User research register privacy policy

 

Data controller

Name: IXI Eyewear Oy (“IXI Eyewear” or “We”)
Company: 3208010-5 
Address: Keilaranta 16 A 2, 02150 Espoo 
 
Contact details of controller: Emilia Helin, emilia.helin@ixieyewear.com 

 

Information about register

This privacy policy is applicable to IXI Eyewear’s user research register, in which we gather data from potential users for upcoming user studies. 

All IXI Eyewear’s personal data processing activities are conducted in accordance with the General Data Protection Regulation (2016/679) and other applicable national data protection laws.

  

The purpose for processing

We collect information for our user research register from potential participants through the Participation in user test - form. We process the personal data contained in the register to identify potential participants for future user studies. We may contact individuals listed in the user research register regarding possible upcoming studies, if they meet the criteria for each study. We do not use the personal data in the register for any other purposes. 

 

Data contained in the register 

We collect the personal data requested in the user research form. The information we process is provided directly by potential users who complete the form.

 

Legal basis for processing personal data 

Our legal basis for processing your personal data under this Privacy Policy is your explicit consent pertaining toGDPR article 9(2)(a).


Data retention

We retain your personal data for a maximum of two years, after which we erase the data.

 

Information security

All data contained in the register is confidential and can be accessed only by IXI Eyewear’s personnel involved in organizing the user tests. Individuals who process the register’s data are bound by a duty of confidentiality.

The personal data stored under this Privacy Policy shall only be processed on a need-to-know basis. The use of personal data is protected by appropriate user rights, passwords, and rights of use. The system is protected by a firewall against external access attempts. To ensure continuity in case of disruptions, the data is backed up regularly.

Data is shared to external parties only when required by law or at the request or with the written consent of the individual whose data is in the register. The individual has the right to withdraw their request or written consent at any time. 


Your rights

The individual in the register has the following rights:

  • Right to access: right to access his or her personal data
  • Right to correction: right to have incorrect, incomplete or outdated data corrected
  • Right to deletion: right to ask us to delete personal data 
  • Right to restriction of processing: right to request us to restrict processing of personal data for example when erasure or correction requests are pending
  • Right to data portability: right to receive the personal data you have provided us in a structured and commonly used format and transfer the data to another data controller (as applicable) 
  • Right to withdraw consent: right to withdraw the consent at any time

If you want to use your rights, please send us a letter or secure e-mail using the contact details provided in this Privacy Policy.

We may reject requests that are unreasonably repetitive, excessive, or manifestly unfounded. 

In case you consider our processing of personal data to be inconsistent with the applicable data protection laws, you have a right to lodge a complaint with the local supervisory authority for data protection (www.tietosuoja.fi).


Data transfers

Your personal data is mainly processed within the European Economic Area. However, in certain cases, we may transfer or access personal data outside the European Economic Area. In such cases, we provide adequate protection for the transfers of personal data to countries outside of the European Economic Area through a series of agreements with our service providers based on the Standard Contractual Clauses or through other appropriate safeguards, such as the EU-U.S. Data Privacy Framework. 

 

Update of Privacy Policy

This Privacy Policy may be updated from time to time. We will not make substantial changes without prior notice.