Privacy Information

INFORMATION ON PROCESSING OF PERSONAL DATA

concerning users of the EyeSpot online platform

pursuant to article 13 of the (EU) Regulation 2016/679

Pursuant to the (EU) Regulation 2016/679 (hereinafter referred to as “Regulation” or “GDPR”), this page describes the procedures for processing of personal data concerning users of the EyeSpot online platform, which is accessible by electronic means through a link available in the survey which the user is participating in or through link present in an e-mail addressed to him/her.


DATA CONTROLLER

After the use of the online platform indicated above, data concerning natural persons identified or identifiable can be processed. Data Controller is SR LABS S.R.L., VAT No. IT03283700965 and Factory – pursuant to Art. 4 of the EU Regulation 16/679 – in Via Fantoli 7, 20138 Milan (Italy), whose contact details are specified below:

Tel.: +39 02 749291, Fax: +39 02 749291.13, e-mail: info@srlabs.it


DATA PROTECTION OFFICER (RPD/DPO)

The Data Controller SR LABS S.R.L. has appointed the Data Protection Officer (DPO) in the person of the Eng. Simona Calcagno.

The DPO can be contacted on the telephone by calling the number 02-749291 or via e-mail: dpo@srlabs.it


LEGAL BASIS OF THE PROCESSING

The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 let. f) (legitimate interest) EU Reg. 2016/679, for the following purposes:

  • Analysis and market investigations and production of corresponding report, for example for:

  • Measuring the visual impact of a product (Online eye tracking)

  • Monitoring the choices of the consumer (Mouse Click Analysis)

  • Testing the recognition of a product (Flashing Image Recognition)

  • Assessing the engagement of consumers (Emotion Optimization)


TYPE OF DATA PROCESSED AND PROCESSING PURPOSES

The computer systems and software procedures designed to run this online platform acquire, during their normal operation, some personal data, in particular:

  • Images of the user’s face registered by the webcam of the PC used (prior consent)

  • Ocular movements of the user registered by the webcam of the PC used (prior consent)

  • Data concerning the Operating System and Browser used by the user (prior consent)

  • Data for defining the profile or personality of the data subject, for analysing consumption habits or choices (e.g., mouse clicks, answers typed from the keyboard, etc.) (prior consent

Said data, necessary for the fruition of the EyeSpot online platform, are processed for the purpose to:

  • carry out analysis and market investigations and produce the corresponding report

  • allow the algorithm behind the online eye tracking to operate properly

Saved data will be exclusively used for the purposes of analysis related to the market research in progress. Data will be retained for the time necessary for the analysis or at most for 12 months as per regulation, in cloud supplied by a third-party provider managing a storage service, thereafter they will be completely and irreversibly cancelled.

For bankrupt purposes said data will be filed every day in a local storage unit, a server inside SR Labs without direct access from WAN.

In order to prevent and monitor any attempt of unauthorized access to this computer system, a monitoring system of accesses has been established with the production of a daily check report. For this purpose, specific security logs at different levels have been prepared.

The accesses of the system administrator occur through key-based authentication. The servers forming the EyeSpot platform cannot be accessed in a different way. The access with password is disabled to avoid attempts of brute force.


USE OF THIRD-PARTY SOFTWARE

The fruition of the EyeSpot online platform by the user can require the use of third-party software satisfying the requirements of compliance with the GDPR.


RECIPIENTS OF DATA

Personal data collected are processed by the data supervisors of the Data Controller, who act in accordance with specific instructions provided in relation to purposes and procedures of the same processing.


RIGHTS OF DATA SUBJECTS

Data subjects have the right to obtain from the Data controller, in the cases provided, the access to personal data and their rectification or erasure or restriction of processing concerning them or to object to the processing (arts. 15 et seq. of the Regulation). The specific application is lodged by contacting the Data Controller to the following numbers and addresses: Tel.: +39 02 749291, Fax: +39 02 749291.13, e-mail: dpo@srlabs.it


RIGHT OF COMPLAINT

Data subjects who consider that the processing of their personal data carried out through this website occurs in breach of the provisions of the Regulation have the right to lodge a complaint with the Protection Authority, as provided for by art. 77 of the same GDPR, or bring proceedings before the appropriate judicial offices (art. 79 del GDPR).

INFORMATION ON PROCESSING OF PERSONAL DATA

concerning the users of the website of SR LABS S.R.L.

pursuant to article 13 of the (EU) Regulation 2016/679

 

Pursuant to the (EU) Regulation 2016/679 (hereinafter referred to as “Regulation” or “GDPR”), this page describes the procedures for processing of personal data concerning users of the website of SR LABS S.R.L. accessible by electronic means at the address “www.srlabs.it”.

This information does not concern other websites, pages or online services achievable through hypertext links posted in the websites but concerning resources outside the website “www.srlabs.it”.


DATA CONTROLLER

After the use of the website indicated above, data concerning natural persons identified or identifiable can be processed. Data Controller is SR LABS S.R.L., VAT No. IT03283700965 and Factory – pursuant to Art. 4 of the EU Regulation 16/679 – in Via Fantoli 7, 20138 Milan (Italy), whose contact details are specified below:

Tel.: +39 02 749291, Fax: +39 02 749291.13, e-mail: info@srlabs.it


DATA PROTECTION OFFICER (RPD/DPO)

The Data Controller SR LABS S.R.L. has appointed the Data Protection Officer (DPO) in the person of the Eng. Simona Calcagno.

The DPO can be contacted on the telephone by calling the number 02-749291 or via e-mail: dpo@srlabs.it


LEGAL BASIS OF THE PROCESSING

The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 let. f) (legitimate interest) EU Reg. 2016/679, for the following purposes:

  • browsing this website;

  • possible request for contact, with shipment of information requested by you, through notifications to the institutional address of the Data Controller, namely “info@srlabs.it”.


TYPE OF DATA PROCESSED AND PROCESSING PURPOSES

Navigation data

IT systems and software procedures designed to run this website, during their normal operation, acquire some personal data whose transmission is implicit in the use of the Internet communication protocols.

This category of data includes IP addresses or domain names of computers or terminals used by the users, URI/URL addresses (Uniform Resource Identifier/Locator) of the resources requested, time of request, method used in submitting the request to the server, the dimension of the file obtained in reply, the number code indicating the state of the reply given by the server (successful completion, error, etc.) and other parameters concerning the operating system and the computer environment of the user. Said data, necessary for the fruition of web services, are also processed for the purpose to:

  • obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);

  • control the correct operation of services offered.

Navigation data do not persist for a period exceeding seven days and are cancelled immediately after their aggregation (except for any need of assessment of crimes by the Judicial authority).

Data communicated by the user

The optional, explicit and voluntary shipment of messages to the contact addresses of the Data Controller, entail the acquisition of contact data of the sender, necessary to answer, as well as of all the personal data included in the communications.

Cookies and other tracking systems

Neither cookies are used for the user profiling, nor other tracking methods are used. Conversely, session cookies (non-persistent) are used strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the user’s control, where on the servers, at the end of the HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times, anyway, not exceeding seven days like the other navigation data.


RECIPIENTS OF DATA

Personal data collected are processed by the data supervisors of the Data Controller, who act in accordance with specific instructions provided in relation to purposes and procedures of the same processing.


RIGHTS OF DATA SUBJECTS

Data subjects have the right to obtain from the Data controller, in the cases provided, the access to personal data and their rectification or erasure or restriction of processing concerning them or to object to the processing (arts. 15 et seq. of the Regulation). The specific application is lodged by contacting the Data Controller to the following numbers and addresses: Tel.: +39 02 749291, Fax: +39 02 749291.13, e-mail: Tel.: +39 02 749291, Fax: +39 02 749291.13, e-mail: dpo@srlabs.it


RIGHT OF COMPLAINT

Data subjects who consider that the processing of their personal data carried out through this website occurs in breach of the provisions of the Regulation have the right to lodge a complaint with the Protection Authority, as provided for by art. 77 of the same GDPR, or bring proceedings before the appropriate judicial offices (art. 79 del GDPR).

logo Eyespot color medium rgb
EyeSpot – unconventional research is a TrademarkTM of SR Labs Srl.
Copyright 2022 © – All Rights Reserved.
P.IVA IT03283700965 – SR Labs S.r.l. Privacy Information – Terms & Conditions

+39 02 749291

info@eyespotsolution.com