Privacy Policy

Personal data is information that identifies you or can be associated with you. We may collect such data when you use our services, participate in our clients’ projects, communicate with us, or visit our website (e.g. when completing a form or subscribing to a newsletter).

This Privacy Policy applies to FaceReader Online, including our website and online platform. It covers the processing of personal data from both customers who use our platform and participants in projects carried out via the platform.

By describing these different contexts, this Privacy Policy aims to provide transparency about the types of personal data we process, the purposes for which we process it, and the rights of the individuals whose data is involved.

We process only the personal data that is necessary to deliver our services and fulfill our responsibilities. We do not process more data than is required and all processing is carried out in compliance with applicable EU laws and regulations.

Website

When you interact with our website, we may collect personal data such as:

• Newsletter subscription: we use your email address to send you, our newsletter.
• Marketing communications: If you choose to subscribe, we use your email address to keep you informed about news, updates, and offers related to our services.
• Whitepaper: to access our whitepaper, we request your full name and email address.
• Contact form: when you contact us, we ask for your full name, email address, and organization.

We also use cookies and tools such as Google Analytics and Brevo to understand usage and improve our services. We never sell data collected through these tools. See the Cookies section below for more details.

Services

For our services we distinguish between clients and participants.

• Clients: we collect company information, contact details, and demographic information. We use this data solely for managing and providing our services.
• Participants: we collect video recordings that constitute personal data. From these recordings, we extract metadata such as emotion scores, gender and age estimations. This metadata cannot be used to identify an individual. Prior to any data collection, we obtain consent from participants. We do not collect any personal data from participants other than the video recordings. The videos are used exclusively to analyze facial behavior and are never shared with third parties other than the client responsible for the project.

We use your personal data for the following purposes:

• Provide our services: to operate and manage the platform.
• Communicate: to respond to inquiries and send newsletters or updates.
• Improve: to analyze usage and enhance our website and services.
• Comply with law: to meet legal and regulatory requirements.

Processing agreement & third parties

Our clients act as data controllers and instruct Human Insight Services, as processor, to process personal data on their behalf under a standard processing agreement.
The personal data we process is never sold or shared for third-party purposes. Where needed, we work with service providers (e.g. Microsoft Azure) under binding agreements that restrict their use of data to delivering our services.

By default your personal data is stored and processed on Microsoft Azure Servers located exclusively in the EEA (European Economic Area). The videos of the participants are stored on our system, because they need to be analyzed and can be re-analyzed at a later point with different settings.

Retention period

We do not retain personal data or recordings longer than necessary for the purpose for which they were collected, unless a longer retention period is required by law. Original recordings are deleted when a project is closed or manually removed. A privacy by design option deletes recordings immediately after analysis.

Security

All communication with FaceReader Online, including the transfer of video recordings, takes place through a secure TLS/SSL (HTTPS) connection. On our servers, all data is stored using AES256 encryption in Microsoft Azure’s “blob storage”. More info on Microsoft’s security policy can be found here: https://www.microsoft.com/en-us/security.

Our website uses cookies and similar technologies to function properly and provide insights into usage. We use Google Analytics and Brevo to measure traffic, improve our services, and support newsletters and marketing communications.
We never sell information collected through cookies. You can manage or disable cookies through your browser settings.

You are in control of your personal data. Under the GDPR you have the right to:

• See the personal data we have about you.
• Correct information if it’s wrong or incomplete.
• Delete your data if you no longer want us to keep it (where this is legally possible).
• Limit how we use your data in certain situations.
• Receive your data in a portable format so you can share it with someone else.
• Object to certain uses of your data, such as direct marketing.
• Withdraw consent at any time, if we process data based on your consent.

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact our Privacy Officer at:

privacy.officer@smr.nl

You may also use this address to exercise any of the aforementioned data protection rights, such as requesting access, or deletion of your personal data.