Source: https://imotions.com/privacy-policy/
Timestamp: 2019-04-21 16:47:35+00:00

Document:
At iMotions (or “we”, “us” / “our”) data protection and confidentiality is a high priority.
We collect information you provide directly to us, including when you sign-up to our newsletter, download a guide or brochure, communicate with us, request customer support, send us an email or otherwise interact with us. The types of information we may collect about you includes your name, email address and any other information you provide or if we receive your information as a referral from a partner company. Our legal basis for this processing is either your consent in accordance with art. 6(1)(a) of the GDPR or our legitimate interest in accordance with art. 6(1)(f) of the GDPR since you enter our Online Services voluntarily or otherwise express interest in iMotions, e.g. when you hand us your business card, join a product demonstration, or send us an unsolicited email.
Log Information: we log information about your use of our Online Services, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.
Device information: we collect information about the device you use to access our Online Services, including information about the device’s software and hardware, Media Access Control (MAC) address and other unique device identifiers, device token, mobile network information and time zone.
Information collected by cookies and other tracking technologies: we use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Reference is made to section 8.
We may also obtain information from other sources and combine that with information we collect through our Online Services.
When you buy and/or subscribe to one of our Products we may collect and process your contact details and professional information. Our legal basis for this processing is our legitimate interest in being able to deliver the Product you have purchased and/or subscribed to in accordance with art. 6(1)(f) of the GDPR, as well as the performance of the contract in accordance with art. 6(1)(b) of the GDPR.
If you are a test person, we will always collect your consent in accordance with art. 6(1)(a) and 9(2)(a) of the GDPR before processing your personal data. This is due to the given circumstances involving the processing of biometric data for the analysis of test results.
During the performance of our Products at the premises of our clients it may occur that the personal data of other people – not taking part in the Product and survey in question (“third party person”) – is unintentionally processed, e.g. during a mobile eye-tracking study. We will in such cases blur the faces and redact any other identifiable elements of the third-party persons in question, immediately after the recording has taken place – thus rendering the characteristics unidentifiable. Our processing therefore relies on the legitimate interest as legal basis in accordance with art. 6(1)(f) of the GDPR. We will in any case install a specific and visible sign at the entrance of the client’s premises during the performance of any such Products, whereas any third-party will be informed of the processing activities in question in accordance with art. 14 of the GDPR.
You are of course always welcome to contact us (see details in section 1) should you have any questions.
When you purchase iMotions Learn through our website, your payment information is stored in our website host’s database (WooCommerce plugin hosted on WordPress).
Carry out any other purpose for which the data was collected.
We may share information about you within the iMotions group. We may also share your personal data with our relevant client in the event that you have consented to this as part of participation in a Product.
We also may share aggregated information or otherwise anonymized information, which cannot reasonably be used to identify you.
We may also use data processors that solely act on basis of our instruction and for which we have entered into applicable data processor agreements.
If iMotions acts as data processor, the relation will be subject to a data processor agreement.
We may forward location and contact data to third party vendors (in the case that hardware has been purchased through us) in order to ensure timely delivery of goods (drop-shipment) as well as correct warranty tracking.
We will also utilize the data for contracting, invoicing purposes, and payment processing and store the data for as long as we are obligated to do so by the authorities.
Your personal data may be transferred to data controllers or data processors which are located in countries outside the EU/EEA, including group entities, not ensuring an adequate level of data protection. For these cases, such transfer will be safeguarded by the EU Commission’s standard contractual clauses or another legal basis for the transfer.
However, the data may be processed and stored for a longer period in anonymized form in order for us to improve the service.
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. To learn more please visit: https://support.google.com/adspolicy/answer/6008942?hl=en .
We make use of Google Ads and Google Analytics to track individual and aggregate acquisition and behavioral data on iMotions.com, as well as to analyse trends. We also make use of remarketing to target previous visitors and encourage them to visit again. This is done via cookies to track behavior. You can at any time opt-out of these at any time in the ad itself. To learn more or change your Google ad settings please visit https://www.google.com/settings/u/0/ads/authenticated.
We collect aggregate site traffic, pageviews, sessions, and click behavior that come from the major social media platforms including (but not limited to) Facebook, Twitter, Linkedin, and Youtube. This data is used on an aggregate level to understand how our marketing communications content is performing and how to best optimize our content for our site visitors.
Your personal information, and all transactions processed through our site, are run through our WordPress installation, which is hosted on WPEngine, a WordPress-compatible hosting platform. WPEngine complies with GDPR as a controller of customer account data and a processor of the end-user personal data stored on iMotions.com.
We collect your email address in order to be in accordance with CAN SPAM. If you would like to unsubscribe from receiving future emails, you can do this by updating your subscription preferences that appear on the bottom on any marketing communications that you receive from us or email us at marketing@imotions.com.
You may, at any time, withdraw any consent you have given. Hereafter we will no longer process your personal data, unless we can continue the processing based on another purpose. If you wish to withdraw your consent, please contact us at support@imotions.com.
We may include or offer third-party products, services, or links on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
If you wish to appeal against the processing of your personal data, please contact us as indicated under section 1 above. You may also contact the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5., 1300 Copenhagen K, Denmark or your local data protection agency.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 14