PRIVACY POLICY BizLab Analytics AB

Policy BizLab Analytics (BizLab) values your privacy and strives to use AI technology in a responsible and transparent manner. This policy describes how data is processed in accordance with the EU's General Data Protection Regulation (GDPR) and the EU's AI Regulation (AI Act).

Definitions and Clarifications

• Data Processor – processes personal data on behalf of the data controller

• Data Controller – determines the purposes and means of the processing of personal data

• Computer Vision – a field within artificial intelligence (AI) where a computer is given the ability to see, interpret, and understand images, like how humans do with their sight

• User – those granted access to the service by the customer

• Interactor – individuals who pass by the sensor

• Interactions – the communication between the interactor and the system

• Data Collection – information gathered via the sensor

• Sensor – used to collect real-time data for analysis

• Metadata – data about raw data. Provides an overview of the raw data without revealing its detailed content

• Encryption – ensures that information remains unaltered and unreadable without an encryption key

Responsibility for Personal Data

BizLab processes personal data on behalf of the customer (as the data processor). The customer is responsible for the processing of personal data (as the data controller).

About the Service

The service is an AI-based system that uses computer vision to analyse statistics on interactions with sensors and/or digital screens. The purpose is to understand visitor flows, audience demographics, and potential media exposure, without identifying individuals. No profiling or automated decision-making is performed based on this data.

For Users

What Personal Data Is Processed

The personal data processed consists of the information provided by the customer so that the user can access the service. This includes name, email address, and, if applicable, phone number.

Who Has Access to Personal Data

The data is processed by the administrator appointed by the customer and by BizLab for the purpose of administering the use of the service. Upon termination of employment, the administrator deletes the user’s information.

For Interactors

Purpose of Data Collection

The system processes data to:

• Measure visitor flows and analyse interactions

• Understand which target groups interacted and their reactions

• Improve and optimize the interactor’s experience

Data Collected

The system collects data about interactions to analyse and provide statistics on:

• Gender

• Age category

• Time of interaction

• Potential display time and displayed media

Processing and Storage

The system uses computer vision to detect gender and age. The system does not collect personal or biometric data that could be used to identify an individual. Therefore, BizLab does not process personal data as defined by the GDPR.

How the Service Works

An individual is detected by a sensor. Data is processed in real-time locally on the sensor's device for as long as the individual is visible to the sensor. The interaction is assigned a unique sequential number. Metadata and anonymized data regarding gender, age category, and emotional expression are added. The anonymized data is sent to the Microsoft Azure cloud service. Statistics are presented to the user.

The system never stores images, videos, or audio. After the interaction, no such information, or traces thereof, remain on the local device. No data of any kind can be linked to a specific individual.

No permission is required to use the service. The service is not comparable to video surveillance, where data collection is significantly more extensive. In video surveillance, cameras record continuously and store material for later use.

Interactor Rights

The system does not collect personal data that can identify an individual. After the interaction ends, no data remains on the local device. Therefore, no request for access, correction, or deletion of data is possible.

Security

BizLab uses encryption and follows high-security standards to protect data. The anonymized data sent from the local device to the cloud service is encrypted. BizLab’s data management partner is Microsoft Azure, and data is stored within the EU/EEA. Microsoft Azure complies with the security requirements of GDPR.

BizLab Analytics AB
Reg.no. SE559297-7762
Privacy policy  v.2025.2
Open information