1. What are cookies?

Apps and websites use cookies and/or similar technologies that store and retrieve information from your device when you use the app or visit a website. In general, these technologies can serve very diverse purposes, such as, for example, recognizing you as a user, obtaining information about your browsing habits, or personalizing the way content is displayed.
 

2. Cookies we are using

You are using an app provided by Sarton Group (the “app”). We, Inter IKEA Systems B.V. (“IKEA”), are providing functionality (“Studio SDK”) to Sarton Group which is imbedded in the app. In order to improve the functionality we provide, we want to know more about how you use the app and what happens when the app is crashing. This will help us improve the app. Therefore we are using crash and event analytics (“analytics SDK”) within the Studio SDK, which are similar technologies to cookies. Mixpanel is collecting analytics data for the purpose of measuring user engagement and Microsoft App Center is collecting diagnostic data for the purpose of crash tracking and reporting.
You have provided your consent for the use of cookies and/or similar technologies for the above-mentioned purposes. If you want to withdraw your consent the app allows you to withdraw your consent.
 

3. What information we collect and why

When you download, install, and use our application, the analytics SDK will be downloaded to your mobile device. With these SDKs we collect certain information on how you interact with the app, which is considered personal data. We are responsible for processing your personal data (controller) in accordance with applicable privacy laws. We process this personal data because we have a legitimate interest to improve the functionality of this app. The information is only used internally for development purposes as described in the following table:
 
Name Describe
Microsoft App Center This analytics SDK is used to analyse what happens when the app crashes. Therefore we collect the following information from your device:
Common data:
• Application Secret (App-Secret) A unique key used to identify the application.
• Installation Identifier (Install-ID). Each installation of an app with an App Center SDK results in a new, unique installation identifier. This ID is used to differentiate data from unique devices. App Center services require the ID to function properly.
• Timestamp (timestamp) Log timestamp, example: '2017-03-13T18:05:42Z'
• Session Identifier (SID) Analytics logs can be part of the same session by specifying this identifier.
• User Identifier (userId) An optional string used for associating logs with users.
• Model (model) The device model (example: iPad2,3)
• OEM Name (oemName) The name of the device manufacturer (example: HTC)
• Operating System Name, version and build code and APT Level
• Language and Country Code (locale) ISO language and country code (example: en-US)
• Time Zone Offset (timeZoneOffset)
• Screen Size (screenSize)
• Application Version
• Carrier Name (carrierName) The name of the cell service provider
• Carrier Country (carrierCountry) The country of the cell service provider
• Application Build (appBuild) The app's build number (example: 42)
• Application Namespace (appNamespace) The bundle identifier, package identifier, or namespace, depending on what the individual platform uses (example: com.microsoft.example).
• Live Update Release Label (liveUpdateReleaseLabel) The label that's used to identify the application code 'version' released via the Live Update beacon running on the device.
• Live Update Deployment Key (liveUpdateDeploymentKey) The identifier of the environment that current application release belongs to, deployment key then maps to environment like Production, Staging.
• Live Update Package Hash (liveUpdatePackageHash) A hash of all files (ReactNative or Cordova) deployed to device via LiveUpdate beacon. Helps identify the Release version on the device or need to download updates in future.
• Runtime Wrapper Version (wrapperRuntimeVersion) The version of the wrapper technology framework (Xamarin runtime version, ReactNative, Cordova, and so on). See wrappersdkname to see if this version refers to Xamarin or ReactNative or other.
• Jailbreak (jailbreak) A flag indicating if the device has been jailbroken.
Diagnostic data:
• Crash and error logs. This data includes the ID and name of processes, threads, frames, related to the crash and the exception type and message and device data as defined in the Common Data section.
• Crash attachments. These attachments are binary or text files that developers can optionally attach to a crash report
• Custom properties. These custom key value pairs can optionally be specified to add additional context to their error reports
• Crash and error User ID. This unique identifier is to attach specific user’s identification to crash reports
• Symbol files. These symbol files are provided symbolicate crashes
Mixpanel This analytics SDK is used for the purpose of measuring user engagement. Therefore we collect the following information from your device:
• API Endpoint: Mixpanel API endpoint
• API Timestamp: Time in milliseconds in Unix Processing Time when an event was received by our API
• App Build Number: General build of the app
• App Version: Current app version
• Carrier: Wireless carrier of the device owner
• City: The city of the event sender parsed from the IP property or the Latitude and Longitude properties.
• Country: The country of the event sender parsed from the IP property or the Latitude and Longitude properties.
• Device ID: A default Mixpanel property to track the device as determined by Mixpanel's client-side SDKs. Events tracked from the same device and same user but different applications may not have the same Device ID
• Distinct ID: A unique identifier that is connected to every event as an event property
• Had Persisted Distinct Id: True or false
• Insert ID: A random 36 character string of alphanumeric characters that is unique to an event.
• Library Version: Mixpanel Library that sent the event.
• Manufacturer: Device manufacturer
• Mixpanel Library: Mixpanel Library that sent the event.
• Model: Device model
• OS: OS of the event sender
• OS Version: Current version OS on the device
• Radio: Current cellular network communication standard (3G, 4G, etc.)
• Region: The region (state or province) of the event sender parsed from the IP property or the Latitude and Longitude properties.
• Screen Height: The height of the device screen in pixels
• Screen Width: The width of the device screen in pixels
• Time Processed (UTC): Time in milliseconds in Unix Processing Time when an event was ingested by Mixpanel
• Wifi: Set to true if user’s device has an active, available Wifi connection, false if not.
Custom Events with your activity information may include:
• Logging privacy policy
• Placement of recommended items
• Chosen measurement units
• Tracking specific guided project interactions
• If LiDAR has been enabled or not
• Tracking the amount of measurements in a room
• Tracking the amount of wall anchors in the room
• Tracking the amount of items in a room
• Tracking the furniture category interactions
• Tracking the specific item interactions
• Tracking the specific items added to shopping card and/or wish list
• Tracking currency information
• Tracking the guided project interaction
• Tracking feedback information

The data collected with the analytics SDK will be retained for 6 months.
We will not use data collected for any purposes other than those described in this policy. You can clear all cookies and similar technology saved on your phone by deleting the app.
 

4. How we keep your personal information safe

We protect your information from all kinds of threats: destruction, loss, alteration, unauthorised disclosure or access. We do this in a variety of ways depending on where we store and use it. Here are some things we do to keep your personal information safe:
Security
Encryption of data;
The use of:
• firewalls and secure servers;
• passwords and (if necessary) extra tokens;
• hashing techniques;
• logging of systems;
• a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing;
The ability to ensure:
• the ongoing confidentiality, integrity, availability and resilience of our organisation and systems that process your data;
• that availability and access to Personal Data can be restored in a timely manner in the event of a physical or technical incident;
Pseudonymisation / anonymisation of data where possible.
International transfers
We are a part of a global group of companies, and we have service providers and business partners in many parts of the world. If you are a user outside of the European Economic Area (EEA), the information mentioned in section 3 will be transferred and stored in European Union (EU)/EEA.
In some cases, we might have to transfer your information to one of these companies located outside the European Economic Area. If we need to transfer data outside of the EEA, we will only do so if this is possible from a legal and regulatory standpoint. We rely on so-called adequacy decisions from the EU. This means that the EU believes a country’s own laws or agreements provide adequate protection for your personal data. If there is no adequacy decision from the European Union for a country, we rely on the Standard Contractual Clauses with the specific external party.
The data collected with the SDK Microsoft App Center will also be transferred to and stored in the United States. We have concluded standard contractual clauses with Microsoft.
 

5. Your privacy rights

You have many rights regarding your personal information. Read more about them below. If you would like to exercise them or learn more, feel free to contact us! You can find contact details at the end of this statement. Please note that some of the rights may not be applicable to your situation.
Right of access
You have the right to know what personal information we process and why. That’s why we inform you in advance about our processing activities via this statement. If you have any questions, or you would like to learn more about what information we process from you, you are always welcome to contact us, and we will provide you with further information.
Right to rectification
If you believe we store wrong information about you, such as your name or address, you can ask us to correct this.
Right to erasure / right to be forgotten
You have the right to tell us to permanently erase your personal information from our records. You can do this, for example, if you believe there’s no longer any need for us to keep it. Or, if you previously have given your permission, you can just decide to withdraw it.
Right to restrict the processing activities
You have the right to restrict our processing activities in certain situations. This means we will continue to store your information, but we’ll temporarily stop any other processing. Why would you want to do this? For example, if you’ve asked us to fix incorrect information. In this situation you may want us to stop processing until the information is correct.
Right to object
You have the right to object to the processing of your information, even when we have a legitimate legal reason to process it. You can do this when we process your information on the basis of our legitimate interest, and you believe that your personal interest outweighs ours.
Right to withdraw consent
If we process your personal information based on your consent, you have the right to withdraw your consent anytime.
Right to lodge a complaint with a supervisory authority
If you aren’t satisfied with the way we treat your personal information, you have the right to lodge a complaint about us with the national supervisory authority.
 

6. Who to contact?

If you have any questions, comments or suggestions about our privacy statement or practices, if you want to exercise any of your rights in relation to our processing of your information, you want information on the used standard contractual clauses or if you consider that our processing of your information impairs your lawful interests and rights, please , please feel free to get in touch. You can contact us at: isdp.dsar@inter.ikea.com.
Inter IKEA Systems B.V.
Olof Palmestraat 1
2616 LN Delft
The Netherlands