The General Data Protection Regulation (GDPR) is the EU-wide regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA.
The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
See https://www.eugdpr.org/ for more information on the GDPR.
In this artcile you will finf the following FAQ's:
- Does Spotler Activate collect and/or process (personal) data?
- What cookies are used by Spotler Activate Search?
- Does a user need to accept Spotler Activate Search cookies?
- What is a Data Processing Agreement?
- Do we need a Data Processing Agreement?
Does Spotler Activate collect and/or process (personal) data?
Yes, Spotler Activate Search collects, processes and stores data from the use of Spotler Activate Search on our client's website.
We ensure that all data is treated carefully and securely. Our DPA includes formal rules of how we treat the data, and we stand by these rules completely. We do not receive any personal information such as account or user details, directly from our client's websites.
Spotler Activate Search tracks visitor behaviour using IP addresses and first-party analytics cookies. The type of cookies and how they work is described below.
The data we store and the process in which we do so does not contain any personal information, such as the IP address. We do this by either deleting the information or anonymizing the data by e.g. removing the last triplet/octet from the IP address.
What cookies are used by Spotler Activate Search?
Spotler Activate Search sets the following cookies:
Name: __sqra
Default expiration time: 2 years from set/update
Description:
Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __sqra cookies exists. The cookie is updated every time data is sent to Sooqr Search.
Name: __sqrb
Default expiration time: 30 mins from set/update
Description:
Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __sqrb cookies exists. The cookie is updated every time data is sent to Sooqr Search.
Name: __sqrc
Default expiration time: End of browser session
Description:
To determine whether the user was in a new session/visit.
Does a user need to accept Spotler Activate Search cookies?
No, Spotler Activate Search cookies are so-called 'first party cookies', i.e they are linked to the website the user is visiting.
The default cookie policy of the website also covers the cookies set by Spotler Activate Search. This is similar to the way Google Analytics works on your website. When a consumer has a cookie blocker, Spotler Activate Search will not set any cookies.
What is a Data Processing Agreement?
Under the GDPR, businesses that receive or track data from their users are called 'data controllers'. Data controllers need to inform their users of which data they keep or collect and how they use it. To collect and process personal data (privacy) they need to ask their users explicitly for their approval.
Data controllers can use third parties to process the data for them, e.g. an online reporting tool. Data controllers may only work with data processors that provide 'sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the GDPR and ensure the protection of the rights of the data subjects'. These guarantees are included in so-called Data Processing Agreements.
This obligation is very stringent and requires controllers to make a detailed assessment of each processor's capabilities, including its financial stability. Spotler Activate Search acts as a data processor for our clients and has included a Data Processing Agreement in our Terms & Conditions. You can find it here: https://www.sooqr.com/dpa
Do we need a Data Processing Agreement?
The Spotler Activate Search DPA is an agreement between Sooqr and our client(s), in which the client is the data controller and Spotler Activate Search the data processor. Our DPA is a click-through agreement, similar to our Terms & Conditions. Our client is the sole owner of all the data and Spotler Activate Search is assigned as a processor for the purpose as described in the DPA. In case you, as our client don't agree with the terms of the DPA, please contact us.