Privacy Policy

Glanceable (or "we") is committed to respecting privacy and personal data protection rules, i.e., any information relating to an identified or identifiable natural person, to which it has access in the course of its activities.

In this context, Glanceable complies with the applicable regulations concerning personal data protection, including the provisions of the amended "Informatique et libertés" law of January 6, 1978, and the General Data Protection Regulation (EU Regulation 2016/679), the "GDPR" (hereinafter collectively referred to as the "Applicable Regulations").

Ensuring the security and confidentiality of the personal data of its clients and their employees / collaborators is an absolute priority for Glanceable.

This personal data protection policy (the "Personal Data Protection Policy") aims to present to you ("you") Glanceable's commitments in this area, and particularly the measures implemented for the protection of the data entrusted to it.

Glanceable, data controller or data processor?

Depending on the processing operation concerned, Glanceable acts as either a data controller or a data processor.

  • Under what circumstances is Glanceable a data controller? : A data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing.

For example, when personal data is collected by Glanceable for its recruitment and candidate management, its marketing and prospects, its client / partner / supplier / service provider relationships - and particularly within the framework of their contractual relationships, its websites and the forms embedded therein, as well as the newsletter it distributes, Glanceable acts as a data controller.

  • Under what circumstances is Glanceable your data processor? : A data processor is a natural or legal person who processes personal data on behalf of the data controller.

In the context of the services provided by Glanceable, clients and beneficiaries of said services may also process personal data as data controllers.

Therefore, and only if Glanceable is required to access, or in any way process, personal data on their behalf when using the services it offers, Glanceable acts as a data processor within the meaning of the Applicable Regulations.

In this context, Glanceable commits to complying with all provisions of the Applicable Regulations for data processors, and in particular to implementing appropriate technical and organizational measures aimed at ensuring data security and offering products that respect the principles of data protection by design and by default.

Finally, and most importantly, Glanceable includes in all contracts under which it acts as a data processor the mandatory contractual stipulations imposed by the Applicable Regulations, thereby ensuring its clients not only technical but also contractual compliance.

What are Glanceable's commitments regarding personal data protection?

Glanceable commits to complying with the Applicable Regulations for all personal data processing operations it carries out.

Glanceable is committed to the protection of personal data. It undertakes to ensure a high level of protection for the personal data it accesses.

More generally, Glanceable commits to respecting the following principles:

  • Lawfulness, fairness, transparency: personal data is processed lawfully, fairly, and transparently;
  • Purpose limitation: personal data is collected for specified, explicit, and legitimate purposes, and is not further processed in a manner incompatible with those purposes;
  • data minimization: personal data is kept adequately, relevantly, and limited to what is necessary in relation to the purposes for which it is processed;
  • accuracy: personal data is accurate, kept up to date, and all reasonable measures are taken to ensure that inaccurate data, in relation to the purposes for which it is processed, is erased or rectified without undue delay.

Glanceable commits to complying with all other principles imposed by the Applicable Regulations, particularly concerning security, the rights granted to data subjects, personal data retention periods, and obligations related to cross-border personal data transfers, where applicable.

Glanceable adheres to the principles of data protection by design and by default. Thus, during the development, design, selection, or use of any products or services that rely on personal data processing, Glanceable takes into account data protection requirements.

Glanceable contractually requires its sub-processors (service providers, suppliers, etc.) to maintain the same level of personal data protection.

Who are the recipients of personal data processed by Glanceable?

Personal data is only accessible to authorized personnel and when strictly necessary.

Furthermore, depending on the processing operations concerned and exclusively to achieve the purposes outlined in this Personal Data Protection Policy, personal data collected by the various means mentioned below may be communicated and/or shared with Glanceable's sub-processors, suppliers, service providers, and partners, to whom Glanceable, as a reminder, contractually imposes strict confidentiality and data protection measures, and whose compliance it guarantees.

Finally, Glanceable may be compelled to disclose personal data at the request of judicial authorities or, more generally, if a legal or regulatory provision requires it.

What personal data does Glanceable collect?

What data?

In accordance with the data minimization principle derived from the GDPR, Glanceable only collects and processes personal data strictly necessary for the purposes outlined in this Personal Data Protection Policy.

The following categories of personal data may be processed, among others: first name, last name, address, email address, password, phone number, job title, IP address, connection data, and browsing data.

When Glanceable acts as a data processor on your behalf, the type of data processed and, more generally, the processing of this personal data is carried out in strict accordance with your contractually defined instructions.

Origin of processed data?

Glanceable collects information when:

  • you browse the website;
  • you submit an application;
  • you respond to one of the forms on the website;
  • you make requests to us (e.g., exercising your rights);
  • you subscribe to the newsletter;
  • you use the chatbot;
  • Glanceable prepares a quote or a contract;
  • where applicable, and depending on the nature of the products and/or services concerned, we perform the contract that binds us with you.

For what purposes and on what legal bases is your personal data processed?

The processing of your personal data is justified by different grounds (legal bases) depending on how we use the personal data (the purpose concerned).

Legal Bases

The legal bases for our main processing activities are as follows:

  • consent: you accept the processing of your personal data through express consent (checkbox, acceptance banner, etc.). You may withdraw this consent at any time;
  • the contract: the processing of personal data is necessary for the performance of the contract to which you have consented;
  • legitimate interest: Glanceable has a commercial interest in processing your personal data, particularly to improve its service offering, customer relations, and commercial prospecting, which is justified, balanced, and does not infringe upon your privacy. Unless otherwise specified, you may object at any time to processing based on legitimate interest by notifying Glanceable;
  • legal or regulatory provisions: the processing of your personal data is made mandatory by a legislative or regulatory text.

Purposes

The purposes of our main processing activities are as follows:

  • communicate with our prospects and customers, and provide them with the necessary documentation for establishing our commercial proposals;
  • provide our users, customers, and partners with all services or benefits offered by Glanceable;
  • manage our business relationship;
  • enable your navigation on our sites and, where applicable, the submission of an application or subscription to a newsletter;
  • recruitment management.

We may also use your personal data for administrative purposes or any other purpose required by applicable law.

What is the data retention period?

Personal data is retained in accordance with legal provisions for a period not exceeding that necessary for the purposes for which it is collected and processed.

How is data protected?

Glanceable implements all appropriate technical and organizational measures, in accordance with the state of the art, considering the nature and scope of personal data, and the context and risks presented by their processing, to preserve the security of personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion, or unauthorized access to this data.

The security and confidentiality of personal data rely on everyone's good practices. This is why we ask you not to disclose your personal data to third parties who may impersonate Glanceable.

In the event of a confirmed personal data breach as defined by the GDPR, Glanceable undertakes to report this breach to the French supervisory authority, the CNIL, and, in case of high risk, to inform you without undue delay.

Are personal data transferred outside the European Union?

Unless required by law, and as far as possible and preferably, Glanceable does not transfer any collected personal data to a country outside the European Union. However, if such processing occurs, Glanceable will frame these transfers in accordance with the requirements of the Applicable Regulations and will inform you within the framework of a contractual relationship.

What are your rights and how can you exercise them?

In accordance with the Applicable Regulations, you have the following rights:

Glanceable strives to provide you with clear, transparent, and easily accessible information regarding the processing of your personal data.

Furthermore, in accordance with the Applicable Regulations, you may, at any time, exercise your rights of access, rectification, and erasure of your personal data, as well as your rights to restrict and object to processing, to withdraw your consent, to data portability of your personal data, and the right to determine the fate of your personal data after your death.

You also have the right to lodge a complaint with the National Commission for Information Technology and Civil Liberties (the "CNIL") in the event of a violation of the Applicable Regulations.

These rights can be exercised at any time, either by:  info@glanceable.io

To do so, please include with your request the necessary information for your identification, as well as any other information required to confirm your identity.

When Glanceable acts as a data processor, you are responsible for ensuring the rights of the data subjects are respected. Glanceable then undertakes, as far as possible and in accordance with the Applicable Regulations, to assist you in fulfilling this obligation.

Changes

Glanceable reserves the right to adapt this Personal Data Protection Policy, particularly in light of the legal and regulatory context and the CNIL's guidelines, and undertakes to inform you on its website of any related changes or additions.

‍