COGNITIVEVR INC. dba Cognitive3D, its parents, subsidiaries and affiliates, (“Cognitive3D”, “we”, or “our”) operates a cloud-based platform for data collection, visualization and analytics tools for measuring human behavior within 3D based content which may be accessed either through an SDK and/or web application (the “Platform”).
1. HOW WE OBTAIN PERSONAL DATA
The Service involves the collection and processing of your personal and Platform related data, which is information about you or that identifies you.
Subject to legal, contractual and technical requirements, you may choose not to provide Cognitive3D with certain data or request the deletion of certain data, which may impact the essential operation of the Service.
2. PERSONAL DATA WE COLLECT
We collect certain personal data when you begin using the Service as controlled by our Customers. The following is a description of the personal data that we may collect, use and process on behalf of our Customers:
a) Asset Preparation Data: To avoid Customers streaming 3D information in every user session, we collect assets on behalf of the Customer during SDK setup which can include 3D scene geometry, including meshes, materials, textures, lighting information, skins, animations and a user-selected screenshot – including the base/static scene, and any dynamic objects selected by our Customers. Some of this information can contain unstructured personal data.
(collectively the “Asset Data”);
b) User Data: User data will include references to Asset Data as well as additional data gleaned from the operation of the Platform. User Data includes IP addresses which is used to identify geographic location, data on how users move their controllers or hands, how users move their head which is also used to infer gaze, where users look and fixate with their eyes, how users look through/move through 3D space and occasionally biometric data as configured by our Customer such as cognitive load, sampled heart rate data, pupillometry or other sensors as equipped by our Customer.
(collectively the “User Data”);
c) your name, email and details of any communications when you contact us directly; and
d) behavioral tracking data when you interact with our Website or Platform.
User Data and some Asset Data may be classified as “Biometric Data” or some similar terms in applicable biometric privacy legislation and thus has special protections with regards to its collection, retention and security. Cognitive3D shall comply with all applicable biometric privacy legislation, including any verification of consent gathering procedures applicable to our Customers.
3. PERSONAL DATA WE DO NOT COLLECT
We do not collect the following data and our Customers are prohibited from sending us the following data:
a) information under regulatory or contractual handling requirements (e.g., Payment Card Industry Data Security Standards), including, but without limitation, financial account numbers, debit or credit card information, magnetic stripe data, or card verification values;
b) government issued personal identifiers, including, but without limitation, driver’s license numbers, passport numbers, or other state issued identification numbers;
c) certain bio-metric identifiers, including genetic data, iris scans, thumb or finger prints or health data;
d) personally identifiable information collected from children under the age of 13 or from online services directed toward children;
e) real time geo-location data which can track or identify an individual’s precise movements;
f) passwords, authentication/authorization credentials, business secrets deemed highly confidential (e.g., highly-confidential business strategies and communications, sensitive attorney-client privileged and confidential communications);
g) export-controlled information for which Customer has not obtained all required export licenses or government approvals; or
h) other information the unauthorized disclosure of which could cause material, severe, or catastrophic harm or impact to any data subjects or third parties.
4. PROCESSING OF YOUR PERSONAL DATA
We process your personal data for our legitimate business purposes, such as providing the Service to our Customers, to understand your needs and the needs of our Customers and to improve the quality of the Service and analyze the data we collect. Specifically, these uses include but are not limited to:
- providing the Service to our Customers, including altering the Service as needed to provide a better experience to you and our Customers;
- creating anonymized reports on Platform activities including use patterns and comfort ratings (analyzing the ease of use of the Consumer’s service/product);
- maintaining and analyzing functionality of the Service, backing up data or testing and researching new features of the Service;
- processing of anonymized data as part of machine learning activities;
- using cookies and third-party data website, email and analytics software to gain a better understanding of Service use and activity;
- for contractual, legal, regulatory or audit obligations, including responding to requests from law enforcement or a government agency asserting lawful authority to obtain the data or where Cognitive3D has reasonable grounds to believe the data could be useful in the investigation of unlawful activity, complying with a subpoena or warrant or an order made by a court, person or body with jurisdiction to compel the production of data, complying with court rules regarding the production of records and data, defending Cognitive3D in a legal, regulatory or administrative proceeding or in a contractual dispute or providing information to our legal counsel.
We may disclose your personal data to our parent companies, affiliates, subsidiaries, employees and contractors for the same purposes described above.
5. THIRD-PARTY SERVICES
6. COOKIES AND TRACKING TECHNOLOGIES
7. OBTAINING, RECTIFYING AND CONTROLLING YOUR PERSONAL DATA
You may contact Cognitive3D at email@example.com to obtain a copy of any personal data we collect about you, the production of which may be subject to a fee as permitted by applicable law. In addition, you may contact Cognitive3D to correct inaccurate personal data or to complete incomplete personal data.
You may be able to opt-out of some or all of the ways in which your personal data is processed, or request the deletion of certain personal data, except where the personal data is necessary or vital for:
- the performance of contractual obligations, such as the agreements between you and our Customers or certain other legal obligations;
- protecting your interests or those of another person; and
- our legitimate interests or the legitimate interests of a third-party,
and may do so by requesting deletion by contacting us using the contact information found below.
8. DATA STORAGE AND RETENTION
While Cognitive3D is a Canadian company, the data you provide through the Service may be stored and processed by third parties in countries around the world. You authorize Cognitive3D and third parties acting on our behalf to process your data in any country of their choosing, which may cause your data, including personal and anonymous data, to be subject to privacy protections and legal rights that may not be equivalent to those in your country.
Cognitive3D complies with international personal data transfer laws in applicable jurisdictions. For European Economic Area (“EEA”) residents, Cognitive3D complies with Articles 44-49 of the European Union’s General Data Protection Regulation (the “GDPR”). Currently, all transfers of personal data to Canada from residents of the EEA are covered by an adequacy decision as described in Article 45 of the GDPR.
Within 30 days of unsubscribing from our emails, Cognitive3D shall delete your name and email address from our records. Your personal data is retained until you request its deletion or until Cognitive3D no longer requires such data for the purpose for which it was collected or until required to be deleted by laws applicable in your jurisdiction. Any biometric personal data collected shall not be retained for a period longer than is permitted by applicable law (typically less than one-year following its use). Please email us at firstname.lastname@example.org to delete any personal data we hold.
Cognitive3D complies with the U.S. Children’s Online Privacy Protection Act and all other applicable laws and regulations concerning children and the Internet include those applicable in the EEA. The Service is not directed to children under the age of 13 and we do not knowingly collect personal data from children under the age of 13. If we learn that we inadvertently collected personal data from a child under the age of 13, we will delete that information as quickly as possible. If you are a parent or guardian of a child who you believe provided Cognitive3D with personal data without your consent, please contact us at email@example.com.
We respect the privacy of children and encourage parents and guardians to take an active role in managing their children's online activities. If you are under the age of majority, please make sure you have consent from you parent and/or guardian before using the Services. Some of our Services are not available for use for children under the age of majority, and we do not knowingly collect personal information from children in connection with those Services.
10. DO NOT TRACK DISCLOSURE
Do Not Track (“DNT”) is a web or device setting that allows you to request that receivers of personal data stop their tracking activities. When you choose to turn on the DNT setting in your browser or device or use alternative consumer choice mechanisms, your browser or device sends a special signal to websites, analytics companies, advertising networks, plug-in providers and other web services you encounter to stop tracking your activity.
Cognitive3D does comply with DNT signals as specified and configured in the XR Privacy Framework (“XRPF”). The XRPF, when optionally setup by our Customer, will allow our Customer's users the opportunity to allow or disallow some or all streams of User Data as collected by our Customer. Note that restricting the collection of certain types of personal data in this manner may cause unintended problems with the Service and some or all of the features on the Platform may or may not function as intended.
11. CALIFORNIA “SHINE THE LIGHT” RIGHT
12. YOUR CALIFORNIA PRIVACY RIGHTS
13. EUROPEAN USERS AND RIGHTS OF EUROPEAN ECONOMIC AREA RESIDENTS
If you are a resident of the EEA, you have certain rights in regard to your personal data. These rights may include:
- A Right of Access. You have the right to access your personal data that we hold about you free of charge in most circumstances.
- A Right to Rectification. If your personal data is inaccurate or incomplete, you can change the information you provided by contacting Cognitive3D using the e-mail listed below.
- A Right to Erasure. You have the right to obtain deletion of your personal data under most circumstances. In most cases, you may simply request the deletion by using the contact information found below. Please be careful as deletion of data in this manner is permanent and the data cannot be recovered.
- A Right to Object. If the processing of your personal data is based on legitimate interests according to Article 6(1)(f) of the GDPR or if your personal data was collected based on your consent according to Article 6(1)(a) of the GDPR, you have the right to object to this processing. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds for the processing as described in Article 21 of the GDPR; in particular, if the personal data is necessary for the establishment, exercise or defense of legal claims or if personal data is required for the provision of the Service and you still wish to use the Service.
- A Right to file a Complaint. You have the right to file a complaint with the appropriate supervisory authority in your jurisdiction.
- A Right to Restriction of Processing of your Personal Data. You have the right to obtain restrictions on the processing of your personal data as described in Article 18 of the GDPR.
- A Right to Personal Data Portability. You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller under the conditions described in Article 20 of the GDPR.
- A Right to Post-Mortem Control of Your Personal Data. Certain jurisdictions grant post-mortem controls of your personal data and if such rights are applicable in your jurisdiction, you may have the right to establish guidelines for the preservation, the deletion and the transmission of your personal data after your death through a will or through your estate.
- A Right to Opt-out of Marketing Communications. You have the right to opt-out of marketing communications we send you at any time. If you receive any marketing e-mails from us, you can exercise your right to stop such communications by clicking on the “unsubscribe” or “opt-out” link on any marketing e-mails Cognitive3D sends you. To opt-out of other forms of marketing, please contact us using the contact details provided below.
14. CHANGE OF OWNERSHIP OR BUSINESS TRANSITION
We are committed to ensuring that your data is secure. To prevent unauthorized access, disclosure, or breach, we have put in place suitable physical, electronic, and administrative procedures to safeguard and secure the data we collect and process, including appropriate protections for any sensitive personal data we collect. In particular, any biometric data collected shall be retained by Cognitive3D with added security when compared to other non-sensitive/biometric personal data.
16. CONTACT PREFERENCES
We will communicate with you through your email address, phone or other digital methods in order to conduct the Service and to respond to support requests or comments. If you have provided us with your email address and would like to change the email preferences we associate with you (for example, unsubscribing from receiving certain types of email) you may do so by clicking a link within certain types of emails that we send to you or, if no link is available, by replying with “unsubscribe” in the email title or body. On rare occasions, some types of email are necessary for the Service and cannot be unsubscribed from if you continue to use the Service
18. CONTACT US