1. Objective and responsible authority
1.2. Service provider and the authority responsible for data processing is BLAAHBLAAH, from here thereon “BlaahBlaah.com”, “We” or “Us”, Delhi, India.
1.4. Contact: firstname.lastname@example.org
1.5. Data Protection Officer: email@example.com
2.1. Personally Identifiable Data - This kind of data can be used to uniquely identify, contact, or locate a single person or can be used with other sources to uniquely identify a single individual (e.g. names, e-mail-addresses).
2.3. IP Address - An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g., computer, printer) participating in the Internet.
3. General Information on Data Processing
3.1. We will collect, process and use personally identifiable data within the scope of your registration and the Service, and not without your required further consent only to the extent necessary for the conclusion and execution of a contractual relationship, performing requests or for billing purposes.
3.2. We take organizational, contractual and technical security measures to ensure that the provisions of data policy laws are complied with and, as a result, the data managed by us is protected from accidental or intentional manipulations, loss, destruction or access by unauthorized persons. These security measures are monitored on a regular basis and updated according to industry standard as necessary.
3.3. As provided for by applicable provisions we are entitled to disclose and submit data for criminal prosecution and risk prevention purposes.
4. Data Collection
4.1. Data received from Facebook: Once users log into Facebook in order to take a quiz, BlaahBlaah may process the following information, depending on the quiz being taken: full name, profile picture, Facebook User ID, gender, timeline posts (including reactions), photos and list of friends. BlaahBlaah, through Facebook, will only process the necessary data to provide and improve its Service to users. This data is required to provide the User with the Service. Refusal to provide this data will not allow BlaahBlaah to provide the Service to the User
4.2. Data received from you: Users may provide us voluntarily their Personal Data, such as name, e-mail address and company name when contacting us (through Facebook, Messenger, the "Advertising & Partnerships" form on the Site, e-mail or any other channel), your images and profile pictures (if you choose to upload them to our quizzes). BlaahBlaah might also collect meta-data from the User such as their IP address and the date and time of their visit to the Site for purposes including, but not limited to fraud prevention.
4.3. Data automatically collected or generated: BlaahBlaah will obtain data on the User’s usage of the Service either independently or with the help of third party services through the use of “cookies” (as described in Section 1). Such data consists of connectivity, technical or aggregated usage data, such as IP address, non-identifying data regarding the device, operating system, browser version locale and language settings used, the cookies and pixels installed on such device, and the activity (clicks and other interactions) of users of our Services. We do not use such data to learn a person's true identity or contact details, but mostly to have a better understanding on how our users typically use and engage with our Services. The use of such technical and device data also helps us and our partners to deliver contextual or otherwise more effective advertisements and content; to optimize our ad management and our users' viewing experience, and to improve the overall user experience and performance of our Services..
5. Data Processing Purposes and Legitimate Legal Basis
5.1. Facilitate, operate, and provide our Services.
5.2. Provide our users with customer care, assistance and technical support services.
5.3. Further develop, customize and improve the Services and your user experience:
5.5. Support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity. IP, browser and OS data will be used as a technical need, in order to conduct operations such as fraud detection and prevention.
5.6. Create aggregated statistical data, inferred non-personal data or anonymized or pseudonymized data (rendered non-personal), which we or our business partners may use to provide and improve our respective services
5.7. The legal basis legitimising the processing of Cookies by BlaahBlaah will be given by users through their explicit consent.
6. Data Retention Policy
6.1. Data facilitated directly by the user will only be processed by BlaahBlaah so far as the user uses the Service.
6.2. Only users’ quiz results (and associated meta-data) will be stored. Results contain a irreversible user hash used in order to identify users’ results upon deletion requests. This data will be conserved in a restricted manner during a period of 5 years in order to satisfy any potential legal obligations and/or responsibilities derived from their treatment.
6.3. Any IP addresses will be stored for a maximum of one month.
6.4. Finally, information proceeding from cookies will be conserved for a maximum period of 13 months.
7. Data Storage
7.1. The aforementioned data will be stored in servers outside of the European Union, namely by service providers located and operating in the United States. Our providers:
8. User Rights
8.1. The Data Protection Directive guarantees users with the following rights:
8.2. Users will be able to exercise their rights by means of written notice to BlaahBlaah’s contact e-mail or address or our Data Protection Officer’s email as stated in Section 1. Users will have to provide a scanned copy of their National Identity Card or equivalent and state their request.
8.3. If users consider their data has been wrongfully processed, they will be able to file a formal complaint to the Spanish Data Protection Authority at C/Jorge Juan, 6. 28001 – Madrid http://www.agpd.es
8.4. We inform users that the exercise of these rights are subject to the correct identification of the user and the ability to link them with the relevant collected and processed data. This procedure is not always possible (f.e. In the case of IP addresses) unless the user is able to provide enough documentation to certify their identity.
9. Third Persons’ data facilitated by Users
9.1. If the user were to facilitate personal data from third persons with any purpose, the user guarantees they have informed previously all concerned parties and have obtained their consent in order to communicate their data to BlaahBlaah.
9.2. The user guarantees that the concerned parties are over 14 years old and the information facilitated is accurate and truthful.
9.3. In case any responsibility arises from the non-fulfillment of these conditions by the user, the user will have to answer to the consequences of the aforementioned non-fulfillment.
10. Additional Third-Party Analytics and Marketing Tools
10.1. Within our Service we embed third-party (hereinafter “Marketing Provider”) marketing and ad technology in order to improve the efficiency of our marketing efforts and the relevance of the advertising presented to consumers, as well as for marketing of advertising space within our Service. Marketing Provider might use “Pixel Tags” (small invisible images) to collect information. Through the use of Pixel-Tags simple actions such as the visitor traffic to the Website can be pseudonymously recorded and collected. The pseudonymous information might also be stored in cookies on your device, includes technical information like your Browser or OS, details of how you used our Service and interacted with contents displayed by the Marketing Provider. This information might be combined with such data collected on other sources or used in order to display user tailored advertising content on other websites and within other services.
11. Google Analytics
11.3. Google will use this information on our behalf in order to assess users' use of our Service, in order to compile reports on the activities within our Service and in order to provide additional services for us associated with the use of our Service and Internet use.
11.4. In case IP-anonymization is activated on this Service, your IP address will be truncated within the area of Member State of European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Googler server in U.S. and truncated there.
11.5. We use the Analytics features for marketing, Google Display Network impressions, DoubleClick Campaign Manager integration and Google Analytics reports on demographics and user interests. You can prevent Google from using Google Analytics for display ads and customize ads on the Google Display Network at: https://www.google.com/settings/ads.
11.6. The IP address that your Browser conveys within the scope of Google Analytics, will not be associated with other data held by Google. Users can prevent cookies being saved through the appropriate setting on their browser software, however please note that if you do this you may not be able to use the full functionality of this Service. You can opt-out being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Add on for your current web browser: http://tools.google.com/dlpage/gaoptout?hl=en.
12. Use of Google Marketing and ReMarketing Services
12.1. We use the marketing and remarketing services (hereinafter referred to as the “Google Marketing Services”) provided by Google Inc., 1600 Amphitheatre Parkway, Mountian View, CA 94043, USA.
12.2. The Google Marketing Services enable us to display ads for and on our Websites and Service in a more targeted manner so that users are only shown ads which might actually be of interest to them. For this purpose, as soon as the user accesses our Websites, or other websites on which Google Marketing Services have been activated, Google immediately executes a Google code and so called re/marketing tags (invisible graphics or code) are integrated into the Website. With the help of these tags, an inpidual cookie, is stored on the users’ device (comparable technology can be used instead of cookies). The cookies can be set from various domains, including google.com and doubleclick.net. This file keeps a record of which websites the user visits, what content he/she is interested in and which offers he/she has clicked on, as well as technical information about the browser and operating system, referring websites, time of access and other details about the use of the website content. The users’ IP address is also recorded, whereby we, within the context of Google Analytics, would like to point out that, within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area, the IP address is truncated and only transmitted in its entirety to a Google server in the US and truncated there in exceptional cases. The IP address will not be linked with any of the user’s data from other services offered by Google. The aforementioned information can also be combined with equivalent information from other sources. If the user visits other websites afterwards, he/she can only be shown the ads that directly reflect his/her interests.
12.3. Within the scope of Google Marketing Services, the users’ data is processed pseudonymously. This means that Google does not, for example, store and process the users’ name or e-mail address, instead processing the relevant data on the basis of the cookies within pseudonymous user profiles. In other words, from Google’s point of view, the ads are managed and displayed for the cookie owner, regardless of who the cookie owner is, rather than for a specifically identified person. This shall not apply where the user has expressly permitted Google to process the data without this pseudonymization. The information collected about the users via “DoubleClick” shall be transmitted to Google and stored on Google’s servers in the US.
12.7. If you wish to object to the collection of data by Google Marketing Services, you can use the settings and opt-out functions provided by Google: http://www.google.com/ads/preferences.
13. Facebook Remarketing
13.1. Our Service uses social plugins („plugins’) provided by the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you live in the European Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“). The plugins are usually identifiable by a Facebook logo (e.g. letter f on blue background or a thumb up icon). For a full list of all social Plugins please see https://developers.facebook.com/docs/plugins/.
13.2. When you visit a page of our Service that contains a social plugin, your browser establishes a direct connection to Facebook servers. Facebook directly transfers the plugin content to your browser that embeds the latter into the Service, enabling Facebook to receive information about you having accessed the respective page of our Service. Thus, we have no influence on the data gathered by the plugin and inform you according to our state of knowledge: The embedded plugins provide Facebook with the information that you have accessed the corresponding page of our Service. If you are logged into Facebook, your visit can be assigned to your Facebook account. If you interact with the plugins, for example by clicking „Like”, or entering a comment, the corresponding information is transmitted from your browser directly to Facebook and stored by it. Even if you are not logged into Facebook, there is possibility that the plugins transmit your IP-address to Facebook.
13.4. In case you want to opt out of being subject to Facebook's use of your data for marketing purposes please use Facebook's opt-out settings provided within your user profile: https://www.facebook.com/settings?tab=ads or the opt-out possibilities on the websites http://www.aboutads.info/choices or for users from the EU http://www.youronlinechoices.com. Your choices are irrespective of platforms and devices and will be considered while using desktop or mobile devices.
14. Facebook Marketing
14.1. Within our Service we use the “Facebook Pixel“, the “App Analytics” functions and advertising contents of the Audience Network (hereinafter jointly referred to as the “Facebook Marketing Functions”) provided by the social network Facebook, which is operated by Facebook Inc. The Facebook Marketing Functions allow us and Facebook to determine the relevant target audiences, in order to display advertisements (hereinafter referred to as “Facebook-Ads’) in reference to potential interests of the users, as well as to users with similar attributes (so called “Lookalike Audiences”). We use the Facebook Marketing Functions, because we want to display Facebook-Ads only to users, who displayed an interest in our Service. The Facebook Marketing Functions allow us and Facebook to determine, whether our Ads were effective and satisfactory for users by being able to comprehend users’ actions, after they were forwarded to our Service by clicking a Facebook-Ad.
14.2. When you visit our Service or other websites that are member of Facebook’s Audience Network and display Ads, that include or use Facebook Marketing Functions, your browser establishes a direct connection to Facebook servers. Facebook directly transfers the Facebook Marketing Functions content to your browser which embeds the latter into our Service, enabling Facebook to receive the relevant information and storing a cookie (or similar device related characteristics, especially for the App Analytics functions) on your device. The cookie allows Facebook to store the relevant information within your device and retrieve it for the above-mentioned purposes, whereby user profiles may be created.
14.4. In case you want to opt out of being subject to our and Facebook's use of Facebook Marketing Functions for marketing purposes please use Facebook's opt-out settings provided within your user profile: https://www.facebook.com/settings?tab=ads or for users from the EU http://www.youronlinechoices.com. Your choices are irrespective of platforms and devices and will be considered while using desktop or mobile device.
15. Necessary Amendments
15.2. Please check back periodically, and especially before you provide any new personally identifiable information.