E-Space’s data management

This is a summary of how E-Space collects and handles data from respondents in various surveys. Note that this applies to services where the customer has not chosen to link survey data with traffic data. For cases where traffic data is handled, other data management routines apply.

Script

E-Space uses a script on the customer’s website to collect data. For the website user it will be a so-called 3rd party script. The script is asynchronous which means that it is designed to not affect the site’s loading. Also, it doesn’t affect the website if there should be any breakdowns in communication with E-space servers. The script is supported by the latest versions of: IE10 / IE11 / Edge / Chrome / Firefox / Safari.

There are two types of script management, hosting at E-Space and hosting at the customer.

Hosting at E-Space

The script is hosted by E-Space via a CDN and loaded into the page using a script tag on the customer’s website. This means that the script’s settings are updated automatically, which makes it possible to adjust the data collection on the website directly via the E-Space platform.

Hosting with the customer

The script can also be hosted by the customer. In this case, the ability to control the script directly from the E-Space platform is lost and the customer needs to generate a new script on the E-Space platform and replace the old script on the website with every change in the data collection.

Cookies

E-Space uses local storage, session storage and cookies (depending on availability) on the customer’s website to control when and who should see different surveys.

The following is saved in the respondents’ browser:

  • “espace” – Information about time spent on the website and what surveys that have been seen and closed. Lifetime of one year and renewed at each update.
  • “espace_session” – Information about time spent on the site at the current visit. This is only saved during the visit.

Depending on cookie policy the customer might have to inform users about these cookies.

Data transfer

All communication is encrypted over HTTPS directly between the respondent’s browser and the E-Space server. No information goes through the customer’s system.

The following information is sent from the respondent’s browser to E-Space:

  • Survey anwers
  • URL of the page on which the response is made
  • Title of page on which the response is made
  • Browser ID (user agent)
  • Browser language
  • IP number (not stored but used only to look up which country the respondent is in)

Data storage

E-Space stores data with Nethouse Sverige AB on Cygate AB’s servers in Sweden. The servers are behind a firewall that is only open for HTTPS traffic. Backup of database is taken every day and data never leaves the internal network

E-Space stores the following data:

  • Survey anwers
  • URL of the page on which the response is made
  • Title of page on which the response is made
  • Browser ID (user agent)
  • Browser language
  • What country respondents are in

Ownership and responsibility for data

All data collected is owned and managed by E-Space and no external party other than the customer has access to it.

Access to data

E-Space and some contracted subcontractors, needed in order for us to deliver and develop our services, have access to data. Such subcontractors have confidentiality and personal data agreements with E-Space.

In addition, the customer and, where appropriate, external parties that are approved by the customer, have access to the data collected during the time when they have a valid license. Customer access to data is via E-Space platform, either through personal login or via API.

E-Space platform

E-Space platform is accessed by customers via the internet with personal login. User accounts and logins are managed by the company Auth0. Verification of user privileges is done using JWT issued by Auth0 and is valid for 24 hours.

Personal data

E-Space takes responsibility for personal data for all data collected through our services. We are the personal data controller, not the personal data processor. This means that we do not disclose the respondents personal information to our customers unless the respondents themselves clearly request it. See further E-Space Personal Data Handling.

 

Any questions regarding our data handling?

Send us a message and we’ll get back to you soon.

We love your users

STOCKHOLM OFFICE

KUNGSGATAN 60
111 22 STOCKHOLM

MALMÖ OFFICE

DJÄKNEGATAN 9
211 35 MALMÖ

GOTHENBURG OFFICE

KUNGSPORTSPLATSEN 37
411 36 GÖTEBORG

Tel: +46 (0)8 514 917 90

E-Space Communication AB, Djäknegatan 9, 21135 Malmö, Sweden