Privacy Policy
The LIX is very attentive and vigilant regarding personal data protection issues. Ecole Polytechnique and Inria have each appointed a Data Protection Officer (DPO) to ensure that their respective research units, including the Laboratoire d’Informatique de l’Ecole Polytechnique (LIX), comply with European General Data Protection Regulation (GDPR).
Data Collected
We collect information the user shared with ad platforms such as Facebook, as well as information that platforms such as Facebook inferred about the user based on actions. We collect this information from Ad Preferences Pages such as https://www.facebook.com/ads/preferences/ and the user’s Facebook timeline.
Specifically:
- Ads a user receives while browsing Facebook, ads clicked, accompanied explanations, posts linking to news organizations, and public posts.
- Ad and post engagement proxies: visibility time, mouse position/movement in ad area, reactions, comments, shares, ad-content actions, advertiser actions, and other interaction actions.
- News-site monitoring information: news articles read and reading duration.
- Hashed versions of email and Facebook ID, if shared with ad platforms.
- Potential inferred attributes (for example birthplace/location history, professional, financial/economic, and localization information) if shared or inferred by ad platforms.
- Connection information (for example IP address, browser type, operating system).
- Internet-related information.
- Application health indicators (for example ad blocker presence, Facebook connection activity).
- Survey responses when participants complete additional surveys.
Ads, explanations, posts, and Ad Preferences attributes may reveal special-category data inferred by platforms and may not be accurate. Surveys may also collect socio-economic profile and personality traits.
How Data Is Processed
Collected data are stored on a dedicated secured server and provided to academic researchers upon justified request. Access is granted through an authentication process after validation.
In accordance with Article 13 of Regulation (EU) 2016/679, please note:
- The representative of the data controller is the director of LIX.
- Personal data are confidential and only authorized research team members have access.
- Each personal-data processing operation must be reported to the relevant DPO.
- Data are kept for ten years.
- Data transfer to LIX partners may occur under signed contractual protections.
- Data are kept within the EU, with safeguards for any transfer outside the EU.
- You have rights of access, correction, erasure, opposition, portability, and processing limitation (see cnil.fr).
- You may contact the DPO at dpo@inria.fr.
- You may lodge a complaint with CNIL.
- Participation is voluntary; no legal or contractual obligation to provide data.
- No profiling or automated decision-making is performed about you based on this processing.
If you consent, your consent record and date may be stored for fifteen (15) years on project servers.
Project data may be used to run transparency/audit experiments on ad platforms, including controlled ad targeting for research purposes.
Contact Person
Oana Goga
Inria Research Director
Phone: +33 1 77 57 80 13
Email: oana.goga@inria.fr