Policy Summary

Personal Data collected for the following purposes and using the following services:

    • Access to third party services’ accounts

      • Access to the Facebook account

        • Permissions: About Me, Birthday, Checkins, Contact email, Current City and Family Members and Relationship Status
      • Access to the Twitter account

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Analytics

      • Google Analytics and Google AdWords conversion tracking

        • Personal Data: Cookies and Usage data
    • Backup saving and management

      • Amazon Glacier

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Contacting the User

      • Contact form

        • Personal Data: address, city, email address, first name, last name, phone number, state and ZIP/Postal code
    • Content performance and features testing (A/B testing)

      • Optimizely and Visual Website Optimizer

        • Personal Data: Cookies and Usage data
    • Displaying content from external platforms

      • Google Fonts

        • Personal Data: Usage data and various types of Data as specified in the privacy policy of the service
      • Google Maps widget

        • Personal Data: Cookies and Usage data
    • Handling activity data

      • Apple HealthKit

        • Personal Data: body measurements & indexes, date of birth, food related activity , gender, general activity data, heart rate and other vital data, movement activity and sleeping activity
    • Handling payments

      • Authorize.Net, Bitpay, Apple Pay and Amazon Payments

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Heat mapping

      • Crazy Egg

        • Personal Data: Cookies and Usage data
    • Hosting and backend infrastructure

      • Amazon Web Services (AWS) and GitHub Pages

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Infrastructure monitoring

      • Pingdom

        • Personal Data: Cookies and Usage data
      • New Relic

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Interaction with external social networks and platforms

      • LinkedIn button and social widgets

        • Personal Data: Cookies and Usage data
    • Interaction with live chat platforms

      • Zopim Widget

        • Personal Data: Cookies and Usage data
    • Location-based interactions

      • Geolocation

        • Personal Data: geographic position
    • Managing contacts and sending messages

      • Sendgrid

        • Personal Data: email address
      • Twilio

        • Personal Data: phone number
    • Managing support and contact requests

      • Zendesk

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Remarketing and behavioral targeting

      • AdRoll, Facebook Remarketing, DoubleClick for Publishers Audience Extension, AdWords Remarketing, Perfect Audience, Remarketing through Google Analytics for Display Advertising and Twitter Remarketing

        • Personal Data: Cookies and Usage data
      • Facebook Custom Audience and Twitter Tailored Audiences

        • Personal Data: Cookies and email address
    • SPAM protection

      • Mollom

        • Personal Data: various types of Data as specified in the privacy policy of the service
    • Traffic optimization and distribution

      • CloudFlare

        • Personal Data: Cookies and various types of Data as specified in the privacy policy of the service
    • User database management

      • Infusionsoft

        • Personal Data: various types of Data as specified in the privacy policy of the service

Further information about Personal Data

    • The Service is not directed to children under the age of 13

      • Users declare themselves to be adult according to their applicable legislation. Minors may use this Application only with the assistance of a parent or guardian. Under no circumstance persons under the age of 13 may use this Application.
    • Push notifications

      • This Application may send push notifications to the User.

Contact information

    • Data owner

      • ICON EYE CARE
    • Owner contact email: hecsupport@swhec.org

Full policy

Data Controller and Owner

ICON EYE CARE

Owner contact email: hecsupport@swhec.org

Types of Data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: first name, last name, phone number, address, state, email address, ZIP/Postal code, city, Cookies, Usage data, gender, date of birth, general activity data, movement activity, body measurements & indexes, food related activity, sleeping activity, heart rate and other vital data and geographic position.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

 

The Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

 

All Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without any consequences on the availability or the functioning of the service.

 

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.

 

Any use of Cookies – or of other tracking tools – by this Application or by the owners of third party services used by this Application serves the purpose of providing the service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Users are responsible for any third party Personal Data obtained, published or shared through this Application and confirm that they have the third party’s consent to provide the Data to the Owner.

Mode and place of processing the Data

Methods of processing

The Data Controller processes the Data of Users in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

 

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.

Place

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.

Retention time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

The use of the collected Data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Backup saving and management, Contacting the User, Heat mapping, Hosting and backend infrastructure, Handling payments, Displaying content from external platforms, Content performance and features testing (A/B testing), Access to third party services’ accounts, Remarketing and behavioral targeting, Analytics, Interaction with external social networks and platforms, Handling activity data, Interaction with live chat platforms, Location-based interactions, Managing support and contact requests, Traffic optimization and distribution, SPAM protection, User database management, Managing contacts and sending messages and Infrastructure monitoring.

The Personal Data used for each purpose is outlined in the specific sections of this document.

Facebook permissions asked by this Application

This Application may ask for some Facebook permissions allowing it to perform actions with the User’s Facebook account and to retrieve information, including Personal Data, from it. This service allows this Application to connect with the User’s account on the Facebook social network, provided by Facebook Inc.