Global Data Protection Regulation – Usability | UX

We take your privacy seriously. This policy outlines how we collect, process, and use personal data in compliance with applicable data protection laws, especially the General Data Protection Regulation (GDPR).

1. Controller
Responsible Entity:
Philipp Wagner
Blicx Ltd
B1 Vantage Park, Old Gloucester Road, Hambrook, Bristol, England, BS16 1GW
Email: surveys@blicx.com

You may contact us at any time to object to the processing of your personal data or request information, correction, or deletion.

You can save or print this privacy policy for your records.

2. Purpose of Data Processing
We process personal data to:

Operate our website and services

Facilitate client communication via contact forms

Conduct and analyze research studies

3. Data Collection and Usage
3.1 Web Hosting
Our hosting providers offer infrastructure, computing, storage, security, and maintenance services. Data processed may include:

Contact, content, and contract information

Usage and communication metadata

Legal Basis: Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (legitimate interest in secure, efficient operations).

3.2 Access Data
When visiting our site, we automatically collect access data (server log files), including:

File name/URL accessed

Date/time of access

Data volume transferred

HTTP status codes

Browser and OS information

Referrer URL

Accessed sub-pages

ISP and IP address

This data helps us monitor, secure, and improve our services. IP addresses are temporarily stored only as needed.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest).

3.3 Cookies
We use:

Session Cookies: Deleted after browser is closed; maintain session integrity.

Persistent Cookies: Stored 1 month to 10 years; enhance user experience and functionality.

Cookies may store:

Usage metrics and visited pages

Legal Basis: Art. 6(1)(f) GDPR (user-friendly, secure website operation).

You can manage cookie preferences in your browser settings. Disabling cookies may limit website functionality.

3.4 Contractual Data
We process data such as name, address, email, product details, and payment info to fulfill contractual obligations.

Legal Basis: Art. 6(1)(b) GDPR (contract performance).
Retention: Until end of statutory retention periods or account deletion.

3.5 Newsletter
For newsletter registration:

We require your consent and email

We use double opt-in confirmation

You can unsubscribe anytime via link or contact

Legal Basis: Art. 6(1)(a) GDPR, §7(2)(3) UWG
Retention: As long as there is legitimate interest; max. three years for proof of consent.

3.6 Email Contact
When contacting us, we process your data to respond and follow up on inquiries.

Legal Basis:

Art. 6(1)(b) GDPR for pre-contractual measures

Art. 6(1)(f) GDPR for legitimate interest in handling inquiries

4. Panel Surveys
When you register for a panel, we may collect:

Name, email address, game titles played

Panel entry date and location

Participation eligibility is country-specific. Multiple entries or use of automation will result in disqualification.

Storage:

Data is stored on EU servers (Frankfurt)

Permanently deleted upon withdrawal

Dispute Resolution: In case of email ownership disputes, the “authorized account holder” will be considered the entrant.

5. Research Projects (Client-Commissioned Studies)
As part of our services, Blicx Ltd conducts user research projects on behalf of clients. We are committed to protecting participant privacy and ensuring all data used in these projects is fully anonymized and aggregated.

5.1 Purpose of Data Collection
We collect data solely for the purpose of delivering research insights to our clients. These insights are used to help clients better understand user behavior, preferences, and needs in relation to their products or services.

5.2 Types of Data Collected
Depending on the specific study, we may collect:

Responses to surveys, tasks, or interviews

Interaction logs (e.g. click behavior, session duration)

Observational data (e.g. usability feedback, task performance)

Basic demographic details (e.g. age group, location, platform usage)

We do not collect any data that can directly identify an individual. No personally identifying information (e.g., name, IP address, email address, face, or voice) is retained or shared.

5.3 Aggregation and Anonymization
All collected data is:

Aggregated before analysis and reporting

De-identified to prevent re-identification of any individual

Reviewed to ensure removal of personal references or unique identifiers

Clients receive only summary-level insights and statistics. No individual-level or raw data is disclosed.

5.4 Data Retention
We retain aggregated and anonymized data for internal benchmarking and future research unless otherwise agreed upon in the project scope. Any temporary files containing sensitive information are securely deleted after aggregation is complete.

5.5 Data Security
All data is stored on secure, access-restricted systems

We apply encryption and secure transfer protocols during collection and storage

Only authorized research personnel have access to research data

6. Consent
Participation is voluntary. You may withdraw at any time and request data deletion.

7. Third Parties
Data is not sold. Anonymized data may be shared with partners under strict safeguards.

6. Google Analytics
We use Google Analytics to analyze site usage. IP anonymization is enabled (IPs shortened in EU). Data is transferred to Google servers in the U.S. under the Privacy Shield agreement.

Opt-Out: Browser Add-on
Legal Basis: Art. 6(1)(f) GDPR (service optimization)

7. Data Retention
We store data only as long as necessary or required by law (e.g., tax, commercial regulations).

8. Your Rights
You have the right to:

Access your personal data

Rectify incorrect/incomplete data

Request deletion (Art. 17 GDPR)

Restrict processing

Data portability

Object to processing

Withdraw consent

Lodge a complaint with a supervisory authority

9. Data Security
We implement appropriate technical and organizational measures (Art. 32 GDPR), including SSL encryption, to protect your data. Note that internet communications may have security vulnerabilities.

10. Data Disclosure & International Transfers
Your data is only shared with third parties where necessary (e.g., logistics providers).
We do not transfer personal data outside the EU unless necessary and legally compliant.

11. Data Protection Contact
Privacy Officer:
Philipp Wagner
Email: surveys@blicx.com