Be visual, make them shop local

Digital signage and data analysis.

Privacy Case

 

Privacy case


This is an overview of how we handle personal data collected by Bumbee Labs during visitor flow surveys, as well as how we manage personal information of clients and other stakeholders, in compliance with the GDPR.

The personal information we process is handled on servers in Europe.

Bumbee Labs complies with the decision of the Data Inspectorate on how to adjust the visitor flow system to be in line with the Personal Data Act and the GDPR.

According to the decision of the Data Inspection of October 30, 2015 (file 1702-2015), the measures taken were sufficient to overcome the deficiencies in processing personal data by the company using the IOPS system, as stated by the Data Inspectorate in its decision of June 22, 2015 (file 2729-2014).

Bumbee Labs conducts surveys on visitor statistics in various public environments. The goal is to provide stakeholders with a better understanding of unidentified visitor flows so they can take appropriate measures for the development of these public environments. The survey is conducted by anonymously registering Wi-Fi signals from mobile phones and computers.

The Bumbee Labs system is designed so that the movements of individuals cannot be mapped. The MAC addresses collected and attributable to mobile phones or similar equipment of individuals are irrevocably deleted immediately after the registration necessary to obtain statistics on the number of people passing at a given location.

Only unidentified statistical information remains, such as the number of passages at a specific geographical location and so-called "heat maps." Bumbee Labs has also installed various types of signs informing visitors in the area about the visitor survey. If the visitor flow survey is conducted without the prior consent of the visitor, no other personal data is collected.

If it is done with the active consent of the visitor, the MAC address is stored for a maximum of 6 months after approval and then automatically deleted after 6 months. Other information that may be requested at the initiative of the client, such as email address, first and last name, and address, can be stored for a maximum of 6 months and then automatically deleted.

For clients, potential clients, partners, suppliers, and shareholders, the following personal data may be stored: name, position, organization number, VAT number, delivery address, billing address, email address, and phone number.

The purpose of storing this personal data is to inform about the progress of our business and, if necessary, enable us to fulfill our obligations. Personal data is manually deleted by Bumbee Labs staff after notification from the owner of the personal data