Entropik Technologies considers data protection and privacy to be of paramount importance
Information we collect and how we use it
Contact Information: You might provide us with your contact information, whether through use of our service, a form on our website, an interaction with our sales or customer support team, or a response to an Entropik Technologies study.
Usage information: We collect usage information about you including the webpages you visit, what you click on, the actions you perform, via tools such as Google Analytics or other tools whenever you interact with our website and/or service .
Device and browser data: We collect information from the device and application you use to access our services. Device data mainly means your IP address, operating system version, device type, system and performance information, and browser type.
Log Data: Like most websites today, our web servers store log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the resources viewed on our site (such as the HTML pages, images, etc.), operating system versions, device type and timestamps.
Referral information: If you arrive at a Entropik Technologies website from an external source (such as a link on another website or in an email), we record information about the source that referred you to us.
Information from third parties and integration partners: We collect your personal information or data from third parties if you give permission to those third parties to share your information with us or where you have made that information publicly available online.
Additional Information Collected on Registered Users
Account information: Account registration is required before you can use the Entropik Technologies service (“Entropik Technologies Registered User”). When you register for an account, we collect your first and last name (together called as full name), username, password and email address.
Billing information: If you make a payment to Entropik Technologies, we require you to provide your billing details, a name, address, email address and financial information corresponding to your selected method of payment (e.g. a credit card number and expiration date or a bank account number and the required information to process billing).
Information Collected on Participants
If you participate in an Electroencephalogram (EEG) and/or EyeTracking and/or Facial coding and/or survey study controlled by an Entropik Technologies Registered or Unregistered User (“Participant”) you may be required to provide access to webcam and consent to a your face video being recorded. Explicit consent must be provided by you to enable the webcam to collect video of your face. Consent may be retracted at any time during the session by cancelling the session. Face videos are analyzed by our computers to calculate eye-gaze tracks (a series of x,y coordinates) and facial coding algorithms to determine emotion. The videos are not associated with you except via the information you enter to participate in the study (such as answers to survey questions). By participating in the AffectLab EEG study, we will collect your raw brainwaves using AffectLab or its associated partner(s) headsets to determine cognitive and affective parameters.
How long is information stored
We store Personal Information for as long as it is required for our research and business purposes and as required by law or at the request of Entropik Technologies Registered Users or you. When Personal Information is no longer required, we will delete it from our systems.
Facial videos are permanently deleted within 30 days once a written request to delete the video post survey is provided. Facial images will not be associated to any personally identifiable information and be stored only for improving the accuracy of the AffectLab or Entropik Technologies models.
GDPR – Participant Rights Identification Key:
Even though Entropik Technologies is processing data at the request of the data controller being the Entropik Technologies Registered User, we want to ensure that you can execute your rights under GDPR.
At the start and end of a session we provide Participants with a key tied to your face video or brainwave data (even after deletion). If you contact us and provide this key we can check the status of face video data collected. Entropik Technologies has also provided Entropik Technologies Registered Users with a range of tools to help them manage your rights as a Participant.
Entropik Technologies may use first party cookies (small text files that the Entropik Technologies website(s) stores locally on your computer) on our websites, for one or more of the following purposes: to help identify unique and returning visitors and/or devices; conduct A/B testing; and diagnose problems with our servers. Browsers do not share first-party cookies across domains. Entropik Technologies does not use methods such as browser cache, Flash cookies, or eTags, for acquiring or storing information about end users’ web browsing activity. You can set your browser preferences to refuse all cookies should you wish to prevent cookies from being used .
Disclosure of Information to Third Parties We do not share your personal information with third parties other than as follows.
Information, including Entropik Technologies User Information, and any Personally Identifiable Information contained therein, may be shared with certain third-party companies and individuals that help facilitate technical and administrative aspects of the Entropik Technologies Service (e.g. email communications), or perform functions related to the administration of Entropik Technologies (e.g. hosting services). These third parties perform tasks on our behalf and are contractually obligated not to disclose or use Entropik Technologies User Information for any other purpose, and to employ adequate security measures to prevent unauthorized access to such data. However, Entropik Technologies is not responsible in the event that Personally Identifiable Information is disclosed at a result of a breach or security lapse by any such third party.
Law Enforcement and Legal Process
If Entropik Technologies, or substantially all of its assets, is acquired by another company or successor entity, Entropik Technologies Client Information will be one of the assets transferred or acquired by the purchaser or successor. You acknowledge that such transfers may occur, and that any purchaser of or successor to Entropik Technologies or its assets may continue to collect, use and disclose your information acquired prior to such transfer or acquisition as set forth in this policy.
Security of your Personal Information
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. Examples of these include limited and password-protected access, high security public/private keys and SSL encryption to protect transmission. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.
Provisions Specific to EU Citizens
Rights of EU Citizens Under the GDPR
If you are a citizen of the European Union you have certain rights relating to how others handle your personal information. These rights are:
1. The right to be informed how your personal information is being used
2. The right of access your personal information and how it is processed.
3. The right to rectify inaccurate or incomplete personal information.
4. The right to deletion of all or any personal data.
5. The right to restrict processing, that is, the right to block or suppress processing of your personal data.
6. The right to data portability – this allows individuals to retain and reuse their personal data for their own purpose.
7. The right to object, in certain circumstances, to use of your personal data in a manner different from the purpose for which it was provided.
8. Right to prevent automated decision making or profiling based on your data without human intervention.
IF YOU WISH TO EXERCISE THESE RIGHTS, CONTACT US AT GDPR@ENTROPIKTECH.COM
Questions or Comments