Privacy Policy
Last updated: September 2026
Gladtek SAS (“Gladtek”, “We”, “Us”, or “Our”) is committed to protecting the privacy and personal data of visitors and clients who use our website (https://www.gladtek.com) and related digital services (the “Service”).
This Privacy Policy explains how We collect, use, disclose, and safeguard Your personal information in accordance with the European Union General Data Protection Regulation (EU Regulation 2016/679, “GDPR”) and the French Data Protection Act (Loi Informatique et Libertés n° 78-17 as amended).
1. Data Controller Identification
The Data Controller responsible for the processing of Your personal data on this Website is:
- Entity: Gladtek SAS (Société par Actions Simplifiée)
- Headquarters: 75017 Paris, France
- Website: https://www.gladtek.com
- Privacy & Contact Email: contact@gladtek.com
2. Information We Collect
We collect information that You provide directly to Us, as well as data gathered automatically when You interact with the Service.
A. Information You Provide to Us Directly
When You interact with Us (such as through our dynamic contact form, consultation requests, or direct email correspondence), We may collect:
- Identity Information: First name, last name, professional title, and company/organization name.
- Contact Details: Business email address, telephone number, and office location.
- Inquiry Details: Project requirements, requested services (such as Jahia CMS, Vaadin, IBM ODM/JRules, Astro, or AI Governance), estimated budget, timeline, and any additional information submitted in message fields.
B. Information Collected Automatically (Usage Data)
When You navigate our Website, certain technical data is automatically logged by our edge network and infrastructure:
- Technical & Connection Data: Internet Protocol (IP) address, browser type and version, operating system, device identifiers, language preferences, and screen resolution.
- Navigation & Interaction Data: Referring URL, pages visited, date and time of visits, time spent on individual pages, link clicks, and navigation flows.
3. Purposes and Legal Bases for Processing
We process Your personal data only when We have a valid legal basis under Article 6 of the GDPR:
| Processing Purpose | Categories of Data | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Responding to contact requests & quotes | Name, email, phone, company, project details | Contractual / Pre-contractual steps (Art. 6(1)(b)) and Legitimate interest in answering business inquiries (Art. 6(1)(f)) |
| Providing client services & project delivery | Professional contact details, billing data, technical specifications | Performance of a contract (Art. 6(1)(b)) |
| Website security, DDoS mitigation & abuse prevention | IP address, connection timestamps, user-agent, bot verification tokens | Legitimate interest in maintaining network security and site availability (Art. 6(1)(f)) |
| Website analytics & performance optimization | Aggregated navigation paths, page views, feature interactions | Consent (Art. 6(1)(a)), gathered via our cookie consent banner |
| Compliance with legal & accounting obligations | Invoices, client communications, tax and transaction records | Legal obligation (Art. 6(1)(c)) |
4. Cookies and Tracking Technologies
We use cookies and similar technologies (such as local storage and session tokens) to ensure our Website functions correctly and, with Your prior consent, to analyze how visitors engage with our content.
A. Strictly Necessary Cookies (Always Active)
These cookies and storage items are essential for the operation of the Website and cannot be disabled in our systems:
- Consent Preferences (
cc_cookie): Stored via our cookie manager (vanilla-cookieconsent) to record Your cookie consent choices for up to 6 months. - Security & Integrity: Session tokens and verification states used by edge security providers (such as Cloudflare and bot verification challenges) to prevent automated abuse.
- Display Preferences: Local storage items (such as
theme) preserving Your preferred light/dark mode setting.
B. Analytics Cookies (Subject to Consent)
We use privacy-conscious analytics tools (specifically PostHog, routed through EU endpoints and our own sub-domain proxy t.gladtek.com / eu.posthog.com) to track visitor metrics, bounce rates, and popular content.
- You can accept, reject, or customize analytics tracking at any time via the cookie consent banner or by clicking Manage preferences in the footer of our site.
5. Third-Party Service Providers and Subprocessors
We do not sell, rent, or trade Your personal data. To deliver and secure our Service, We share data only with trusted service providers bound by strict confidentiality and data protection agreements:
- Cloudflare, Inc. (Hosting, CDN, DNS, and Edge Security): Cloudflare acts as a data processor providing content delivery, DDoS mitigation, and bot detection (Turnstile). Data transfers are protected under Standard Contractual Clauses (SCCs).
- PostHog, Inc. (Product Analytics): Configured with EU cloud storage and reverse-proxy routing for anonymized or consent-backed usage insights.
- Communication & Email Infrastructure: Transactional email delivery and communication platforms utilized exclusively to receive and respond to client inquiries.
6. International Data Transfers
When data is processed outside the European Economic Area (EEA), Gladtek ensures an adequate level of data protection by relying on:
- European Commission adequacy decisions (such as the EU-U.S. Data Privacy Framework);
- Standard Contractual Clauses (SCCs) adopted by the European Commission, accompanied by supplementary technical security measures (e.g., encryption in transit and at rest).
7. Data Retention Periods
We keep Your personal information only as long as necessary to fulfill the purposes for which it was collected:
- Prospective Client Inquiries: Retained for a maximum of 3 years following the date of last contact or inquiry, in accordance with CNIL recommendations.
- Client & Contractual Records: Retained for the duration of the commercial relationship, plus statutory limitation periods (typically 5 to 10 years for accounting, tax, and commercial liability requirements under French law).
- Analytics & Log Data: Server logs are routinely purged after 30 to 90 days. Aggregated analytics data is retained in accordance with PostHog’s retention policies (typically 12 to 14 months).
- Cookie Consent Choices: Retained for 6 months, after which You will be prompted to refresh Your preferences.
8. Your Rights Under GDPR and French Law
Under the General Data Protection Regulation and the French Data Protection Act, You have the following rights regarding Your personal data:
- Right of Access (Art. 15 GDPR): Obtain confirmation as to whether Your personal data is being processed, and receive a copy of that data.
- Right to Rectification (Art. 16 GDPR): Request correction of inaccurate, incomplete, or outdated personal data.
- Right to Erasure (“Right to be Forgotten”, Art. 17 GDPR): Request deletion of Your personal data when it is no longer necessary or when You withdraw consent.
- Right to Restriction of Processing (Art. 18 GDPR): Request temporary restriction of processing while a claim is being evaluated.
- Right to Data Portability (Art. 20 GDPR): Receive Your personal data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21 GDPR): Object at any time to the processing of Your personal data based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent for analytics or marketing communications at any time without affecting the lawfulness of prior processing.
- Post-Mortem Directives (Art. 85 French Data Protection Act): Set guidelines for the preservation, deletion, and communication of Your personal data after Your death.
How to Exercise Your Rights
To exercise any of these rights, please email us at contact@gladtek.com with the subject line “Privacy / Data Protection Request”. We may request reasonable proof of identity to protect Your information against unauthorized access, and We will respond within thirty (30) days in accordance with the GDPR.
Right to Lodge a Complaint
If You believe that our processing of Your personal data violates data protection regulations, You have the right to lodge a complaint with the competent supervisory authority:
- France (CNIL): Commission Nationale de l’Informatique et des Libertés
- Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- Phone: +33 (0)1 53 73 22 22
- Website: https://www.cnil.fr
9. Security of Your Personal Data
Gladtek implements state-of-the-art technical and organizational measures to safeguard Your information against accidental loss, unauthorized access, alteration, or disclosure. These measures include:
- TLS 1.3 / HTTPS encryption for all data in transit;
- Access controls, strong authentication, and principle of least privilege for backend administrative access;
- Regular security audits, dependency vulnerability scanning, and edge firewall protections.
10. Children’s Privacy
Our website and services are targeted exclusively at commercial enterprises, professionals, and adults over the age of 18. We do not knowingly collect personal data from minors under the age of 16. If You become aware that a child has provided Us with personal data, please contact Us at contact@gladtek.com so We can promptly delete the information.
11. Links to External Sites
Our Website may contain links to external sites (such as GitHub, LinkedIn, YouTube, partner platforms, and client references) that are not operated by Us. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites. We encourage You to review the privacy notices of any external site You visit.
12. Updates to This Privacy Policy
We may periodically revise this Privacy Policy to reflect updates in our legal obligations, technical architecture, or service offerings. Any changes will be posted on this page with an updated “Last updated” date. We recommend checking this page periodically to stay informed about how We protect Your personal data.
13. Contact Us
If You have questions, requests, or concerns regarding this Privacy Policy or how Gladtek handles Your personal data, You can contact Us directly:
- By Email: contact@gladtek.com
- Online Inquiry: Via our Contact Page
Have questions about data protection or our services?
Our team is available to assist with compliance inquiries, security specifications, or project consultations.