- Hinfact
- Legal
- Privacy policy
Privacy
policy.
Who is responsible
The controller of your personal data is Hinfact SAS, 6 rue Brindejonc des Moulinais, Bâtiment A, 31500 Toulouse, France, registered in Toulouse under number 843 408 022.
Our Data Protection Officer is Thibault Vandebrouck, CTO. You can reach him at dpo@hinfact.com.
What we collect and why
This website does not use advertising tools. Only if you accept, it measures its audience with Google Analytics and recognises the companies that visit it with Apollo.io. We only process personal data in the situations below.
| Situation | Data | Why, and on what basis | How long |
|---|---|---|---|
| You contact us (contact form or email) | First and last name, work email, and if you give them: phone, organisation, role, the products you are interested in, your message | To answer your request and follow up with you. Basis: our legitimate interest in answering you, or steps you ask for before a contract. | 3 years after our last exchange |
| You apply for a job | What you send with your application | Applications are made on Welcome to the Jungle, which handles them under its own privacy policy and passes them to us to run our recruitment. | 2 years after our last exchange, unless you ask us to delete it sooner |
| You visit the website | Technical logs from the host: IP address, browser, pages requested, date and time | To keep the website secure and running. Basis: our legitimate interest. | 1 year |
| You accept audience measurement | Pages visited, time spent, the website you came from, device, browser, approximate location, and a random identifier stored in a cookie | To understand how the website is used and improve it. Basis: your consent, which you can withdraw at any time. | Cookies: 13 months. Statistics in Google Analytics: 14 months |
| You accept marketing | Your IP address, the company it belongs to, the pages you visit and when, and a random identifier stored in your browser | To know which companies are interested in our products, so that our sales team can contact them. Basis: your consent, which you can withdraw at any time. | 3 years after the visit |
The contact form currently opens your own email application with your message ready to send to contact@hinfact.com. Nothing is sent until you send that email yourself.
Audience measurement and marketing
If you accept audience measurement in the cookie banner, we use Google Analytics, provided by Google Ireland Limited, which acts as our processor: it processes this data on our behalf and on our instructions. Google Analytics does not log or store your IP address; it only uses it to estimate your country and city. Its advertising features stay disabled.
Google may process this data in the United States. This transfer is covered by the EU–US Data Privacy Framework, under which Google LLC is certified, and by the European Commission’s standard contractual clauses.
If you accept marketing, we use Apollo.io, provided by ZenLeads Inc. (United States), which acts as our processor. It uses your IP address to recognise the company you work for and shows our sales team which companies visited which pages. Apollo.io is certified under the EU–US Data Privacy Framework, which covers this transfer.
If you reject or withdraw your consent, these tools do not load and what they stored in your browser is deleted. You can change your choice at any time with the Cookie settings link at the bottom of every page. Details in our cookie policy.
Content from other services
Some pages use content from other services. They receive your IP address and may apply their own privacy policies:
- YouTube (Google), for the film on our Manifesto page. The player only loads when you press play, from YouTube’s privacy-enhanced domain (youtube-nocookie.com).
- Welcome to the Jungle (Welcome Kit), for the list of open roles on our Careers page. Your browser requests the list directly from their servers.
Links to LinkedIn, Spotify, OpenStreetMap or our partners’ websites only send you there when you click them.
Who can see your data
Only the Hinfact team members who need it to answer you, the service providers who host our website and our email, and Google and Apollo.io if you accept audience measurement or marketing, all acting on our instructions. We never sell your data.
If the provider of a service we use processes data outside the European Union, the transfer is covered by the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Security
We protect personal data with technical and organisational measures: access limited to the people who need it, encrypted connections (HTTPS), secure email configuration and regular reviews of our security. Hinfact is ISO 27001 certified.
Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to:
- access the personal data we hold about you;
- have it corrected or completed;
- have it deleted;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw your consent at any time, for example to audience measurement or marketing;
- give instructions about what happens to your data after your death.
To exercise these rights, write to dpo@hinfact.com. We answer within one month. We may ask you to prove your identity, so that we never change or delete the data of the wrong person.
If you think we are not handling your data properly, you can file a complaint with the French data protection authority, the CNIL (cnil.fr).
Changes to this policy
We will update this policy when our practices change, for example if we add a new tool to the website. The date at the top of the page shows the latest version.