Technical and organisational data protection measures of eye square GmbH

Berlin, 1.September 2017


Processing of personal data:

Eye square implements the BDSG (Federal Data Protection Act), in particular § 42a regulates the procedure for a security incident concerning the processing of personal data.
In the case of a data protection offense, the management and data protection officers must be informed. In the case of a serious data protection offense, the extent to which the supervisory authority and affected parties must be informed in accordance with §42a BDSG.


Media security:

There is a complete backup and recovery concept with eight times backup per day. Monthly backups are kept at an external location. Security-relevant documents are carefully kept or disposed of properly in case of destruction.

The contract may contain detailed information on the type and scope of the processing and use of personal data of the customer. The contract may contain detailed information on the purpose of the customer's personal data as well as a prohibition of use by the service provider outside the written order. With Katharina Müller, eye square has appointed an operational data protection officer and ensures its appropriate and effective integration into the relevant company processes.

The eye square data protection officer, Mrs. Katharina Müller, trains the employees in dealing with the legal data protection measures. eye square is committed to the ESOMAR / ICC international code for market and social research.


eye square GmbH, Schlesische Str. 29-30; 10997 Berlin – Germany

Berlin, 1.September 2017

Katharina Müller (eye square)
(Data protection officer)





eye square data security and privacy

Berlin, 1.September 2017 - Version 1.6


Data security and privacy

The eye square browser extension does not collect personal information like email, names or sensitive data like payments info or using a third party service that accesses that info.


Focus of tracking

The software is constrained to collecting data only on the test-ad that is inserted into the test-page. Thus the software is collecting data only on media that is hosted on eye square’s server. The software is not tracking data or recording content on the test-websites.


Type of data collected

The software is recording numeric values like dwell times, cursor hover times and clicks. (An example dataset can be provided). The recording of string-type data is generally disabled (see section “Optional recording of general behavioural tracking data”).


What kind of data is collected?

1.1 Ad specific interactions
The software does record user interaction data with specifically targeted html content. The targeted html content is typically the ad that is inserted into the website.


Ad specific interactions

Ad specific interactions are recorded in following format:
Timestamp (in milliseconds since the start of the task)
Type of the interaction (Type values are: Hover, expand, video start, video pause, launch fullscreen, click)


Data not being recorded

Written/typed user input
With regards to data security and privacy the eye square software does not contain functionality that can record keystrokes or written/typed user input (e.g. logins, passwords)
Personally identifiable information.
The software has no functionality to record the name of the respondent, e-mail address, phone numbers, account IDs, geo location or similar personally identifiable information.


Website content

The software has no functionality to record content of the visited websites (e.g. news posts or messages on Facebook).


Browser related data

Based on the technologies used (see below) the eye square software has no access to the respondent’s browser history, cookie data or similar privacy critical data.


Optional recording of general behavioural tracking data

During stimulus exposure the software can optionally record the following behavioural data of the respondent. This type of data-recording is only activated based on specific client requests. Generally eye square does not record Visited URLs on personalised websites.


Mouse movements

Mouse movements are recorded in the following format: (Data fields per event)
Timestamp (in milliseconds since the start of the task)
X- and Y- location of the mouse (in pixels relative to the website)


Clicks

Clicks are recorded in the following format:
Timestamp (in milliseconds since the start of the task)
URL of the visited website


Visited URLs

Visited URLs are recorded in following format:
Timestamp (in milliseconds since the start of the task)
URL of the visited website


Contact Us

If you have any questions regarding privacy while using the Service, or have questions about our practices, please contact us via email at: app-support@eye-square.com