- Hinfact
- Legal
- Privacy policy
Privacy
policy.
Who is responsible
The controller of your personal data is Hinfact SAS, 6 rue Brindejonc des Moulinais, Bâtiment A, 31500 Toulouse, France, registered in Toulouse under number 843 408 022.
Our Data Protection Officer is Thibault Vandebrouck, CTO. You can reach him at dpo@hinfact.com.
What we collect and why
This website does not use analytics or advertising tools, and does not build a profile of its visitors. We only process personal data in the situations below.
| Situation | Data | Why, and on what basis | How long |
|---|---|---|---|
| You contact us (contact form or email) | First and last name, work email, and if you give them: phone, organisation, role, the products you are interested in, your message | To answer your request and follow up with you. Basis: our legitimate interest in answering you, or steps you ask for before a contract. | 3 years after our last exchange To confirm |
| You apply for a job | What you send with your application | Applications are made on Welcome to the Jungle, which handles them under its own privacy policy and passes them to us to run our recruitment. | 2 years after our last exchange, unless you ask us to delete it sooner To confirm |
| You visit the website | Technical logs from the host: IP address, browser, pages requested, date and time | To keep the website secure and running. Basis: our legitimate interest. | To confirm with the host |
The contact form currently opens your own email application with your message ready to send to contact@hinfact.com. Nothing is sent until you send that email yourself.
Content from other services
Some pages use content from other services. They receive your IP address and may apply their own privacy policies:
- YouTube (Google), for the film on our Manifesto page. The player only loads when you press play, from YouTube’s privacy-enhanced domain (youtube-nocookie.com).
- Welcome to the Jungle (Welcome Kit), for the list of open roles on our Careers page. Your browser requests the list directly from their servers.
Links to LinkedIn, Spotify, OpenStreetMap or our partners’ websites only send you there when you click them.
Who can see your data
Only the Hinfact team members who need it to answer you, and the service providers who host our website and our email, acting on our instructions. We never sell your data.
If the provider of a service we use processes data outside the European Union, the transfer is covered by the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Security
We protect personal data with technical and organisational measures: access limited to the people who need it, encrypted connections (HTTPS), secure email configuration and regular reviews of our security. Hinfact is ISO 27001 certified To confirm.
Your rights
Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the right to:
- access the personal data we hold about you;
- have it corrected or completed;
- have it deleted;
- restrict or object to its processing;
- receive it in a portable format;
- give instructions about what happens to your data after your death.
To exercise these rights, write to dpo@hinfact.com. We answer within one month. We may ask you to prove your identity, so that we never change or delete the data of the wrong person.
If you think we are not handling your data properly, you can file a complaint with the French data protection authority, the CNIL (cnil.fr).
Changes to this policy
We will update this policy when our practices change, for example if we add a new tool to the website. The date at the top of the page shows the latest version.