Privacy statement
22-03-2022
PRIVACY STATEMENT
Last updated: May 2021
This privacy statement is applicable to all visits on our website (www.secretview.io) and our platform (https://platform.secretview.io). By visiting the website and/or the platform, you agree to this statement. Changes in this statement will be valid as soon as they are applied (see Last updated above). When this statement changes, we will publish a notification on the platform.
We, Secret Collect B.V., called “Secret View” hereafter, are responsible for processing personal data as described in this privacy statement. Our contact details are:
Velperplein 23
6811 AH
CoC no.: 62351761
Phone: +31 26 - 20 22 151
E-mail: support@secretview.io
Short version
We value your privacy and strive to protect it. In this privacy statement we’ll explain which personal data is collected and why it is being processed. The (personal) data we process will never be shared with third parties without your explicit prior consent. You’ll find the highlights in this short summary, but we recommend you to read the full version carefully.
We collect all information, including personal data, that you provide us with. Aside from that, we also store technical information like ocokies to make sure you experience on the website and the platform is as comfortable and personal as possible. At the bottom of this statement you will find an overview of the cookies we store. You can change your preferences there. All data is stored in secured servers that are not accessible to unauthorized personnel.
The platform uses several technological mechanisms to automate our processes. This includes automated decision-making on the basis of profile and experience. An example of this is the eligibility of a mystery shopper for a certain assignment.
If you would like to exercise your right to object and/or your right to data portability, or do you have any other questions about our data processing? Please contact us with a specific request at support@secretview.io.
Long version
We process data from the following groups:
- Visitors of our website secretview.io;
- People registered as mystery shoppers with Secret View;
- Contacts of Secret View’s clients.
Below we will outline per group the personal data we process and why we do so.
1. Website visitors
We process visitors’ personal data on our website www.secretview.io by placing cookies and similar technologies such as web beacons.
A cookie is a small text file that is stored in your computer’s browser, tablet or smartphone when you first visit the website. We use functional, analytical and tracking cookies. On your first visit, we’ve informed you of these cookies and asked for your permission to store them in your browser.
Functional cookies
We use cookies with a purely functional purpose. These ensure our website performs as intended and your preferences are saved. We use the following functional cookies:
Description
Tawk.to
Time stored
Cookie(s)
- Tawk_*****
- TawkConnectionTime
- __tawkuuid
Six months
Purpose
Correct functioning of our integrated live chat support.
Description
Authorization & Authentication
Time stored
Cookie(s)
- GlobalAuthorizationCookie
- .SCGlobalSessions
One session
Purpose
Correct functioning of our integrated live chat support.
Description
Data protection
Time stored
Cookie(s)
- .AspNetCore.Antiforgery.****
One session
Purpose
Safely transporting data and validating/authorizing the origin of data.
Description
Application performance
Time stored
Cookie(s)
- ARRAffinity
One session
Purpose
To cope with larger number of visits we use multiple web servers. This cookie connects you to the same web server every time.
Analytical cookies
We try to analyze the behavior of visitors on our website. This way we try to determine our visitors’ interest, maintain and optimize the website’s functionality. That is why we store analytical cookies in your browser.
Using these cookies we collect information about your computer, operating system, browser, statistics on pageviews, traffic to and from the website, location, the referring URL and the IP address.
Google Analytics and Application Insights
In order to analyze the data we use the services of Google Analytics and Application Insights. To that end we have processor agreements with these parties. We guarantee that whenever personal data is processed that data is encrypted. Also, the last eight numbers of the IP address are hidden.
We use the following analytical cookies:
Description
Application Insights
Time stored
Cookie(s)
- ai_session
- ai_user
Session
6 months
Purpose
Tracking performance statistics in order to improve specific pages.
Description
Page performance
Time stored
Cookie(s)
- _hjIncludedInSample
6 months
Purpose
Tracking user activity on pages to improve those pages.
Tracking cookies and third party cookies
We also store cookies that track your behavior on the internet so we can provide you with content and adverts that are relevant to you.
Google Maps
Our website and the platform may use Google Maps. This allows us to display geographical maps and travel directions on websites. To use this service we need to place several cookies to remember your preferences.
Social media
Our website may contain buttons to promote or share (“like”, “tweet”, “share”) content and/or pages to social media such as LinkedIn, Facebook and Twitter. These buttons contain small pieces of code that store cookies we cannot influence. We recommend reading the respective privacy statements of these companies to find out how they process personal data.
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Twitter: https://twitter.com/privacy/
Facebook: http://www.facebook.com/about/privacy/
The information gathered by these parties is anonymized as much as possible. The information is transferred to LinkedIn, Facebook and Twitter and may be stored on servers outside of the European Union.
Cookie preferences
You may edit your cookie preferences so that they are no longer stored on your computer. Please go to the bottom of this text to edit your preferences. Moreover, you can delete all information that has previously been stored by navigating to your browser’s settings.
Without cookies, some parts of the website and platform may not work properly or work at all.
2. Mystery shoppers
When you register as a mystery shopper on our platform, you engage in an agreement with us. To carry out this agreement, i.e. mystery shopping research, it is necessary for us to process some of your personal data. We’ll sum up the data we process:
- Name
- Sex
- Date of birth
- Place of birth
- Address
- Phone number
- E-mail address
- Other data that is actively provided by creating a profile, in writing or by phone
- Personal interests
- Location details
- Banking details
- Financial remunerations
Without these details we are unable to hold our part of the agreement. In order to fulfill our legal and societal duties we will process data in the event of (suspected) cases of illegal activities by members of our mystery shopper community and provide them to authorities.
Why do we process personal data?
We process your personal data to:
- Allow you to create an online account
- Assign one or more mystery shopping assignments to you
- Communicate with you in relation to the assignments
- Handle payments
- Verify your age when you apply for an age-related assignment that legally requires us to verify your age (e.g. alcohol and tobacco sales compliance research)
- Analyze user behavior on our website and platform to improve our online tools and to adapt our services to your preferences
- Follow up on complaints and questions
- Carry out legal duties or court rulings, such as providing data for tax returns
- Preventing misuse and abuse
What else do we do with your data?
To make your experience as a mystery shopper as good as possible, your data is saved in your online account. This way you won’t need to enter your data over and over again.
Community Approval
The results from our researches go through a quality control before they are validated and sent to our clients. This approval process is carried out by Secret View employees, but also by other members of the community (mystery shoppers). Community members with this capacity are called Community Approvers and are carefully selected by us. Therefore it is possible that another community member gets to view the questionnaire you send in. We take every possible step to decrease the chance a Community Approver gets insight into personal data. Your questionnaire is anonymized and there is a blackout tool that can be used to blur out certain sections. However, you are personally responsible for the information you provide textually in your answers about yourself or other people in describing certain situations. The Community Approver has the ability to edit and/or improve the answers you provide.
Automated decision-making
Using automated decision-making processes allows us to more efficiently handle large numbers of (mystery shopping) assignments. These automated processes may have consequences for registered community members regarding planning and/or carrying out assignments. The processes lead to decision made by computer programs or systems without human (i.e. a Secret View employee) interference/involvement.
We use the following computer programs and systems:
Name:
Self-developed software
Why do we use it?
The software we develop in-house is used to make carrying out (mystery shopping) research and insights into its results as efficient and user-friendly as possible.
What automated process take place in the software?
The following processes may be (to some extent) automated:
- Profile and account management
- Insight into all (mystery shopping) assignments
- Selection of mystery shoppers
- Insight into assignment status
- Information supply for assignments
- Handling payments
To make the transition period from manual to automated processes as smooth as possible, every automation (process, decision-making, specific actions) are first rolled out in phases. The automated process, decision or action will first be shown to the employee and/or user, who will manually have to confirm the event. Only when we are sure the automation works as intended at all times, we will allow the automation to take place without human interference. Using this method, we make sure users will not notice the transition from manual to automation – except for the efficiency and user-friendliness increases.
As a mystery shopper/community member, you have the right to voice your opinion with regards to an automated decision that involves you, and to object to this decision. If you do not agree with an automated decision, please feel free to contact us. An employee will manually review the decision. By agreeing to carry out mystery shopping assignments (and our Terms & Conditions and this Privacy Policy), you explicitly agree with the use of automated decision-making processes in our platform.
How long do we store personal data?
We do not store your data any longer than is strictly necessary to achieve the goals they are collected for. Moreover, you can delete your account if you wish to do so, unless there is still an assignment to be carried out in that you are scheduled for.
If you exercise this right to be forgotten, your profile we be deleted from our platform immediately. All other personal data will be deleted after sending a request by e-mail to mysteryshoppen@secretview.io. All personal data will be deleted within the space of two months, unless the data is required to comply with government regulations. With regards to the latter, we maintain a seven year storage period.
3. Client contacts
When we engage in a contract with a new client, we process personal data of the contacts of that client. Both Secret View and the client have a legitimate interest in processing this data because it allows the research(es) to be carried out and the client to use the results to their benefit.
The summary below also applies to those contacts who are themselves (co-)owner of the business we have a contract with.
To that end, we process the following data:
- Name
- Company name
- Phone number
- E-mail address
- Other data that is actively provided by creating a profile, in writing or by phone
Why do we process personal data?
We process your personal data to:
- Being able to reach an agreement with the client
- Communicate with the client(‘s contacts) with regards to the agreement
- Handle payments
- Analyze user behavior on our website and platform to improve our online tools and to adapt our services to your preferences
- Follow up on complaints and questions
- Carry out legal duties or court rulings, such as providing data for tax returns
How long do we store personal data?
We do not store your data any longer than is strictly necessary to achieve the goals they are collected for.
If you exercise your right to be forgotten, your profile we be deleted from our platform immediately. All other personal data will be deleted after sending a request by e-mail to support@secretview.io. Once an agreement with a client ends, all personal data will be deleted within the space of three months, unless the data is required to comply with government regulations. With regards to the latter, we maintain a seven year storage period.
4. All users
The following information is applicable to all users in mentioned above.
Sharing data with third parties
We never sell personal data to third parties. We will only supply these if it is required to do so in order to carry out the agreement made with the user or to adhere to legal regulations or court rulings. Some parties do receive your personal data and we always sign a processor agreement with these parties to ensure a high standard of protection and confidentiality with regards to your data. We remain responsible for any processing of the data.
The companies we have processor agreements with are:
Styb
Address
Muraltplein 49
7271 AV Borculo
Description
Styb is Secret View’s partner in financial administration and accountancy. They help us to process all payments to mystery shoppers. They receive the following data:
- Address
- Bank details
When do they receive this data?
Only once an actual payment to a person is scheduled, Styb receives these details.
Microsoft
Address
Evert van de Beekstraat 354
1118 CZ Schiphol
Description
Microsoft is Secret View’s partner for all data hosting. Microsoft receives the following data (encrypted):
- Name
- Sex
- Date of birth
- Address
- Phone number
- E-mail address
- Other data that is actively provided by creating a profile, in writing or by phone
- Personal interests
- Location details
- Bank details
- Payment history
When do they receive this data?
Microsoft receives this data on a continuous basis in order to store the data safely. The data is encrypted and therefore not accessible to Microsoft.
CM.com
Address
Konijnenberg 30
4825 BD Breda
Description
CM.com is Secret View’s partner in communication with community members through WhatsApp. CM.com receives the following data:
- Name
- Phone number
When do they receive this data?
When a registered community member actively agrees to being contacted through WhatsApp in their profile on our platform, this data may be used to contact them through WhatsApp.
Mollie B.V.
Address
Keizersgracht 313
11016 EE Amsterdam
Description
Mollie is Secret View’s partner for return payments (unused moneys/cancelled assignments/etc.) from community members to Secret View. Mollie receives the following data:
- Address
- Banking details
When do they receive this data?
In some cases, community members may need to return an amount of money to Secret View due to cancellations, surpluses after assignments, etc. Please find all information on return payments in our Terms & Conditions.
Links
There may be links in Secret View’s communication channels that we are not owned by us. We are not responsible for the content and privacy protection of the websites behind those links. We strongly advise to read the respective website’s privacy policy.
Your rights
You have the right to get insight into your personal data, but also to edit and to delete it. You are free to do so through the personal settings in your account on our platform. Moreover, you have the right to retract your permission to process your personal data or to object to our processing of your data. Also, you have the right to data portability. That means you can ask us to transfer your data in a common format to another organization of your choosing.
Should you like to exercise one or more of these rights, please send us a copy of your ID with your specified request by e-mail to mysteryshoppen@secretview.io. Please do blur out your photo, MRZ (machine readable zone), ID card no., and social service number to protect your privacy.
We will try to respond as quickly as possible, but within four weeks at the most. We would also like to point out the option of issuing a complaint with the Dutch national authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) through the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.
How we protect personal data
We take the protection of your personal data very seriously and take fitting measures to prevent and counter abuse, loss, unauthorized access, unwanted publication and illicit editing of the data.
Please find the most important measures below:
- Keeping the online infrastructure updated
- Use of security groups
- Data encryption
- Segmented insight into data
- Use of HTTPS in both external and internal communication
- Database back-ups
- GIT combined with CI/CD for efficient patch management continuation
- Stimulating privacy protection awareness with employees
- Testing, rating and evaluating procedures for protective measures
- Protocol formulation in case of data leaks or security incidents
- Confidentiality agreements
- Processor agreements
- Minimizing contact with personal data
- Keeping track of all data processing activities
- Maintaining a data vault
- Minimizing reception of personal data by clients
Should you feel your data is not properly protected or there are signs of abuse/misuse of your data, please contact our team at mysteryshopping@secretview.io.