Revised: July 2019
Human Made Machine is a service offered to companies (Clients) who place online advertising to help them determine how effective their ads are. Human Made Machine run studies whereby we employ groups of people to take a survey, to measure the impact advertisements have on them.
We automatically collect information regarding the actions you take on the Site and when you access or use the Services (Usage Data). For example, each time you use the Site we automatically collect the type of web browser you use, your operating system, your Internet Service Provider, your IP address, your mobile device ID, the pages you view, and the time and duration of your visits to the Site. We use this information to help us understand how people use the Site and Services, and to enhance the services we offer.
Human Made Machine provide Clients access to their Study data through our secure online dashboards. In order to securely manage and limit data access to Client dashboards we use email authentication. Human Made Machine will not itself, nor allow third-party companies, to use email addresses for any other purpose. Email addresses are stored on our secure servers. You can opt out of us holding your email address as detailed below, however, this service will no longer be accessible.
We maintain physical, electronic, and procedural safeguards to protect the confidentiality and security of information transmitted to us. We take all reasonable measures to secure any personal data we collect and prevent unauthorised access. This information is stored on secure servers located in Iowa, USA, in a Google Cloud data-centre, whom comply with GDPR and have ISO certification for 27001 (Information Security Management), 27017 (Cloud Security), and 27018 (Cloud Privacy). Access is limited to employees, contractors and site service providers who follow aligned standards of security and confidentiality.
We store data in your cookies for a maximum of 12-months. You can also delete cookies through your browser settings as detailed in the ‘Opting out’ section of this policy.
We limit the storage of IP address for a maximum period of 12 months. You can also request we delete or anonymise your IP as detailed in the ‘Your rights’ section of this policy.
If you would like to remove our ability to identify you as someone who has visited the Site you can delete your cookies through your browser settings. More information on how you can manage and delete your cookies.
If you would like to remove your email address from our server you can email email@example.com.
You have certain rights in relation to the personal data that we hold about you, which are designed to give you more choice and control over your personal data:
You have the right to request access to personal data. You can request a copy of the data we hold about you and related information.
Under certain circumstances you have the right to request rectification of personal data. You can ask us to correct any inaccurate data about you and to complete any incomplete data that we hold about you.
Under certain circumstances you have the right to request erasure or anonymisation of personal data we hold about you.
Under certain circumstances, you have the right to request a restriction on processing of the personal data.
The right to data portability, such as receiving a copy of your personal data in a structured and machine-readable format.
When handling your data, we pursue the following legitimate interests:
Protecting against misuse
Improving our service
The following legal provisions apply to the handling of your data:
With regard to data collected when using features of the Site and Services, with your consent, Art. 6(1) (a) GDPR
With regard to Services you use for the performance of a contract , Art. 6(1)(b) GDPR
Otherwise, with particular regard to statistical data and online identifiers based on legitimate interests, Art 6(1)(f) GDPR
Our services are not developed for or directed towards children under the age of 18. We do not knowingly collect data relating to minors or work with 3rd parties whose services are directed towards children. If a person whom we know is under 18 years of age sends us personal data, we will delete this information as soon as reasonably possible.