Last revised on 24 July 2023.
Cirrus Assessment is committed to protecting your right to privacy.
Cirrus Assessment (“Cirrus” or “We”) is a Dutch company that provides a cloud-based Software-as-a-Service product (the “Cirrus platform” or “platforms”) to exam providers for creating high-stakes exam questions and delivering exams online. The company is headquartered in Utrecht, The Netherlands. For more contact information, see below.
Security and privacy are of the utmost importance to us. This Privacy Policy explains the types of information collected and recorded on our Websites* and how we use this information.
For any additional questions or more information about our Privacy Policy, please contact us at privacy-[email protected].
* For the purposes of this Policy, ‘Websites’ refer to all public websites Cirrus operates and that link to this Policy. On these Websites, Cirrus operates as a Data Collector. ‘Websites’ does not include any ‘Cirrus platform’ or ‘platforms’ that are managed by our Customers (End Users), for which Cirrus is the Data Processor. Also see ‘Data Cirrus collects and its purpose’ below.
Cirrus’ commitment
Our company is built on the trust of exam providers and students taking high-stakes exams on Cirrus exam platforms. To maintain that trust, we are committed to ensuring transparency, providing security, and protecting the privacy of data on all our systems.
We promise:
- We will keep your personal information personal and private.
- We do not sell or rent your personal information to anyone.
- We will not share or disclose your personal information except as necessary to provide our Services or as otherwise described in this Policy, without first providing you with notice and the opportunity to consent.
Cirrus as Data Controller & GDPR
Cirrus is subject to the GDPR. The GDPR differentiates between Data Controllers and Processors. Data Controllers determine the purposes and means of processing Personal Data, while Data Processors process Personal Data on behalf of the Controller.
On our Websites, Cirrus is the Data Controller of your information. When processing Personal Data as a Controller, Cirrus complies with the requirements set forth in Article 6 of the GDPR on the ‘Lawfulness of Processing’. According to the GDPR, processing is lawful if and only if at least one of the following conditions applies:
- You have given your consent to the processing of your Personal Data for one or more specific purposes. Please refer to the ‘Consent’ section at the bottom of this Policy.
- The processing is necessary for the performance of a contract between you and us or for taking steps at your request prior to entering into a contract.
- The processing is necessary to comply with a legal obligation to which we are subject.
- The processing is necessary for the performance of a task carried out in the public interest.
- The processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights and freedoms that require the protection of Personal Data.
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- The right to access, update or to delete the information We have on you
- The right of rectification
- The right to object
- The right of restriction
- The right to data portability
- The right to withdraw consent
If you wish to be informed about the Personal Information we hold about you or want it to be removed from our systems, please contact us at [email protected].
Data Cirrus collects and its purpose
This Policy applies to the following categories of data subjects:
Website visitors:
Those who visit our Websites cirrusassessment.com and help.cirrusassessment.com.
Types of information collected:
- Standard visitor information supplied by browsers
- IP addresses
- Access dates and times
Website form submitters:
Those who opt to provide a name and email address or other contact information to receive communications from Cirrus, fill out a survey, or provide feedback on our Websites.
Types of information collected (* is mandatory):
- First and last name*
- Organisation name*
- Email address*
- Phone number
Purpose
- Operation of our Websites: To monitor and improve the operation of our Websites.
- Statistics: To gain statistics and usage information to see how visitors interact with our Websites and how we can improve their experience.
- Security: Elimination of errors and malfunctions, prevention of crime and improve data protection.
- Marketing/Sales: To get a better understanding of who is interested in our services so we can further develop and improve our products and services.
You may receive a newsletter or marketing material. We may do that either if We believe there is a legitimate interest for You to receive it. Or, in the absence of such legitimate interest, only after receiving your explicit consent via the Website form. - Personal Data of job applicants: If you apply for a vacancy at Cirrus, We will collect and process all the information that you voluntarily share with us in relation to a potential employment.
Deletion and retention
Cirrus will retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
For the continuity of our company, long-term relationships are important. Prospect data is kept for a maximum of 4 years after collecting it, for audit purposes in case a cold lead is interested in our services again. If data becomes irrelevant at an earlier stage, it will be deleted.
Application data deleted no later than 4 weeks after the end of application process. Data on applicants who may be relevant in the future will be kept for one year, after obtaining permission.
Exclusions
This Policy does not apply to Customers and End Users on cirrusplatform.com domains (Cirrus Platforms). Read the Introduction part of this Policy for more information about the difference between Website visitors and Platform users.
How information is collected
Log Files
Cirrus follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this as part of hosting services’ analytics.
The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.
Anonymous user data
In order to analyse visitor trends and improve the user experience, Cirrus also uses WP Statistics to collect anonymous visitor data on its website, including pages visited, referring/exit page, browser type, date and time stamp. These are not linked to any information that is personally identifiable, and the linked IP addresses are anonymised.
Website forms
Web forms allow Cirrus to get in contact with Website visitors. Filling out a form is voluntary and not necessary for using the Websites. It is, however, necessary if you want to get in touch with Cirrus, or if you want to sign up for services such as a newsletter or webinar. Depending on the nature of the information, We never keep it longer than necessary or until you unsubscribe. Prospect information will be kept for up to 4 years.
If you wish to be informed what Personal Information We hold about you and if you want it to be removed from our systems, please contact us at [email protected].
Cookies and Web Beacons
We use different types of cookies on our website. These are small harmless text files that track, for example, which pages you have visited. During your visit to our Websites, you will be asked for your consent to use them.
By using cookies, we may collaborate with third-party vendors and service providers to enhance our website’s functionalities. Also see our List of Sub-Processors. These partners offer specialised services, including performance monitoring, hosting, data processing, marketing, and advertising. Rest assured, we do not share your data with third parties unless they too have implemented proper privacy policies.
To gain a better understanding of how cookies are utilised on our websites, we recommend reviewing the privacy policies of the respective third-party providers listed below in the ‘Cookies and Web Beacons’ section. This will provide you with additional information about the use of cookies on our websites.
Below is an overview of the (types of) cookies that our Websites use:
Necessary
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Cookie | Duration | Description |
---|---|---|
_lfa | 1 year 1 month 4 days | This cookie is set by the provider Leadfeeder to identify the IP address of devices visiting the website, in order to retarget multiple users routing from the same IP address. |
cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category . |
cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
CookieLawInfoConsent | 1 year | Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie. |
elementor | never | This cookie is used by the website's WordPress theme. It allows the website owner to implement or change the website's content in real-time. |
viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
Functional
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Cookie | Duration | Description |
---|---|---|
_hjAbsoluteSessionInProgress | 30 minutes | Hotjar sets this cookie to detect a user's first pageview session, which is a True/False flag set by the cookie. |
bcookie | 1 year | LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID. |
bscookie | 1 year | LinkedIn sets this cookie to store performed actions on the website. |
lang | session | LinkedIn sets this cookie to remember a user's language setting. |
lidc | 1 day | LinkedIn sets the lidc cookie to facilitate data center selection. |
UserMatchHistory | 1 month | LinkedIn sets this cookie for LinkedIn Ads ID syncing. |
Performance
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytics
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie | Duration | Description |
---|---|---|
_ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
_ga_* | 1 year 1 month 4 days | Google Analytics sets this cookie to store and count page views. |
_ga_V7YDQ8J0Q4 | 2 years | This cookie is installed by Google Analytics. |
_gcl_au | 3 months | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. |
_hjFirstSeen | 30 minutes | Hotjar sets this cookie to identify a new user’s first session. It stores the true/false value, indicating whether it was the first time Hotjar saw this user. |
_hjRecordingEnabled | never | Hotjar sets this cookie when a Recording starts and is read when the recording module is initialized, to see if the user is already in a recording in a particular session. |
_hjRecordingLastActivity | never | Hotjar sets this cookie when a user recording starts and when data is sent through the WebSocket. |
_hjSession_* | 30 minutes | Hotjar sets this cookie to ensure data from subsequent visits to the same site is attributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site. |
_hjSessionUser_* | 1 year | Hotjar sets this cookie to ensure data from subsequent visits to the same site is attributed to the same user ID, which persists in the Hotjar User ID, which is unique to that site. |
CONSENT | 2 years | YouTube sets this cookie via embedded YouTube videos and registers anonymous statistical data. |
ln_or | 1 day | Linkedin sets this cookie to registers statistical data on users' behaviour on the website for internal analytics. |
Advertisement
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Cookie | Duration | Description |
---|---|---|
li_sugr | 3 months | LinkedIn sets this cookie to collect user behaviour data to optimise the website and make advertisements on the website more relevant. |
test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
VISITOR_INFO1_LIVE | 5 months 27 days | YouTube sets this cookie to measure bandwidth, determining whether the user gets the new or old player interface. |
YSC | session | Youtube sets this cookie to track the views of embedded videos on Youtube pages. |
yt-remote-connected-devices | never | YouTube sets this cookie to store the user's video preferences using embedded YouTube videos. |
yt-remote-device-id | never | YouTube sets this cookie to store the user's video preferences using embedded YouTube videos. |
yt.innertube::nextId | never | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen. |
yt.innertube::requests | never | YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen. |
Others
Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
Cookie | Duration | Description |
---|---|---|
_hjIncludedInSessionSample_3209364 | 2 minutes | Description is currently not available. |
_lfa_test_cookie_stored | less than a minute | Description is currently not available. |
AnalyticsSyncHistory | 1 month | No description |
li_gc | 5 months 27 days | No description |
How do I control my cookie preferences?
You can manage your cookies preferences by clicking on the “Settings” button and enabling or disabling the cookie categories on the popup according to your preferences.
In addition, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete cookies. To find out more out more on how to manage and delete cookies, visit wikipedia.org, www.allaboutcookies.org.
Children’s Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Cirrus does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, We strongly encourage you to contact us immediately and We will do our best efforts to promptly remove such information from our records.
Contact us at [email protected].
Contact & address information
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at [email protected].
Cirrus Assessment
House Modernes
Lange Viestraat 2b
3511 BK Utrecht
The Netherlands
Consent
By using our Websites, you hereby consent to our Privacy Policy and agree to its terms.