Privacy policy of the system0 eye square app

This privacy policy tells you what data is collected when you use the eye square app, how it is used and what data protection rights you have.

To ensure that this privacy policy / notice is understandable to all users, we strive to present it in as simple and non-technical a manner as possible.

1. Who provides you with this app?

2. On what legal basis are your data processed?

Use of the app is completely voluntary and allows you to participate in market research studies. Participation requires a token (number key) and consent.
Eye square processes your personal data in principle only on the basis of consent granted by you in accordance with Art. 6(1)(a) GDPR (EU-General Data Protection Regulation), which you have given by installing the app on your smartphone. You can withdraw any consent you have given at any time. Further information on your right of withdrawal and instructions on how to exercise it can be found in section 10.

3. Who is the app aimed at?

The app is aimed at people worldwide who are at least 18 years old.

The app is able to record your screen and video.
 

The app is designed to process as little personal data as possible. In addition, the app deliberately refrains from any collection or analysis of your usage behavior through tracking tools.  

The data processed by the app can be classified into the following categories:  

4.1 Access data  

Each time a file stored on a server is accessed, access data is generated. In detail, the following data is processed with each retrieval:  

• IP address  
• Participants token 
• Date and time of the retrieval (timestamp)  
• Requested resource  
• Message about successful retrieval  
• requesting domain  
• Operating system used  
• Device type (smartphone), the manufacturer and the model of your smartphone (e.g. “iPhone 13” or “Galaxy S22”) 

This access data is only processed to secure and maintain the technical infrastructure. 

Access data is generated when you use or activate the following functions:  

• Web frontend 
• App
   

5. Functions of the app

Participation in market research studies

In the app itself, defined by tasks and depending on the study design, the screen and video are recorded by the main camera or the face camera. Furthermore, external links to e.g. surveys are to be integrated or forwarded.  

6. What permissions and functions does the app require?

The app requires access to various functions and interfaces of your smartphone. This requires that you grant the app certain permissions. The authorizations are programmed differently by the various manufacturers. For example, individual authorizations may be combined into authorization categories, whereby you can only agree to the authorization category as a whole. Please note that if the app denies access, you will not be able to use any or only a few of the app’s functions. 

6.1 Technical requirements (all smartphones) 

The app can only be activated by users if desired and a token for participation in studies is available. If the app has not been activated, it does not record any data. 

• Mobile Internet 

The app requires an internet connection to function in order to communicate with the app’s server systems.  

• WiFi 

optionally, the Internet connection can also be established via WiFi. 

The above interfaces of your smartphone must be activated so that your smartphone can record the working time. 

• Camera 

Your smartphone needs a camera to enable your attention to the device (attention). 

• Foreground Service 

The app can run without a user interface (UI) so that other apps can be used in parallel. 

• Wake Lock 

Enables faster creation of time stamps to the recorded videos by disabling stand-by for this time. 

6.2 Android smartphones 

If you are using an Android device, the following system features should also be enabled:  

• Notification 
• Camera 
• Screen Recording
   

7. When will my data be deleted?

All data stored in the app is deleted as soon as it is no longer required for the app’s functions: 

• After uploading the data, the data will be deleted from the phone. 
• The data on the server is stored for analysis purposes for a short period of time and deleted or anonymized after 3 months. 
• Participants can contact eye square to withdraw their consent or have their data deleted. 
• When the app is uninstalled, all data is also deleted.

8. With whom will my data be shared?

Eye square has commissioned the processor Hetzner Cloud GmbH, Feringastraße 12A, 85774 Unterföhring, Germany, with the operation and maintenance of part of the technical infrastructure of the app (e.g. server systems). 

Furthermore, eye square will only disclose personal data collected in connection with the use of the app to third parties to the extent that eye square is legally obligated to do so or the disclosure is necessary for legal or criminal prosecution in the event of attacks on the technical infrastructure of the app.  

Disclosure to client who comissioned the study is only possible for analysis purposes with the consent of participants. In principle, data will not be passed on in other cases.
 

9. Will data be transferred to a third country?

The data generated when using the app is processed exclusively on servers in Germany.

10. Withdrawal of consents

You have the right to withdraw the consent given in the app at any time with effect for the future. However, this does not affect the lawfulness of the processing until the withdrawal. 

You can object to the following functions and reactivate them at any time: 

• Camera usage 
• Notifications 
• Screen recording
   

11. Further data subject rights

The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects. To the extent that eye square processes personal data about you, you also have the following data subject rights:  

• the rights under Articles 15, 16, 17, 18, 20 and 21 of the GDPR,  
• the right to complain to a competent supervisory authority for data protection. To do so, you can either contact the competent supervisory authority in your place of residence or the competent authority at eye square’s registered office. The competent supervisory authority for eye square is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, visitor entrance: Puttkamerstr. 16 – 18 (5th floor), 10969 Berlin, website: datenschutz-berlin.de.
   

Version: v1.0 

Date: 21.04.2022 

Author: Philipp Reiter (internal DPO)