California residents – please refer to “Privacy Notice for California Residents” below.
Please note that this policy only covers Tobii’s use of personal data. Sometimes, other companies buy or license our technology and use it to handle personal data as part of their service offering. In such cases you should refer to the privacy policies of those respective businesses.
Depending on which services you use, we process different kinds of information from or about you.
Personal data and other information you (and others) give us.
We collect the information that you (and others) give us when using our services.
Personal data and other information which is automatically collected about you when you use our services.
Third parties may also collect information about you through the services, or receive information collected about you through the services, as described below.
We use the information as set out below and to provide our services to you and our partners.
To provide and personalize our services.
To improve and develop your experience and our services.
To promote our brand and services.
We use the information that we collect to send you promotional messages and content and otherwise market to you on and offer our services. We also use this information to measure how users respond to our marketing efforts. If you would like to opt out of receiving marketing emails, then you can always do so by follow the instructions implemented in every such promotional message.
To promote safety and security.
We use the personal data that we collect to help promote safety and security on and off our services, such as by investigating suspicious activity or breaches of our terms or policies and protecting our or others’ rights or property.
To provide and support our services, information that we have about you is shared in certain circumstances. The following can see information about you when you and others use our services.
Developers, support and other online content providers on our services
Information in your Tobii profile and about how you use our services. For example, we may provide a third-party games provider with your user id or similar, so that the games provider may deliver a game to you that you’ve purchased bundled with one of our products
Any other information that you choose to share with the third party through your use of the services.
Sharing within related companies. Depending on which services you use, we share information with companies that are part of the same group of companies that Tobii is part of, or that become part of that group, such as Tobii Pro, and Tobii Tech.
We share the information that we collect with vendors, service providers, researchers and other partners, who work at our direction to support the services (such as hosting our services, fulfilling orders, facilitating payments, analysing the way people use our services, processing credit card payments, providing customer service or sending electronic communications for us).
Other parties in connection with certain business transactions
In the event that the ownership of Tobii (or any portion of our assets) changes as a result of a merger, acquisition or in the event of a bankruptcy, information from or about you or your device may be transferred to another company.
Law enforcement or legal requests
We share information with law enforcement or in response to legal requests in the circumstances outlined in Section 7 below.
We also share de-identified or aggregate data with others. “De-identified data” means information where we have removed identifiable data such as your name and other data that could reasonably be used to identify you. “Aggregate data” is data that has been combined with other data so that it doesn't identify any specific person. For example, we provide developers with aggregated statistics about the number of people from a particular region that use our services, so developers can create content tailored for people in that market.
Tobii shares infrastructure, systems, and technology with other Tobii companies to provide an innovative, relevant, consistent and safe experience across all services that you use.
Some of the content, marketing and functionality on our services may be provided by third parties that are not affiliated with us. For example, we work with companies that help us provide content within the service that you purchased.
We store data that identifies you until it is no longer necessary for us to do so, for example when you delete an account with us. This is a case-by-case determination that depends on things such as the nature of the data, why it is collected and processed, and relevant legal or operational retention needs. For example, we may retain certain purchase information for accounting and tax purposes even after you have deleted your account.
When you delete an account with us, we delete or anonymize the data you provided us with and the data we collected during your use of the services. Neither you nor us will be able to restore such deleted or anonymised data.
We share information globally, both internally within the Tobii Group and externally with our partners to fully provide the services you are entitled to receive based on the service you have purchased or subscribed to and/or otherwise are entitled to receive. Information controlled by Tobii will be transferred or transmitted to, or stored and processed in the United States, China and/or other countries outside of where you live for the purposes as described in this policy. These data transfers are necessary for us to globally operate and provide our services to you. We utilize standard contract clauses approved by the European Commission and rely on the European Commission's adequacy decisions about certain countries, as applicable, for data transfers from the EU/EEA to the United States and other countries.
The Data Protection Officer for Tobii AB can be contacted at firstname.lastname@example.org. You also have the right to lodge a complaint with the Swedish lead supervisory authority, the Datainspektionen, www.datainspektionen.se
Access your data
You have the right to obtain from Tobii a confirmation of whether or not personal data concerning you is being processed, and if that is the case, a right to access information including, but not limited to, the purpose of the processing and the categories of personal data that Tobii has concerning you. By your request, Tobii is required to provide you with a copy of undergoing processing of your personal data.
Rectify your data
If it comes to your knowledge that certain personal data of yours which is being processed by Tobii is inaccurate, you have the right to obtain a rectification and in some cases a right to have incomplete data completed.
Port your data
If the legal ground for a processing of personal data is based on either (i) consent or (ii) fulfilment of a contract between you and Tobii, you have a right to receive data which you have provided us in a commonly used and machine-readable format and have the right to transmit such data to another controller.
Erase your data
You have the right to obtain from Tobii the erasure of your personal data when, for example, (i) the data no longer is necessary in relation to the purpose for which it was collected, (ii) if you withdraw a consent, (iii) if you object to the processing and there are no overriding legitimate grounds for the processing, or if (iv) the personal data have been unlawfully processed.
Restrict and object to certain processing of your data
You have the right to restrict Tobii from processing your data when, for example, (i) you contest the accuracy of the personal data, or (ii) if Tobii no longer needs certain data for the purposes of the processing.
Find out more about these rights, and how you can exercise them by either contacting Tobii at email@example.com or obtain information from the appropriate supervisory authority.
The data controller responsible for your information is Tobii AB (publ) which you can contact by e-mail at firstname.lastname@example.org or by post at:
Attn: Data Protection Officer
Tobii AB (publ)
182 17 Danderyd
Effective Date: January 1, 2020
This California Privacy Notice (this “notice”) applies to “Consumers” as defined by the California Consumer Privacy Act (“CCPA”) as a supplement to Tobii AB’s (“Company” “us” “we” our”) other privacy policies or notices.
To aid in readability, in some places we have abbreviated or summarized CCPA terms or language. Terms defined in the CCPA that are used in this notice shall have the same meaning as in the CCPA.
For more information on this notice or your California privacy rights, email us at email@example.com or, write to us at:
Attn: Data Protection Officer
Tobii AB (publ), Box 743, 182 17 Danderyd, Sweden.
This may include but is not limited to: a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver’s license number, passport number, citizenship status or other similar identifiers.
This may include information such as: physical characteristics or description, signature, telephone number, employment.
Internet Usage Information
This may include, but is not limited to: browsing history, search history, and information regarding your interaction with an Internet Web site, application, or advertisement.
As permitted by applicable law, we do not treat deidentified data or aggregate consumer information as personal information and we reserve the right to convert, or permit others to convert, your personal information into deidentified data or aggregate consumer information.
Subject to restrictions and obligations of the CCPA, our vendors may also use your personal information for some or all of the above listed business purposes. Our vendors may themselves engage services providers or subcontractors to enable them to perform services for us, which sub-processing is, for purposes of certainty, an additional business purpose for which we are providing you notice.
Sharing personal information
In the last twelve (12) months, we have not sold any personal information.
We provide California Consumers the privacy rights described in this section. You have the right to exercise these rights via an authorized agent who meets the agency requirements of the CCPA and related regulations. As permitted by the CCPA, any request you submit to us is subject to an identification process. We will not fulfill your CCPA request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected personal information.
If we cannot comply with a request, we will explain the reasons in our response. We will use personal information provided in your request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or clearly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Additionally, you have the right to make or obtain a transportable copy, no more than twice in a twelve-month period, of your personal information that we have collected in the period that is 12 months prior to the request date and are maintaining. Once we receive and confirm your request, we will disclose to you:
Deletion Request Rights
Except to the extent we have a basis for retention under CCPA, you may request that we delete your personal information that we have collected directly from you and are maintaining. Our retention rights include, without limitation, to complete transactions and service you have requested or that are reasonably anticipated, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement. Note also that we are not required to delete your personal information that we did not collect directly from you.
Do Not Sell
We do not sell your personal information as such is defined under the CCPA, and until such time as we change this policy by updating this notice, will treat personal information collected under that policy as subject to a do not sell request.
Our and Other’s Rights
Notwithstanding anything to the contrary, we may collect, use and disclose your personal information as required or permitted by applicable law and this may override your CCPA rights. In addition, we need not honor any of your requests to the extent that doing so would infringe upon our or any other person or party’s rights or conflict with applicable law.
Changes to Our Privacy Notice
We reserve the right to amend this notice at our discretion and at any time. When we make changes to this notice, we will notify you through a notice on our website homepage.
If you have any questions or comments about this notice, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Last Reviewed: December 6th, 2021