Privacy policy — Piano Analytics

Cited by

Facts read from this source

• Entity Report an error

  “We, Piano Software Inc., Philadelphia, USA and affiliated companies belonging to Piano group (collectively, “Piano”, “us”, “our”, or “we”), and incorporating Newzmate, Cxense and AT Internet”

• Platform components Report an error

  “our products – Analytics, Subscriptions (Composer, ID, Billing), Audience (DMP, CDP) and Amplifier (ESP, Socialflow)”

• No data sale Report an error

  “Claim ownership over personal data; Barter personal data for other services or products; Sell personal data to anyone; Monetize personal data by other means.”

• Data anonymization Report an error

  “Analytics, Subscriptions (Composer) and Audience (DMP) collect by default pseudonymized information, but directly identifiable information can be added by the Publisher. Composer (ID and Billing) and Amplifier (ESP) services work with directly identifiable information (e.g. an email).”

• Retention Report an error

  “Analytics, for instance, has a predefined data retention period of 25 months with the opportunity for the Publisher to customize it. For all products, all data is deleted at the end of the contract relationship with the Publisher.”

• Sharing Report an error

  “We, by default, do not share any data to anyone without the Publisher prior approval.”

• Bcr Report an error

  “Transfers inside Piano affiliates are covered by Binding Corporate Rules approved by the EDP.”

• Legal disclosure history Report an error

  “Piano never had to disclose any personal data for legal purposes so far.”

• Trackers Report an error

  “Piano is using trackers, especially cookies on standard websites, or mobile IDs on native applications. Local storage, server-to-server request, clear gifs, pixel tags, web beacons or other similar technologies may also be used in some cases.”

• DPA Report an error

  “Each Publisher signs a data processing agreement (DPA) with Piano to formalize these purposes and associated responsibilities.”

• Dsr support Report an error

  “Piano’s data protection team is able to support the process of applying a data subject right.”

• Incident response Report an error

  “Piano maintains an incident response plan which governs the communication and process in the case of data breach.”

• Security measures Report an error

  “Piano security measures by pseudonymization and encryption of personal data; maintaining a detailed Disaster Recovery Plan (DRP)”

• Transfer mechanisms Report an error

  “EU Standard Contractual Clauses (SCC) through the data processing agreement (DPA) signed with the Publisher as well as with sub-processors; Binding Corporate Rules (BCRs) approved by the European Data Protection Board (EDPB) for both processors’ and controllers’ transfers;”

• Pipeda Report an error

  “To meet the guidelines of the PIPEDA in the applicable Canadian provincial legislation, Piano recognizes and has controls in place”

• Analytics Report an error

  “Piano Analytics AWS Cloud computing USA (EU, USA, Japan) Snowflake Data platform USA (EU, USA)”

• Subscriptions amplifier Report an error

  “AWS Cloud computing USA (EU, USA, Japan, Australia) Alchemer Strategic service survey USA Braintree Payment USA Cloudflare Captcha USA Snowflake Data platform USA (EU, USA) MailChimp Email notification USA Stripe* Payment & Billing USA Mode Analytics Visualisation USA”

• Audience Report an error

  “Piano Audience Gcore Data center USA (USA, Japan) Hetzner Data center Germany”

• Shared Report an error

  “All Beamer Product news, notification & satisfaction USA (EU) Salesforce CRM USA (EU) Userflow Customer on-boarding USA (EU) Zendesk Support tickets USA (EU)”

• Aws cispe Report an error

  “AWS is certified for following the CISPE code of conduct endorsed by the EDPB.”

• Affiliates Report an error

  “Applied Technologies Internet GmbH Germany (EU - BCR) Applied Technologies Internet SAS France (EU - BCR) Newzmate Sp. z o.o. Poland (EU - BCR) Piano Japan Co. Ltd Japan (Adequacy decision - BCR) Piano Software B.V. Netherlands (EU - BCR) Piano Software GmbH Germany (EU - BCR) Piano Software Inc. United States of America (BCR) Piano Software LTD United Kingdom (Adequacy decision - BCR) Piano Software Norway NUF Norway (EEA - BCR) Piano Software s.r.o Slovakia (EU - BCR) PSIEZE Data Analytics S.R.L. Argentina (Adequacy decision - BCR) SocialFlow Inc. United States of America (BCR)”

• Affiliate access Report an error

  “Piano affiliates don’t have automatic access to all Platform data. The access of Platform data is managed and strictly limited to what is necessary.”

• Dsr rights Report an error

  “Data Subject Right Product Mean Information All Via Publishers’ information (CMP, Privacy Policy, …) Access All Via a request to the Publisher’s DPO Rectification Subscriptions, Audience, Amplifier Via a request to the Publisher’s DPO Erasure All Via a request to the Publisher’s DPO Portability All Via a request to the Publisher’s DPO Objection All Via opt-out mechanism provided by the Publisher”

• Collection methods Report an error

  “Personal data is collected via so called tagging libraries (mainly JavaScript on the web and SDK for native applications) implemented by the Publisher on its online platforms.”

• Collected types Report an error

  “the IP address that can be anonymized and to perform geolocation, and the end-user’s terminal ID (cookie or mobile ID).”

• Stripe note Report an error

  “We use Stripe for payments, analytics, and other business services. Stripe may collect personal data including via cookies and similar technologies.”

• Sensitive data Report an error

  “We do not knowingly process sensitive or special categories of personal data as defined in article 9 of the GDPR.”

• Opt out Report an error

  “Users can opt out of interest-based advertising by clicking here.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer Consent-free operation & data minimisation
• The Agency Developer Data access, export & self-hosting
• The Agency Developer Installation, integrations & performance
• The Agency Developer European sovereignty
• The Data Protection Officer Consent-free operation & data minimisation
• The Data Protection Officer Installation, integrations & performance
• The Data Protection Officer European sovereignty
• The E-Commerce Marketing Lead Consent-free operation & data minimisation
• The E-Commerce Marketing Lead Data access, export & self-hosting
• The E-Commerce Marketing Lead Installation, integrations & performance
• The E-Commerce Marketing Lead European sovereignty
• The Growth Analyst Consent-free operation & data minimisation
• The Growth Analyst Data access, export & self-hosting
• The Growth Analyst Installation, integrations & performance
• The Growth Analyst European sovereignty
• The Public-Sector Site Owner Consent-free operation & data minimisation
• The Public-Sector Site Owner Installation, integrations & performance
• The Public-Sector Site Owner European sovereignty
• The Skeptic Consent-free operation & data minimisation
• The Skeptic Data access, export & self-hosting
• The Skeptic Installation, integrations & performance
• The Skeptic European sovereignty