GDPR

PRIVACY AND PERSONAL DATA PROTECTION POLICY OF THE WEBSITE GLASSHOUSE.FR

Accessing and using the website glasshouse.fr (hereinafter 'the Website') may involve providing some personal data concerning you.
To preserve your trust, we, the company GLASSHOUSE SARL, invite you to review our policy, which describes the data collected, how it is used, and the rights you have regarding it.

1. WHO COLLECTS AND PROCESSES YOUR DATA?

The company responsible for processing personal data is GLASSHOUSE SARL, with a share capital of €180,000, registered with the Marseille Trade and Companies Register under number 517 570 339, with its headquarters at 36 Rue Benedit, 13004 Marseille, France.
As part of the Website and in accordance with Law No. 78-17 of January 6, 1978, as amended, and Regulation EU 2016/679 of April 27, 2016, we collect and process personal data concerning you to fulfill the services of the Website.
We also use the CleanTalk Anti-Spam service to protect our site from spam. When submitting a form (e.g., contact).

2. WHAT PERSONAL DATA DO WE COLLECT?

Through the Contact Form, we mandatorily collect data related to your name, first name, email address, the company you work for, as well as the subject and content of the message you wish to send us.
CleanTalk may process and store personal data such as your IP address, email, and the form content for a period of 7 days (or 45 days with an extended package). After this period, the data is deleted. By submitting a form, you consent to this processing.

3. WHY DO WE COLLECT YOUR DATA?

The data related to your identity, your company, and your role allows us to ensure that you are indeed a legal or natural person.
When using the Contact Form to request information about a service or for any general inquiry, the data is collected so that we can contact you in response to your message.

4. WHAT JUSTIFIES THIS COLLECTION?

The data will be collected and processed fairly and lawfully, and will be used to provide the services offered on the Website.
We only collect your personal data to the extent that you have expressly given your consent.
You may withdraw your consent at any time by sending a request to the following contact details :
By email : contact@glasshouse.fr
Or by postal mail : Glasshouse SARL - 36 rue Benedit - 13004 Marseille - France
The withdrawal of your consent only applies to future actions and does not affect the legality of the data processing carried out before the withdrawal.

5. WHO DO WE SHARE YOUR DATA WITH?

Our Company is the sole recipient of all the data collected and processed. Only authorized personnel within our Company may have access to this data.
Our IT service providers may occasionally access the data during their maintenance operations, but they are in no case allowed to perform any other data processing operation, such as modifying or using the data.

6. WHO ARE OUR DATA PROCESSORS?

In the context of data processing, we use:
- The company Altinea SAS, which ensures the hosting of all personal data processed on the Website, located at 9 rue du Faubourg, 39570 Nogna - France;
- The company CleanTalk, which provides anti-spam protection, located at 711 S Carson street, suite 4, Carson city, NV, 89701, USA;
We guarantee that our processors store data within the European Union and offer sufficient guarantees in implementing appropriate technical and organizational measures to meet the requirements of the EU Regulation 2016/679 and the French Data Protection Act.
In any case, all subcontracting is done in strict compliance with this document. We therefore guarantee that our subcontractor does not exceed the processing conditions defined herein.
The subcontractor may itself be authorized to subcontract part or all of its operations, provided that it strictly adheres to the provisions of Article 28 of the EU Regulation 2016/679 and this document.
However, as the data controller, we remain your sole point of contact.

7. WHAT ARE YOUR RIGHTS?

In accordance with current regulations, you have rights concerning your personal data.
To exercise these rights, you must write to us specifying the subject of your request and ensure proof of receipt of your request.
Any inquiry about your rights or any request to exercise your rights must be addressed to the following contacts:
By email: contact@glasshouse.fr
Or by post: Glasshouse SARL - 36 rue Benedit - 13004 Marseille - France
Any request to exercise your rights must be accompanied by a copy of your ID to prevent fraud and/or illegal access to your data.
However, certain personal information may be exempt from such requests under certain circumstances, for example, if it affects the rights and freedoms of others. If an exception applies, we will inform you when responding to your request.

8.1 Right of Access, Objection, Restriction, Deletion, and Rectification of Data

In accordance with current regulations, you have the right to: 
Access any of your personal data that we hold about you; 
Update any of your personal data that is outdated or incorrect; 
Restrict how we process your personal data; 
Request a copy of any personal data that we hold about you; 
Object to the use of your personal data; 
Object to the use of your personal data for marketing purposes.

8.2 Right to Data Portability

You have the right to data portability, allowing you to receive your data from the Company in a structured, commonly used, and machine-readable format if desired.
This right applies only to data that you have actively and knowingly provided or generated through your activity, such as via the Contact Form, excluding data derived or inferred from the information you provided. Only data processed automatically and collected based on your consent or a contract is subject to this right.
We reserve the right not to fulfill your request if the data involved does not meet the conditions stated above.
For data that does not meet the above criteria, you can only exercise the rights mentioned in the previous clause (Article 8.1).
We will not block the transfer of data covered by the right to portability to another data controller, either through your mediation or directly when technically possible. If direct transmission of the data to another data controller is not technically feasible, we will inform you and propose an alternative solution.
We are not responsible for any processing you perform on data obtained through the right to portability once you have retrieved it. Similarly, we are not responsible for the processing carried out by the company that obtained your data following a request made by you.

8.3 Right to Set Advance Directives

In accordance with current regulations, you may set advance directives regarding the use of your data after your death (e.g., retention, deletion, disclosure). You can modify or withdraw your instructions at any time.

8.4 Right to Lodge a Complaint with the CNIL

You are informed of your right to contact the CNIL in case of any legal or regulatory violation by the Company concerning the management of your personal data.
To do so, you can contact the CNIL via the following link: https://www.cnil.fr/fr/plaintes

9. HOW LONG DO WE KEEP YOUR DATA?

Data collected via the Contact Form is retained for the time needed to respond to your inquiries and, potentially, for the duration of any subsequent communications. We then archive this data for no longer than one (1) year from the date of collection or the last message you sent.
Additionally, we may retain anonymous or anonymized data through an irreversible process for an indefinite period for statistical reprocessing purposes. Given the anonymous nature of this data, it is not considered personal data under EU Regulation 2016/679.
In the event of exercising the right of access or rectification, data relating to identification documents is retained for the period provided for by Article 9 of the Criminal Procedure Code, which is one (1) year.
If you exercise the right to object, data relating to identification documents may be archived for the prescription period provided for in Article 8 of the Criminal Procedure Code, which is three (3) years.
If you exercise your right to object to receiving commercial solicitations, the data necessary to account for the exercise of your right, such as your email address, will be retained for three (3) years from the date of your objection and cannot be used for any other purpose.