IKEA Place 2.0 Data Privacy Policy
We, Inter IKEA Systems B.V (“IKEA”), are responsible for processing your information with the IKEA Place 2.0 App (the “App”). The IKEA vision is to create a better everyday life for the many people. That’s a big job, and one we at Inter IKEA Systems B.V. take seriously.
Who are the many people? You are! Whether you’re an IKEA customer, co-worker or business partner, the IKEA vision is all about you. So naturally we want to get to know you better. One way we do that is by collecting your personal information. If you’re reading this, you’re probably curious what information we collect and how we use it. Read on to find out.
If you have any questions, comments or suggestions, please contact person in charge of personal information protection through the following contact information:
E-mail: [email protected]
1. How we respect your privacy
Our approach at Inter IKEA Systems B.V. is to be as open and transparent as possible about how we collect and use your information.
First, we let you know exactly what information we collect, who it is shared with and why. You can read all about that in the next section.
Secondly, we protect your information and let you know how long we keep it.
Finally, we let you know your rights and choices when it comes to your personal information, including who to contact if you have questions or requests.
2. What information we collect and why
We want to make your IKEA experience great! To do that we collect several types of information about you. We process this personal data to fulfil our contractual obligations and provide the service to you, and based on your consent to collect data in order to improve the functionality of this App. The purpose of the data is to increase the performance of the App from a technical and user experience point of view. We do not collect any data for targeted marketing purposes, and we do not store any data that allows us to identify you as a natural physical person online or offline.
Technology for Collecting Usage data
When you perform a visual search, you capture a photo of the piece of furniture you are searching for. That photo we collect for processing, to identify and return to you the most similar piece of furniture from the IKEA product range. When the processing is done, the photo is deleted within four hours. The App’s Visual Search provider is Nyris.
Technology for Collecting Usage data
To ensure the normal operation of the App, we will install data tracking software
on your mobile phone (also known as Analytics and Crashlytics SDKs). With the
help of this software, the App can store information about how and when you use
the App and how the App performs, we only install the tracking software after
you have provided your consent to do that.
In case you provided your consent for this, we collect certain
information on how you interact with the App using Mixpanel and Microsoft App
Center. The purpose of the data tracking and logging is strictly internal and
we (Inter IKEA Systems B.V.) do not share any data with any 3rd parties.
Analytics and Crashlytics SDKs
When you download & install IKEA Place 2.0, we will also install Mixpanel and Microsoft App Center SDKs onto your phone. Given you provide explicit consent for the use, these SDKs will collect your personal data as described throughout this document. We briefly describe these technologies below:
Mixpanel
Purpose and description:
With Mixpanel we can analyse how the App is used to optimise the App user experience and functionalities. We collect your city, region and country, but not your precise location. We analyse data related to App lifecycle events (opening and closure App, screen views, sessions etc.), the duration of visits, the App usage frequency, the order in which you visit pages, iOS versions, unique App installation ID, various settings and configurations of the App and your phone, and similar information. The information we collect helps us make the App better and more user-friendly.
With Mixpanel we do not transfer or store any information that can be used to identify you as a natural/physical person such name, email, aliases, precise address or IP address or MAC address or any similar identifiers. As such the data is, for all intents and purposes (pseudo)anonymised.
With Mixpanel there is a risk that data is transferred outside of the EU to other jurisdictions. Your personal data is not protected outside EU at the same level as within the EU. It is therefore a risk that your rights may be violated. We strive to limit this risk by configuring the storage of data to be inside the EU as well as -as mentioned above- (pseudo)anonymising your data.
Lifetime:
Mixpanel is active if the App is being used by you. A typical IKEA Place 2.0 usage session last less than 4 minutes.
Microsoft App Center
Purpose and description:
Microsoft App Center is used to collect when and how IKEA Place 2.0 crashes or simply put: How and when the App stops working. This data is only used to improve the quality of IKEA Place 2.0 by analysing and resolving bugs or defects in the App. Microsoft App Center will, alongside, and combined with, the crash reports, store information about your phone settings and configuration and technical details about the crash event.
With Microsoft App Center we do not transfer or store any information that can be used to identify you as a natural/physical person such name, email, aliases, precise address or IP address or MAC address or any similar personal identifiers. As such the data is - for all intents and purposes - (pseudo)anonymized.
Using Microsoft App Center your data is transferred outside of the EU to the US. Your personal data is not protected outside EU at the same level as within the EU. It is therefore a risk that your rights may be violated. We strive to limit this risk by - as mentioned above - (pseudo)anonymising your data.
Lifetime:
Microsoft App Center is live as long as the App is in use. A typical IKEA Place 2.0 usage session last less than 4 minutes.
We will not use data collected for any purposes other than those described in this policy. You can at any time revoke your consent in the App settings. You will find this under your profile and settings. Deleting the App will also remove the data tracking software.
3. How we keep your personal information safe
We protect your information from all kinds of threats: destruction, loss, alteration, unauthorised disclosure or access. We do this in a variety of ways depending on where we store and use it. Here are some things we do to keep your personal information safe:
Security
- Encryption of data;
- The use of:
- firewalls and secure servers;
- passwords and (if necessary) extra tokens;
- hashing techniques;
- logging of systems;
- a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing;
- The ability to ensure:
- the ongoing confidentiality, integrity, availability and resilience of our organisation and systems that process your data;
- that availability and access to Personal Data can be restored in a timely manner in the event of a physical or technical incident;
- Pseudonymisation / anonymisation of data where possible.
International transfers
We are a part of a global group of companies, and we have service providers and business partners in many parts of the world. If you are a user outside of the European Economic Area (EEA), your Photo of the piece of furniture will be transferred and stored in the European Union (EU)/EEA.
In some cases, we might have to transfer your information to one of these companies located outside the EEA. If we need to transfer data outside of the EEA, we will only do so if this is possible from a legal and regulatory standpoint. For example, we rely on so-called adequacy decisions from the EU.
This means that the EU believes a country’s own laws or agreements provide adequate protection for your personal data. If there is no adequacy decision from
the EU for a country, we rely on the EU Standard Contractual Clauses with the specific external party.
We don’t store your personal information longer than necessary. We might store your information longer than stated above if it is necessary because of legal requirements.
4. Your privacy rights
You have many rights regarding your personal information. Read more about them below. If you would like to exercise them or learn more, feel free to contact us! You can find contact details at the end of this statement. Please note that some of the rights may not be applicable to your situation.
Right of access
You have the right to know what personal information we process and why. That’s why we inform you in advance about our processing activities via this statement. If you have any questions, or you would like to learn more about what information we process from you, you are always welcome to contact us, and we will provide you with further information.
Right to rectification
If you believe we store wrong information about you, such as your name or address, you can ask us to correct this.
Right to erasure / right to be forgotten
You have the right to tell us to permanently erase your personal information from our records. You can do this, for example, if you believe there’s no longer any need for us to keep it. Or, if you previously have given your permission, you can just decide to withdraw it.
Right to restrict the processing activities
You have the right to restrict our processing activities in certain situations.
This means we will continue to store your information, but we’ll temporarily
stop any other processing. Why would you want to do this? For example, if
you’ve asked us to fix incorrect information. In this situation you may want us
to stop processing until the information is correct.
Right to object
You have the right to object to the processing of your information, even when we have a legitimate legal reason to process it. You can do this when we process your information on the basis of our legitimate interest, and you believe that your personal interest outweighs ours.
Right to withdraw consent
If we process your personal information based on your consent, you have the right to withdraw your consent anytime.
Right to lodge a complaint with a supervisory authority
If you aren’t satisfied with the way we treat your personal information,
you have the right to lodge a complaint about us with the national supervisory
authority. However, we would prefer you to try to solve the problem with us
before you submit the complaint to the supervisory authority.
If you have any questions or concerns about the above rights, please
contact us:
E-mail: isdp.dsar@inter.ikea.com
Effective time of this statement
This statement shall enter into force on 2023-06-19.