Purpose of processing

As part of our research project, we are evaluating the extent to which Meta's (ex. Facebook) and Google's advertising tools are able to match user data with unique profiles. To do this, we collect certain identifiable information such as IP addresses and emails, and send them to Meta's and Google's advertising tools. If you chose to participate in this study, you may be retargeted with an ad campaign on any of your social media (Facebook, Instagram, or Messenger), as well as on any website in Google's Display Network.

Legal basis of processing

Personal data is collected on the basis of the public interest mission, a mission is defined by the amended decree of November 24, 1982, which outlines the organization and functioning of the CNRS, followed by the laboratories affiliated with the CNRS.

Data Protection Officer

The Data Protection Officer of our research institution, CNRS, can be contacted for any questions regarding the protection of personal data. The contact details are as follows: CNRS Service protection des données, 2 rue Jean Zay, 54519 Vandoeuvre-lès-Nancy ; mail : dpd.demandes@cnrs.fr

Data collection

We collect data with participant's consent.

• Personal email address and gender which are voluntarily provided on form submission.
• We also automatically collect the following information when a particpant submits the form. This information does not reveal the participant's specific identity (like your name or contact information) but may include device information, such as your browser characteristics and operating system. This information includes the following:
• Internet Protocol address (IP address)
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the study form. Depending on the device used, this device data may include information such as browser type, hardware model, operating system, and system configuration information.
• Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. For this purpose, we use technologies to collect geolocation data that tells us your approximate location based on your IP address.

Data processsing

We process your information with your consent to deliver targeted advertising during the duration of our experiment. If you choose to participate, you will be signed up to a single ad campaign and may receive a generic ad one or more times if you have been successfully retargeted. This requires us to share your information with Meta’s and Google's advertising platform. We then use this information to create Custom audiences and target them with an ad campaign. The data we collect is also used to establish some statistics (e.g., virtual private networks VPN or proxy use, ad block use, etc.)

Data records

We protect your personal information through a system of technical security measures:

• We make use of our institution's organizational and technical processes and procedures to safely store and protect your personal information. Your data is stored safely on INRIA's infrastructure (one of our research institution) with restricted access: only our research team will have access to view, delete and modify your data.
• The data we store is hashed with a one way salted hash function and no copy of the data will be stored elsewhere.
• During the time we administer our experiment, we make sure to keep the website regularly maintained and secured.

Transferring data outside the European Union

Depending on their respective needs, the following recipients will receive the data we collect: Meta (ex. Facebook) and Google.

In the event of a transfer of your data outside of the EU, Meta's Data Security Terms also apply for processing the data we send through Meta's tracking tools. As well as Google's Privacy Policy for the data we send through Google's tracking tools. The services provided by these third parties are beyond our control and may, at any time, modify the terms of use of their services.

Your data is only transmitted if you have given us your consent.

Data retention period

We will keep your personal information in our database only for the duration of our study (maximum of one year). When our research study is done, we will delete your data records.

Personal rights

Rights to request deletion of the data

Pursuant to the statutory and regulatory provisions applicable, in particular French Data Protection Law (Law no. 78-17 of 6 January) and Regulation (EU) no. 2016/679 of 27 April 2016 (applicable since 25 May 2018), you have the following rights:

• To exercise your right of access, to find out what personal data concerning you is held;
• To ask for your data to be updated, if they are incorrect;
• To request the portability or erasure of your data;
• To ask for the processing of your data to be limited;
• To oppose the processing of your data, on legitimate grounds;

To exercise these rights, you can contact us . If you have a complaint about how we handle your data, we would like to hear from you.

You can also contact the CNRS Data Protection Officer at: CNRS Data Protection Service, 2 rue Jean Zay, 54519 Vandoeuvre-lès-Nancy; email: dpd.demandes@cnrs.fr

Rights to lodge a complaint

Right to lodge a complaint If you consider, after contacting us, that your data protection rights have not been respected, you have the possibility of lodging a complaint with the CNIL online or by post.

Cookies and similar tracking technologies

What are cookies

Cookies are small pieces of text sent to your browser by a website you visit. They help that website remember information about your visit, which can both make it easier to visit the site again and make the site more useful to you.

Third-party cookies

With participant's consent, we use Meta's third-party cookies for retargeting purposes, specifically if the participant has a Facebook account (this includes Instagram and Messenger too).

Delete browser cookies

You can delete all cookies already stored on your device by clearing the browsing history of your browser. This will remove all cookies from the sites you have visited. To have more fine-grained control over cookies specific to different sites, refer to your browser's settings for privacy protection and cookies.

Block all cookies

Most modern browsers can be configured to prevent the storage of cookies on your device, but doing so may require you to indicate some of your preferences each time you visit a website/page. Additionally, certain services and features may not be available (such as logging in using a profile, for example).