Privacy policy

Information about Teston's processing of personal data and use of cookies.

Last updated: 2018.09.01

The services at Teston.io are provided by TESTON AS (org.no. 919 136 928 MVA) registered at Kongens gate 3, 0153 Oslo (hereinafter referred to as "Teston", "we", "us", "service provider", or the "service/services").

The services Teston provides are built on trust. It is important for us that visitors and users feel confident using our services, and therefore we place great emphasis on protecting your privacy. This privacy policy provides information about how we collect and use personal data about our users, and how we protect our users’ privacy. If you have any questions regarding this privacy policy, or Teston's processing of personal data, please contact us at help@teston.io.

Visitors to our site who participate in tests will be referred to in the following as "testers", "users", "you", etc. The creators of the tests offered through our website are referred to as "clients", etc.

Controller Responsibilities

For the purpose of this privacy policy, Teston is the data controller for the personal data provided by you or collected by us in the course of your use of the service.

At Teston, you can participate in tests created by Teston's clients or Teston. Upon your consent, the personal data collected during the performance of a test will be disclosed to the client who has created the test. The client will use your personal data for the purpose of evaluation and follow-up of the tests. The client has an independent controller responsibility for its own use of personal data collected during the tests. For more information, please refer to the section "Disclosure to third parties".

Collection and processing of personal data - summary

All processing of your personal data is governed by Norwegian personal data regulations and the EU's General Data Protection Regulation (hereinafter referred to as "GDPR"), as implemented in Norwegian law. For your convenience, we have summarised the content of the privacy policy below, but we recommend that you familiarise yourself with the privacy policy in its entirety to get a full overview of how we collect and process your personal data.

By personal data, we mean information and input that can be used to identify an individual, such as name, address, telephone number, social security number, and email address.

By processing of personal data we refer to any type of use of your personal data, including collection, registration, assembly, storage and disclosure, or a combination of such methods.

Teston will only process personal data for the purposes stipulated in this privacy policy. Processing of personal data for other purposes than stipulated below normally requires your consent.

Teston collects and uses personal data, including payment details, account settings, and other data (collectively referred to as "customer data") for the following purposes:

  1. Managing our services
  2. Monitoring and improving our services and the functionality of the services
  3. Creating new services, functionality or content
  4. Contacting customers about the service or their respective accounts
  5. Contacting customers to provide information about new functionality in the service or other news related to the service

What personal data we collect

The personal data Teston may collect and process about you includes the following categories:

  1. Personal data provided by you, such as name, email address, payment details and answers to questions and submissions related to the performance of a test, etc.
  2. Personal data collected through your use of the service, including technical information about your device and internet connection. Through server logs and other tools, we collect details about your device and your use of the service, including the version of the software installed at your device, your device's web browser, IP address, cookies, and unique identifier files. Information about your device and your use of the service will often be used in anonymous and aggregated statistics, but we can also combine such information with the information obtained from your account. This allows us to provide you with more customised services, and gives us the opportunity to analyse use of the service.
  3. Cookies and other information gathering methods: Teston uses cookies and other information gathering methods to enhance the user experience and optimize the service. For example, we use cookies to recognise you as a user so you can avoid logging in every time you visit our webpages. Please refer to the section "Using analytics tools, cookies, and other technologies" for more information about our use of cookies.

Personal data may be supplemented with publicly available information from third parties.

How do we use your personal data and what is the legal basis for processing?

Teston processes your personal data in order to enable you to use Teston's services, to improve and further develop these services (including customising and improving them), and to inform you about relevant updates and new features. We also process personal data to provide you with offers and recommendations, to perform analysis to understand market trends, and to try to predict future behaviours. You will find more information about how we process your personal data and the legal basis for the processing below.

Understanding the market trends

We process personal data to develop statistics in order to improve and further develop our websites, as well as to improve our products and services. Such analyses can be made by Teston, or a third party performing analysis on our behalf. The processing of personal data by third parties for such analytical purposes shall be subject to a data processing agreement containing confidentiality requirements, restrictions on use, etc.

The legal basis for processing personal data for this purpose is that processing of personal data is necessary to safeguard Teston's legitimate interests, as described in the GDPR Article 6(1)f. In assessing this necessity, Teston takes into account your interests and fundamental rights of privacy, and will regularly review this assessment to ensure these rights and interests.

Improving the user experience

Your personal data will also be used to improve our services and to enhance the user experience, e.g. by using cookies. As an example, we may monitor whether users with a particular browser are having trouble performing tests, to help us understand how to improve the user interface design for the browser in question, in order to make it easier for users of this browser to take tests in the future. The personal data processed for this purpose will normally be aggregated and anonymised, i.e. the data cannot be used to identify you as an individual. We may also use this type of information to provide support to users experiencing problems using our services, such as technical issues on our website.

To the extent improving users’ experiences involves processing personal data, processing will be based on the protection of Teston's legitimate interests (GDPR Article 6(1)f) and/or to enable you to use Teston's services (GDPR Article 6(1)b).

Managing the service

In order to enable you to use the services, Teston must process certain personal data, including contact information. We use your personal data to manage our services, such as establishing a user account, contacting you about the service or your account, introducing new functionality, or other improvements of the service and to respond to questions or inquiries relating to the service.

We also use personal data to manage tests, such as controlling whether the communication between testers and clients are in accordance with our policies, as well as controlling whether the different tests meet Teston's required quality requirements. The legal basis for processing of personal data for this purpose is enabling you to use Teston's services (GDPR Article 6(1)b). Management of the service that goes beyond the individual agreement is based on Teston's legitimate interest in managing, controlling, and informing about its services (GDPR Article 6(1)f).

Limiting abuse of the service

We use personal data related to user activities and technical data to limit improper use of the service. Improper use includes inter alia scams, spamming, insults and threats, attempting to log into other users' accounts and other actions prohibited by Norwegian law. The basis for this processing is to safeguard the legitimate interests of Teston and third parties, including protecting users of the service from unauthorised access to their personal data (GDPR Article 6(1)(f).

Observe statutory requirements

Processing of personal data may also be required to comply with Teston’s legal obligations (cf. GDPR Article 6(1)c), e.g. if statutory rules related to storage for accounting purposes requires Teston to retain certain types of personal data after the account is deleted.

Disclosure to third parties

Teston may disclose personal data to our clients in order to be able to perform our services. During the performance of a test, the user’s screen, sound, and video (webcam) will for example be recorded and disclosed to the client who has created the relevant test, for the client's internal evaluation and follow-up of the test. Upon completion of a specific test on Teston, testers will therefore be asked to consent to disclosing personal data with the client that created the test in question. Teston will only share the personal data with the client that created the test in question, and the tests are only intended for internal use by the client and relevant personnel at the client, or third parties working on behalf of the client (e.g. consultants). According to the Terms and conditions for clients, the client shall not publish or share such recordings and other personal data generated in a test, or use such personal data for other purposes than mentioned above, without a consent from the relevant user. However, please note that the client can share personal data with suppliers and other third parties performing services on behalf of the client (data processors). Such data processors will only process the personal data for the purpose they were collected, and in order to perform their services towards the client.

Teston may also disclose personal data to third parties if it is necessary to prevent unlawful conduct, violation of Teston's or other users' rights, etc., or if such disclosure is necessary due to legal disputes involving Teston, a client, or a user of the service.

Except as described in this privacy policy, Teston will not disclose, sell, rent, or otherwise exchange our user's personal data with any third party without obtaining your consent, unless such disclosure obligation is imposed by law or binding court order. This does however not prevent us from using data processors that processes personal data on behalf of Teston. Data processors, i.e. suppliers who access your personal data in order to provide services to Teston, are subject to a data processing agreement, and will only use your personal data for the purposes they were collected, and in order to perform their services towards Teston. This may occur when using a third party to make payment transactions or storage of personal data on a web server.

Your rights

You have the right to delete your user account on Teston at any time. In the event that you choose to delete your account, all personal data will be deleted, unless statutory obligations or legitimate interests requires continued storage. In addition, anonymous information, i.e. information that cannot be used to identify you, may still be stored by Teston. If you want to exercise your right to:

  1. Access the personal data we process about you;
  2. change, update, or correct your personal data;
  3. request that your personal data is erased;
  4. request information about your right to restrict or object to processing; or
  5. request information about your right to data portability, i.e. your right to receive and transfer personal data provided to Teston to another data controller;

You can contact Teston at help@teston.io. However, please note that Teston has to process personal data in order to enable you to use our services. Thus, erasure of some or all of your personal data may result in you no longer being able to use Teston’s services. If you want to restrict Teston's storage and processing of personal data beyond what is necessary to provide services that you have ordered, you can do so by contacting help@teston.io.

Retention period

Teston will retain your personal data for as long as it is necessary to fulfil the purposes for processing as defined above. This entails that Teston will normally store your personal data until you delete your account on the Teston platform. Continued storage may however be necessary due to statutory obligations or Teston's legitimate interests. With regard to test recordings, the storage time may vary depending on the type of test, and the payment plan of the client that you have tested for, etc., but Teston will normally not store any test recordings for more than 1 year after they were completed by the user.

In addition, as stated in the above, you are at all times entitled to request that Teston erases your personal data. We may also require continued storage if storage is necessary to safeguard the legitimate interests of Teston or third parties, including the establishment, exercise or defense of, or against, a legal claim.

Usage of analytics tools, cookies and other technology

We continuously work with improving the user experience on our website. Therefore, Teston uses cookies and other information gathering methods to collect different types of information from our users so that we can always provide the best possible functionality. Examples of information we collect include which pages that are visited, when the visit was made and which browser that was used. We also use different types of technology as tools to recognise you as a user and to analyse data about our users. We use these tools because they:

  • are necessary for the services to function properly;
  • make it easier for you to use the services; and
  • allow us to carry out analyses that enable us to develop and improve our services.

By using our services, you consent to Teston's use of such cookies. However, you may at any time detect and disable the cookies by:

  • changing the cookie settings in your browser; or
  • disabling a third-party tool by clicking a link to sign out.

However, if you choose not to accept cookies, you may not get access to all functionality in our services. You can find more information about cookies under the browser's ‘help’ function.

What are cookies?

A cookie is a small text file stored on your PC/mobile phone/tablet that helps us make your visit to our sites more meaningful and positive for you. Cookies can store user settings and information about your use of our website, your browser, and your use of the service, such as which test you have been shown, and similar activities and actions you’ve taken on sites that Teston works with.

There are different types of cookies:

  1. A session-based cookie is only stored in the working memory of your computer (also known as RAM), and it only lasts as long as your browsing session. When you close all open browser windows or turn off the computer completely, the session-based cookie will disappear permanently.
  2. A persistent cookie is stored on the hard drive of your computer until a specific date, which may be tomorrow, next week, or next year. Persistent cookies remain on the machine until they either a) expire, b) are overwritten by new cookies, or c) are manually removed by you.

If you do not want cookies to be stored on your computer, turn off the browser function. Please note that some of our functionality relies on cookies, and without cookies the service may not work as intended.

How do we use cookies?

We use cookies to make our service easier to use and to provide you with relevant information when you visit our site. Cookies are also used to measure traffic on our website, to aggregate statistics and to improve our service. In addition, we may use third-party cookies to measure and analyse the traffic and use of our webpages, track behaviour to build audiences for marketing purposes, simplify ad management, and improve the functionality of our webpages.

The cookies allow us to:

  1. Recognise your device so that we can customise our service and settings based on your expected preferences;
  2. Use special features such as the ability to report back and forth to the client that created the test;
  3. Keep the context as you navigate back and forth between our web pages;
  4. Calculate and report the total number of users and traffic;
  5. Develop and improve our website and understand how it is used;
  6. Build segments and audiences for marketing purposes and manage targeted advertising; and
  7. Reduce advertising that is irrelevant to certain audiences

What about cookies from advertisers and other third parties?

By using our service, advertisers and other third parties will be able to place cookies to measure and analyse the impact on banner advertising. We have established strict guidelines for how such third parties can collect and use personal data about our visitors. Our policy establishes that third parties shall not collect personal data on our website to build profiles, interest groups, or otherwise track behaviour in order to provide targeted ads. Data can only be collected to analyse and measure the impact of advertising, including counting ad impressions, clicks, and conversion. Cookies and other tracking technologies may not be linked to personal data without the explicit consent of the user.

Modifications to the privacy policy

Teston reserves the right to modify this privacy policy from time to time. The current version of the privacy policy will be available on Teston's website at all times. You are encouraged to visit teston.io regularly to keep yourself up to date on our privacy policy. We will notify you if we make changes to the privacy policy that requires your consent, including if we decide to retain or process personal data in another manner than stipulated in this privacy policy. We will notify you by using methods specified in the terms of testers.

The right to lodge a complaint to a supervisory authority

If you believe that our processing of your personal data infringes relevant data protection regulations, you are entitled to lodge a complaint with the supervisory authority where you live or work, at the place of the alleged violation, or to any other relevant supervisory authority.