled up lookalike model of consumers based on lookalike characteristics of the Custom Segment Respondents with such Custom Segment Respondents removed from such model, generated by Panel Provider, to be used by you for direct marketing via the Platform;
Panel Provider: means a distinct and separate third party panel provider (i) who has a direct relationship with GWI to support distribution of our surveys to respondents; and (ii) to the extent you are purchasing custom activations has an additional separate direct relationship with you via the Platform which does not form part of these Custom Activation T&Cs when making the Modeled Segment available for sale; and
Platform: the third party collaboration platform (such as Liveramp) or demand side platform you instruct the Panel Provider to push the Modeled Segment to.
California: In this clause 5.4, the following terms shall have the meaning given to them in the CCPA and shall be construed accordingly: business, consumer, personal information, process and third party. With respect to the Custom Segment delivery to Panel Provider, to the extent CCPA applies to such delivery, you will act as a business and GWI and the Panel Provider shall each act as third party. The Parties acknowledge that you shall not receive access to any personal information. Unless otherwise permitted under the CCPA, you require personal information to be disclosed to third parties only as directed by the consumer. Each third party:
Obligations by their nature intended to survive termination of this Agreement shall survive including clauses 3.2 and 4.
CUSTOM ACTIVATIONS DATA PROCESSING AGREEMENT
This Annex 1 DPA to the relevant SOW describes Processing that GWI will perform on behalf of You as Controller in accordance with your written instructions in this Annex 1 and any other written instructions from time to time in order to provide the services described below as set out as required by Article 28(3) GDPR or provisions in applicable Data Protection Legislation.
|
Description |
Details |
|
1. Controller |
The client entity entering into this Agreement as set out in the Order. |
|
2. Processor |
Trendstream Limited. (processor for you with regards to the processing activities in section 5(i) below)
|
|
3. Subject matter |
Activation of personal data in a Platform targeting consumers whether or not known to Controller |
|
4. Duration of Processing |
Subscription Period |
|
5. Purpose and nature of Processing |
(i) GWI will build the Custom Segment(s) on your behalf and transfer the Custom Segment(s) to Panel Provider (in this instance shall be Dynata LLC (“Dynata”)) with the relevant Dynata Panel ID for each Custom Segment Respondent (“GWI Pseudonymized Data”). (ii) Dynata will: (a) process the GWI Pseudonymized Data to create a Modelled Segment (which will not include any GWIPseudonymized Data). (b) Load the Modelled Segment(s) into the Platform. (iii) Dynata will no longer be processing GWI Pseudonymized Data once the Modelled Segment(s) has/have been created and scaled. (iv) Dynata will upload Dynata’s pseudonymised personal data in the form of the Modelled Segment(s) into the Platform indicated by you for you to purchase. |
|
6. Processing activities |
Viewing, receiving, accessing, storing, recording, modifying, correcting, enriching, deleting the data |
|
7. Types of Pseudonymized Data |
GWI Pseudonymized Data consists of the following: (a) Segment name describing one or more attributes of GWI Respondents, based on GWI’s review of survey responses received from each GWI Respondent; and (b) A Dynata panellist ID, which is only identifiable to Dynata The attributes described by a segment name may include the following types of information about an individual: (c) Characteristics (i) Demographic (ii) Economic and financial (iii) Nationality and citizenship (iv) Opinion (v) Personal preference and interest (vi) Information (d) Habits and activities: (i) Behaviour (ii) Consumed resources Dynata’s Pseudonymised Data consists of the following:
(i) Demographic (ii) Economic and financial (iii) Nationality and citizenship (iv) Opinion (v) Personal preference and interest (vi) Information (d) Habits and activities: (i) Behaviour (ii) Consumed resources |
|
8.Special category Pseudonymized Data |
Pseudonymized Data may contain the following special category data. No special category data will be processed without Panellist consent. |
|
9. Data Subjects |
(a) Custom Segment Respondents (seed data) (b) Dynata Modelled Segment respondents or where appropriate subprocessor Modelled Segment respondents. |
SUB-PROCESSORS
The Processing activities required to perform the services described above will be carried out using the Sub-processors in the table below.
|
Name of processors |
Address of processor |
Territory where Processing will be carried out |
Indicate whether Restricted International Transfer Agreement (or “RITA”, for example Standard Contractual Clauses (“SCC”) or similar terms) are in place for Processing of personal data in Third Countries (Yes / No) |
Processing activities |
|
GWI Sub-Processor |
||||
|
Dynata, LLC
|
The USA |
Yes. |
Processing activities are as set out in section 5(ii) above |
|
|
Dynata Sub-Processor |
||||
|
Semasio |
Semasio GmbH. Mönkedamm 11 20457 Hamburg |
Germany |
Yes. |
Processing activities are as set out in section 5(ii) above |
INTERNATIONAL TRANSFERS
GWI will ensure it has in place with Dynata (as subprocessor) terms that are materially the same as in this Annex 1. GWI shall include as appropriate: (a) where there are international transfers of a Custom Segment protected by the EU GDPR, the Standard Contractual Clauses (EU SCCs) annexed to the European Commission’s Decision (EU) 2021/914 of 4 June 2021 currently found at https://eurlex.europa.eu/eli/dec_impl/2021/914 , as may be amended, superseded or replaced; or (b) for a restricted transfer subject to UK GDPR, the EU SCCs as modified by the "International Data Transfer Addendum to the EU Standard Contractual Clauses” issued by the Information Commissioner’s Office under s.119A(1) of the Data Protection Act 2018 (“UK Addendum”).
There is no restricted transfer of personal data under Data Protection Legislation between GWI and you. GWI will flow down the obligations to Dynata to ensure: (i) the contract covers the instructions as set out in this Annex 1, and (ii) Dynata will where applicable in turn ensure that EU SCCs and UK Addendum are entered into between Dynata and its relevant sub-processors as required by the EU GDPR and UK GDPR.
GWI TECHNICAL AND ORGANISATIONAL SECURITY MEASURES
GWI shall maintain appropriate technical and organisational measures (GWI Technical and Organisational Security Measures) and shall:
(a) provide such assistance as Controller may require for the purpose of Controller: (i) demonstrating compliance with their obligations under Data Protection Laws and (ii) protecting the GWI Pseudonymized Data against unauthorised or unlawful Processing and against accidental or unlawful destruction, loss or alteration, unauthorised disclosure of, or access to, GWI Pseudonymized Data;
(b) process the GWI Pseudonymized Data in accordance with the relevant Data Protection Laws;
(c) maintain confidentiality and integrity of GWI Pseudonymized Data, including but not limited to compliance with the Agreement;
(d) adopt suitable technical safeguards, such as the pseudonymization and encryption of GWI Pseudonymized Data where appropriate;
(e) adopt measures to ensure the ongoing, availability and resilience of GWI’s systems and services;
(f) adopt a process for regularly testing, assessing and evaluating the effectiveness of the GWI Technical and Organisational Security Measures for ensuring the security of the processing of GWI Pseudonymized Data;
(g) ensure all processing is subject to binding written contractual obligations which provide an adequate level of confidentiality over the GWI Pseudonymised Data;
(h) ensure adequate training on compliance has been provided as required.
Additional Processing Terms
For Controller Personal Data (i.e. processing activities described in this Annex 1) where GWI acts as processor, GWI will, and will contractually require its subprocessor Dynata to, comply with the following:
GWI will, at the Controller’s written request or after termination of the Agreement: (i) delete the Modelled Segment and in any event within 30 days; and (iii) also delete existing copies (unless storage of any data is required by applicable law).