Last updated: 2018.09.01
The services at Teston.io are provided by TESTON AS (org.no. 919 136 928 MVA) registered at Kongens gate 3, 0153 Oslo (hereinafter referred to as "Teston", "we", "us", "service provider", or the "service/services").
Visitors to our site who participate in tests will be referred to in the following as "testers", "users", "you", etc. The creators of the tests offered through our website are referred to as "clients", etc.
At Teston, you can participate in tests created by Teston's clients or Teston. Upon your consent, the personal data collected during the performance of a test will be disclosed to the client who has created the test. The client will use your personal data for the purpose of evaluation and follow-up of the tests. The client has an independent controller responsibility for its own use of personal data collected during the tests. For more information, please refer to the section "Disclosure to third parties".
Collection and processing of personal data - summary
By personal data, we mean information and input that can be used to identify an individual, such as name, address, telephone number, social security number, and email address.
By processing of personal data we refer to any type of use of your personal data, including collection, registration, assembly, storage and disclosure, or a combination of such methods.
Teston collects and uses personal data, including payment details, account settings, and other data (collectively referred to as "customer data") for the following purposes:
- Managing our services
- Monitoring and improving our services and the functionality of the services
- Creating new services, functionality or content
- Contacting customers about the service or their respective accounts
- Contacting customers to provide information about new functionality in the service or other news related to the service
What personal data we collect
The personal data Teston may collect and process about you includes the following categories:
- Personal data provided by you, such as name, email address, payment details and answers to questions and submissions related to the performance of a test, etc.
- Personal data collected through your use of the service, including technical information about your device and internet connection. Through server logs and other tools, we collect details about your device and your use of the service, including the version of the software installed at your device, your device's web browser, IP address, cookies, and unique identifier files. Information about your device and your use of the service will often be used in anonymous and aggregated statistics, but we can also combine such information with the information obtained from your account. This allows us to provide you with more customised services, and gives us the opportunity to analyse use of the service.
Personal data may be supplemented with publicly available information from third parties.
How do we use your personal data and what is the legal basis for processing?
Teston processes your personal data in order to enable you to use Teston's services, to improve and further develop these services (including customising and improving them), and to inform you about relevant updates and new features. We also process personal data to provide you with offers and recommendations, to perform analysis to understand market trends, and to try to predict future behaviours. You will find more information about how we process your personal data and the legal basis for the processing below.
Understanding the market trends
We process personal data to develop statistics in order to improve and further develop our websites, as well as to improve our products and services. Such analyses can be made by Teston, or a third party performing analysis on our behalf. The processing of personal data by third parties for such analytical purposes shall be subject to a data processing agreement containing confidentiality requirements, restrictions on use, etc.
The legal basis for processing personal data for this purpose is that processing of personal data is necessary to safeguard Teston's legitimate interests, as described in the GDPR Article 6(1)f. In assessing this necessity, Teston takes into account your interests and fundamental rights of privacy, and will regularly review this assessment to ensure these rights and interests.
Improving the user experience
Your personal data will also be used to improve our services and to enhance the user experience, e.g. by using cookies. As an example, we may monitor whether users with a particular browser are having trouble performing tests, to help us understand how to improve the user interface design for the browser in question, in order to make it easier for users of this browser to take tests in the future. The personal data processed for this purpose will normally be aggregated and anonymised, i.e. the data cannot be used to identify you as an individual. We may also use this type of information to provide support to users experiencing problems using our services, such as technical issues on our website.
To the extent improving users’ experiences involves processing personal data, processing will be based on the protection of Teston's legitimate interests (GDPR Article 6(1)f) and/or to enable you to use Teston's services (GDPR Article 6(1)b).
Managing the service
In order to enable you to use the services, Teston must process certain personal data, including contact information. We use your personal data to manage our services, such as establishing a user account, contacting you about the service or your account, introducing new functionality, or other improvements of the service and to respond to questions or inquiries relating to the service.
We also use personal data to manage tests, such as controlling whether the communication between testers and clients are in accordance with our policies, as well as controlling whether the different tests meet Teston's required quality requirements. The legal basis for processing of personal data for this purpose is enabling you to use Teston's services (GDPR Article 6(1)b). Management of the service that goes beyond the individual agreement is based on Teston's legitimate interest in managing, controlling, and informing about its services (GDPR Article 6(1)f).
Limiting abuse of the service
We use personal data related to user activities and technical data to limit improper use of the service. Improper use includes inter alia scams, spamming, insults and threats, attempting to log into other users' accounts and other actions prohibited by Norwegian law. The basis for this processing is to safeguard the legitimate interests of Teston and third parties, including protecting users of the service from unauthorised access to their personal data (GDPR Article 6(1)(f).
Observe statutory requirements
Processing of personal data may also be required to comply with Teston’s legal obligations (cf. GDPR Article 6(1)c), e.g. if statutory rules related to storage for accounting purposes requires Teston to retain certain types of personal data after the account is deleted.
Disclosure to third parties
Teston may disclose personal data to our clients in order to be able to perform our services. During the performance of a test, the user’s screen, sound, and video (webcam) will for example be recorded and disclosed to the client who has created the relevant test, for the client's internal evaluation and follow-up of the test. Upon completion of a specific test on Teston, testers will therefore be asked to consent to disclosing personal data with the client that created the test in question. Teston will only share the personal data with the client that created the test in question, and the tests are only intended for internal use by the client and relevant personnel at the client, or third parties working on behalf of the client (e.g. consultants). According to the Terms and conditions for clients, the client shall not publish or share such recordings and other personal data generated in a test, or use such personal data for other purposes than mentioned above, without a consent from the relevant user. However, please note that the client can share personal data with suppliers and other third parties performing services on behalf of the client (data processors). Such data processors will only process the personal data for the purpose they were collected, and in order to perform their services towards the client.
Teston may also disclose personal data to third parties if it is necessary to prevent unlawful conduct, violation of Teston's or other users' rights, etc., or if such disclosure is necessary due to legal disputes involving Teston, a client, or a user of the service.
You have the right to delete your user account on Teston at any time. In the event that you choose to delete your account, all personal data will be deleted, unless statutory obligations or legitimate interests requires continued storage. In addition, anonymous information, i.e. information that cannot be used to identify you, may still be stored by Teston. If you want to exercise your right to:
- Access the personal data we process about you;
- change, update, or correct your personal data;
- request that your personal data is erased;
- request information about your right to restrict or object to processing; or
- request information about your right to data portability, i.e. your right to receive and transfer personal data provided to Teston to another data controller;
You can contact Teston at email@example.com. However, please note that Teston has to process personal data in order to enable you to use our services. Thus, erasure of some or all of your personal data may result in you no longer being able to use Teston’s services. If you want to restrict Teston's storage and processing of personal data beyond what is necessary to provide services that you have ordered, you can do so by contacting firstname.lastname@example.org.
Teston will retain your personal data for as long as it is necessary to fulfil the purposes for processing as defined above. This entails that Teston will normally store your personal data until you delete your account on the Teston platform. Continued storage may however be necessary due to statutory obligations or Teston's legitimate interests. With regard to test recordings, the storage time may vary depending on the type of test, and the payment plan of the client that you have tested for, etc., but Teston will normally not store any test recordings for more than 1 year after they were completed by the user.
In addition, as stated in the above, you are at all times entitled to request that Teston erases your personal data. We may also require continued storage if storage is necessary to safeguard the legitimate interests of Teston or third parties, including the establishment, exercise or defense of, or against, a legal claim.
Usage of analytics tools, cookies and other technology
- are necessary for the services to function properly;
- make it easier for you to use the services; and
- allow us to carry out analyses that enable us to develop and improve our services.
By using our services, you consent to Teston's use of such cookies. However, you may at any time detect and disable the cookies by:
- changing the cookie settings in your browser; or
- disabling a third-party tool by clicking a link to sign out.
However, if you choose not to accept cookies, you may not get access to all functionality in our services. You can find more information about cookies under the browser's ‘help’ function.
What are cookies?
A cookie is a small text file stored on your PC/mobile phone/tablet that helps us make your visit to our sites more meaningful and positive for you. Cookies can store user settings and information about your use of our website, your browser, and your use of the service, such as which test you have been shown, and similar activities and actions you’ve taken on sites that Teston works with.
There are different types of cookies:
- A session-based cookie is only stored in the working memory of your computer (also known as RAM), and it only lasts as long as your browsing session. When you close all open browser windows or turn off the computer completely, the session-based cookie will disappear permanently.
- A persistent cookie is stored on the hard drive of your computer until a specific date, which may be tomorrow, next week, or next year. Persistent cookies remain on the machine until they either a) expire, b) are overwritten by new cookies, or c) are manually removed by you.
If you do not want cookies to be stored on your computer, turn off the browser function. Please note that some of our functionality relies on cookies, and without cookies the service may not work as intended.
The cookies allow us to:
- Recognise your device so that we can customise our service and settings based on your expected preferences;
- Use special features such as the ability to report back and forth to the client that created the test;
- Keep the context as you navigate back and forth between our web pages;
- Calculate and report the total number of users and traffic;
- Develop and improve our website and understand how it is used;
- Build segments and audiences for marketing purposes and manage targeted advertising; and
- Reduce advertising that is irrelevant to certain audiences
What about cookies from advertisers and other third parties?
By using our service, advertisers and other third parties will be able to place cookies to measure and analyse the impact on banner advertising. We have established strict guidelines for how such third parties can collect and use personal data about our visitors. Our policy establishes that third parties shall not collect personal data on our website to build profiles, interest groups, or otherwise track behaviour in order to provide targeted ads. Data can only be collected to analyse and measure the impact of advertising, including counting ad impressions, clicks, and conversion. Cookies and other tracking technologies may not be linked to personal data without the explicit consent of the user.
The right to lodge a complaint to a supervisory authority
If you believe that our processing of your personal data infringes relevant data protection regulations, you are entitled to lodge a complaint with the supervisory authority where you live or work, at the place of the alleged violation, or to any other relevant supervisory authority.