"We", "us", or "the Client" act as "data controllers" in the deployment and use of Seal Metrics ("the Product"). ESFERA MARKETING SL acts as "data processor".
We have control over what we use the Product for, as well as its implementation and configuration in our business. Our use of the Product is covered by its Terms of Use, as well as by the Data Processing Agreement in place between us and the data processor.
This Data Protection Impact Assessment ("DPIA") covers our use of the Product, including identified foundational risks, mitigations, security provisions, and rights considerations.
These are the specific personal data points involved in the processing:
Customer data and traffic data pertain to website visitors, while diagnostic data is obtained from our own personnel in charge of deploying, running, or using the Product.
The data processor is the recipient of this data, sharing it only with the identified subprocessors in charge of maintaining the infrastructure the Product is running on. No international data transfers take place, and data is retained for a maximum of five years and deleted within three months after the expiration or cancellation of the underlying contract.
We rely on legitimate interest to process this data. Our legitimate interest is the measurement and optimization of our digital assets, the interactive services offered to our customers, and the general experience provided to all users.
Event data is collected through a pixel embedded in our website's HTML header. This pixel will make a secure HTTP call to the data processor's system, in turn passing along the information subject to processing.
This data is stored in the servers of Ireland-based Noraina Ltd.
We are able to dispose of the data through an option provided in the Product's administration interface, as well as through a specific request to the data processor's customer service representatives.
We have completed a Legitimate Interest Assessment, balancing our stated legitimate interest with the individuals fundamental rights and freedoms at stake, concluding that the risks of harm to the latter do not outweigh the former.
More specifically:
Even in the case of a hypothetical data breach, no substantial risk is posed by the storage and processing of website events, clicks, or sources of traffic in the generic and aggregated manner offered by the Product. Its capabilities have purposely been curtailed vis-a-vis more traditional web analytics tools (such as Google Analytics or Adobe Analytics) as a specific and conscientious step to embracing Privacy by Design principles.
We are satisfied that the data being collected is accurate to the best of our understanding, and we are certain that this will in any case depend on our own ability to properly configure its associated tags and pixels.
We have done everything we can to minimize the personal data we are processing. Automated retention and disposal are enabled through Seal Metrics.
Where will the personal data be stored? In the servers provided by Noraina Ltd (Ireland).
Are there appropriate access controls to keep the personal data secure? Yes.
Have we had access to a security assessment of the data architecture in use? Yes.
Have we provided enough internal training to understand the implications of all configuration and administration options provided by the data processor? Yes.
Since there is no direct link between the events being collected and each specific individual, and given that not even first party cookies are provided as a link across multiple user sessions, rights of access or rectification cannot be provided in the absence of additional data collection efforts. We do not believe that such features justify the new purpose. The same applies to the right of erasure or the restriction of data processing.
While a right to data portability does not arise from the chosen legal basis (legitimate interest), individuals may object to the processing of traffic sources and other campaign parameters by employing a web browser that automatically discards such variables, or else through the manual removal of their associated values on their initial access to our website.
We can anticipate the following risks, risk scores, responses, and mitigation measures: