Privacy policy

Data controller

GLEAM (SASU), 42 Grande Rue, 01430 Saint-Martin-du-Frêne, France. For any question about your data: contact@openprogress.fr.

Data collected and purposes

• Audit booking: name, email address and, if you provide them, company, phone, company size and tools used, to organise the meeting and send you the confirmation. Emails are delivered by the Resend service.
• Contact form: name, email address, phone and message, solely to handle your request. The form opens your own email app: nothing is stored by the website, the message reaches us by email.
• Simulator: the tools and amounts you enter stay in your browser (local storage), so you can find your simulation again. They are not sent to us.
• Technical data: server logs generated automatically, to secure and maintain the website.

No sensitive data is requested.

Legal bases

Requests and bookings are processed as pre-contractual steps taken at your request and on our legitimate interest in answering you. Technical data relies on our legitimate interest in securing the service.

Recipients

Your information is never sold or transferred. The website is hosted by WINHEBERG, on servers located in France. Booking emails go through Resend (servers in Ireland, European Union).

Retention period

Exchanges related to a request are kept as long as needed to handle it, then deleted within three years of the last contact at most. Technical logs are kept for twelve months at most.

Cookies

The website sets no advertising or analytics cookies. A single functional cookie remembers the language you chose (one year). The browser's local storage keeps your simulation; you can clear both at any time from your browser settings.

Your rights

You have the right to access, rectify, erase, restrict and object, which you can exercise at contact@openprogress.fr. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Security

Appropriate technical and organisational measures protect your data against unauthorised access, loss or alteration: encrypted connection (HTTPS), hardened server, security updates, restricted access.