Privacy policy
Effective May 1, 2023
Your privacy matters to GLABS LSS so please take a moment to familiarize yourself with this Privacy Policy and contact us at support@glabs.me if you have any questions or queries.
WHEN THIS PRIVACY POLICY APPLIES
GLABS LSS Ltd. (referred to as “GLABS LSS” or “We”) builds and provides a range of Internet-based services that help thousands of companies daily to conduct procurement related transactions and interact with other businesses in new ways. Our brand is called GLABS and the Services include GLABS TSM, GLABS YARD, GLABS TMS, GLABS TASL, GLABS Driver APP. We refer to them collectively as “GLABS” or “the Services” throughout this Privacy Policy.
There are different ways you can use GLABS – you may be (i) (a user on behalf of) one of our customers with a subscription agreement; (ii) (a user on behalf of) one of our customers without a subscription agreement (referred to as a partner in GLABS); and/or (iii) a visitor to a page in GLABS that is available without signing in or creating an account at all.
We collect information about you as we are providing the Services. The information we collect, and how that information is used, depends on how you use GLABS. This information may contain personal data – information that can be used to identify an individual.
This Privacy Policy applies to personal data that customers (or their users) provide to GLABS LSS or GLABS LSS personnel when using the Services or is obtained by GLABS LSS through customers’ use of the Services. GLABS LSS has separate policies for other GLABS LSS services and websites.
This Privacy Policy is targeted at individuals who are users of the Services. It is meant to help you understand what information we collect, why we collect it and how you can access and update your personal data and where to go for further information.
GLABS may contain links to third-party websites that are not part of the Services. This Privacy Policy does not apply to such foreign websites. GLABS LSS is not responsible for the privacy practices or the content of websites outside the Services. Therefore, we recommend that you carefully read the privacy statements of such foreign sites.
Notice to our customers with a subscription agreement: This Privacy Policy is complimentary and works in conjunction with the subscription agreement and data processing agreement between GLABS LSS and each customer with a subscription agreement by offering further detail regarding such data processing activities. If you are a customer with a subscription agreement and do not have a data processing agreement in place with GLABS LSS for the Services and would like to add one to your agreement, please contact your GLABS LSS sales representative.
WHO IS RESPONSIBLE FOR ANY PERSONAL DATA COLLECTED?
We, GLABS LSS Ltd., a company registered in Hungary with registered number 01-09-414655 whose registered office is at Máté street 2., Budapest, 1163, Hungary are responsible for processing your personal data.
Your organisation (our customer) is the controller for the processing of your personal data and is responsible for making sure that the user’s privacy rights are respected and that required consents are obtained before entering personal data into the Services, including ensuring appropriate disclosures about third party data collection and use.
GLABS LSS acts as a data processor for our customers, acting on the lawful and technically feasible instructions of our customers within the scope of the Services we offer. The documentation to the Services is considered part of such instructions.
WHAT PERSONAL DATA DO WE GATHER?
We collect information about you as a user of GLABS and/or visitor to a page in GLABS that is available without signing in or creating an account at all. This information is generally only related to your role at your company, and is not related to you as a private person or as an individual consumer and may be either information that you provide to us or information that we obtain through your use of the Services.
Information that you provide to us
When creating a GLABS account, we will request that you (or your company) provide your personal data – your name, work e-mail address and the company you work for. You may complete your profile with other work-related information like your position and work contact information (but you can decide not to provide us with this information). If you are a user on behalf of one of our customers with a subscription agreement, your company may provide us further personal data in your personal profile like your employee number or an alternate login id necessary for the performance of the Services and/or authentication.
You are not obliged to provide any personal data to GLABS LSS. If you object to providing personal data to GLABS LSS, please contact your company for alternatives.
You (or our customer) may also provide us various type of personal data through transactions that use the custom field and form features in GLABS, like a Sourcing event or a Compliance assessment, or result in the sending of system email messages. Transaction documents uploaded into the Services may also include your personal data like when you are a signatory on an agreement uploaded to GLABS.
If you are a sole-proprietor or individual contractor or you have been requested by one of our customers to provide personal data in the Services as a private person in a custom form and you object to providing personal data to GLABS LSS, please contact our customer directly to investigate other options.
You (or our customer) may also provide us with personal information when using our customer support services in connection with the Services.
Personal data submitted to GLABS may not include sensitive personal information unless some type of sensitive personal information is expressly allowed by us regarding a specific aspect of the Services and is submitted by a customer only in accordance with the documentation. Sensitive personal information for the purposes of the Services and this Privacy Policy means government identification numbers or financial account numbers associated with individual persons (e.g. social security numbers, driver’s license numbers, or personal credit card or banking account numbers) and data designated as “Sensitive” or “Special Category” or the like requiring extra protective measures under the applicable data protection law (as defined in the data processing agreement between your organization and GLABS LSS). Please report any requests from our customers to you to submit sensitive personal information in GLABS to support@glabs.me so that we can take the appropriate steps to ensure the safety of your personal data (as well as the personal data of other users who might be affected).
Information that we obtain through your use of the Services
We will also collect information as you use the Services – how you use them, where you use them and when you use them and which transactions you engage in. This information is not provided by you but is automatically collected and stored as a result of your interaction with the Services. Such information may include:
the browsers and devices that you use to access the Services – this information is used for example to remind you to turn off a browser extension that may interfere with your use of GLABS;
your activity – we may collect log information with different detail levels about your activity in the Services so that we can retrospectively establish who accessed or modified data and when. This is essential for our customers to stay compliant and for the security of GLABS;
your location information – your location can be determined with varying degrees of accuracy by your IP address and helps us detect, prevent, and respond to fraud and security risks;
your engagement with system email messages – we may track the delivery and opening of the messages generated by GLABS at the individual level which helps us improve our log information and our customer support services.
We use various technologies to collect and store information, including cookies, pixel tags, local storage, such as browser web storage or application data caches, databases and server logs.
Information that we obtain through your use of third-party authentication services (Google, Microsoft, LinkedIn)
We may also receive information about you from third-party authentication services when you choose to sign in to GLABS (https://auth.GLABS.eu) with those services. When you use a third-party authentication service, your email address will be used to check for an existing GLABS account.
You will get to review the data that will be shared from your third-party account to GLABS. You can remove access at any time. If you remove access, GLABS will retain information about when you signed in with your third-party account.
YOU MAY ONLY USE THIRD-PARTY AUTHENTICATION SERVICES IF YOU ALREADY HAVE AN ACTIVE GLABS ACCOUNT. YOU ARE NOT OBLIGED TO USE THIRD-PARTY AUTHENTICATION SERVICES.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
We process your personal data collected in the Services for the purposes of:
providing the Services to your company;
maintaining and improving the Services;
communication with you and facilitating communication between you and other GLABS users;
measuring performance;
transaction security and preventing, detecting and investigating fraud.
More information on these purposes is available below:
Providing the Services to your company
We use your information to provide the Services to you (and your organisation) such as processing the requested transactions through GLABS.
Maintaining and improving the Services
We also use your information to ensure that the Services are working as intended, such as tracking outages or troubleshooting issues that you report to us. And we may use your information to make improvements to the Services, including developing new services.
Communication with you and facilitating communication between you and other GLABS users
We use your information to interact with you directly. For example, we may send you a notification about failed login attempts to your GLABS account. Or we may let you know about upcoming changes or improvements to the Services. And if you contact GLABS Support, we’ll keep a record of your request in order to help solve any issues you might be facing. We will use your information to facilitate your business relationships in GLABS.
Measuring performance
We may perform research into usage trends through statistical analysis. We use the results of such research to improve the Services. The research results are only reported on an aggregate basis.
Transaction security and preventing, detecting and investigating fraud
We may use personal data to prevent, detect and investigate fraud and to enforce our Terms and Conditions.
WHAT ARE OUR LEGAL GOUNDS FOR PROCESSING YOUR PERSONAL DATA?
We process your information for the purposes described in this policy, based on the following legal grounds:
with your consent;
when we’re pursuing legitimate interests;
when we’re providing a service;
when we’re complying with legal obligations.
More information on these legal grounds is available below:
With your consent
We ask for your agreement to process your information for specific purposes. For example, we ask for your consent to record the calls you make to GLABS Support for record-keeping, training and quality-assurance purposes. If your data is based on your consent, you may withdraw your consent at any time. (The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.)
When we’re pursuing legitimate interests
We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means that we process your information for things such as:
providing, maintaining and improving the Services to meet the needs of our users or our customers;
developing new products and features that are useful for our users or our customers;
understanding how our customers use the Services to ensure and improve the performance of the Services;
detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with the Services;
protect against harm to the rights, property or safety of our users, our customers or GLABS LSS as required or permitted by law;
performing research that improves the Services for our users or our customers;
enforcing legal claims, including investigation of potential violations of applicable Terms of Service.
When we’re providing a service
We process your data to provide a service you’ve asked for (including fulfilling our contractual obligations). For example, we process your information when you contact GLABS Support for help or to process a transaction which you have requested.
When we’re complying with legal obligations
We’ll process your data when we have a legal obligation to do so, for example, if we’re responding to legal process or an enforceable governmental request.
WHO WILL WE SHARE YOUR PERSONAL DATA WITH?
GLABS LSS will treat personal data as confidential. Your personal data is exclusively processed for the purposes referred to above and will only be shared with third parties on a strict need to know basis in the following cases:
with your consent;
to your potential or current business partners in GLABS;
for external processing,
for legal reasons.
More information on these cases is available below:
With your consent
We’ll ask for your consent before using your information for a purpose that isn’t covered in this Privacy Policy.
For external processing
We provide personal information to other GLABS LSS companies and other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. For example, we use third parties for website hosting.
For legal reasons
We will share personal information outside of GLABS if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
meet any applicable law, regulation, legal process or enforceable governmental request.
enforce applicable Terms of Service, including investigation of potential violations.
detect, prevent or otherwise address fraud, security or technical issues.
protect against harm to the rights, property or safety of our users, our customers or GLABS LSS as required or permitted by law
INTERNAL DATA TRANSFERS
As part of the Services offered to you the collected personal data may be transferred to authorized third parties, which may be located outside of the Economic European Area (EEA). By way of example, this may happen if one of our service providers is located in a country outside of the EEA. As far as these third parties have access to personal data in order to e process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures, GLABS LSS has taken the required organizational and/or contractual measures to ensure that your personal data is exclusively processed for the purposes mentioned above and that adequate levels of protection have been implemented in order to safeguard your personal data. This may include applying certain European Commission approved legal frameworks and transfer mechanisms for transfers to third parties in countries which have not been deemed to provide an adequate level of data protection as well as any additional local legal requirements.
YOUR RIGHTS
You have the right to access, modify and delete personal data about you although this may require approvals by your employer. To exercise these rights, GLABS LSS has procedures to allow updates to personal data in a timely manner. In most Services, the administrative contact for your company can directly change personal data by logging on to the Services and managing your account profile directly. In some Services, each individual user can self-administer his/her own user account details or changes may be requested by contacting GLABS Support at support@glabs.me.
Deletion of your personal data may require approval by your (current or former) employer. Requests to delete or anonymize personal data must be made to the administrative contact for your company and such steps may require GLABS LSS assistance.
If you are unable to access, correct, update, or delete your personal data because you are no longer an employee of the business that is the account holder, or your account has been terminated, you may contact the us at support@glabs.me. In each case, GLABS LSS will take reasonable measures to contact the customer that is responsible for the account and accommodate your request or respond in writing with the legal basis for denying the request within thirty (30) days.
You have the right to receive personal data that concerns you and which you have provided to GLABS LSS, in a structured, digital form and transmit such data to another party if this is technically feasible. You can export the personal data stored in your account profile if you want to back it up or use it with a service outside of GLABS or contact us at support@glabs.me for further information or for submitting such request.
We may charge a reasonable fee for the administrative costs of complying with unfounded, excessive or repetitive requests.
COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies that aim to automatically collect and store information when you interact with the Services. If you configure your browser to reject cookies from GLABS, you will not be able to access the Services. Personal data you submit while using GLABS is not stored in cookies except where necessary to perform web site security, service functionality and usage analytics. We do not place any third-party advertising tracking cookies on your computer during your use of the Services. The web pages you access when using the Services do not respond to „do not track“ signals sent by your browser.
SECURITY OF YOUR PERSONAL INFORMATION
We work hard to protect you and GLABS LSS from unauthorized access, alteration, disclosure, or destruction of information we hold. We have implemented commercially reasonable administrative, physical and technical safeguards which include data encryption, firewalls, physical access controls to buildings and files, and ongoing employee training and education. We have policies and procedures in place to limit access to our systems to only those employees and trusted third parties that have a need-to-know basis based on specific job function or role. We offer security features for your account like notification of failed login attempts and locking your account after 5 failed login attempts. We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems. We restrict access to personal information to GLABS LSS employees, contractors and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.
In the event we have a reasonable, good faith belief that an unauthorized party has gained access to or been disclosed personal information that we have collected or received through the Services, we will promptly notify our customers.
HOW LONG WE RETAIN YOUR DATA
We will retain personal data in active databases for varying lengths of time depending upon the specific Service, type of data, the agreement between GLABS LSS and your organization and applicable law in accordance. Customers are provided with user administration features with which they can remove or update elements of their users’ personal data. Personal data being processed by GLABS LSS for customers with a subscription agreement in the Services is deleted or obfuscated after expiration or termination of the customer’s agreement with some time delay to confirm termination and allow for log files to be overwritten, unless there is a legal obligation for GLABS LSS to retain the information, retention is required for some time (e.g. time necessary to resolve a dispute), or an alternate approach has been mutually agreed with the customer. Personal data stored in the Services for suppliers is retained longer due to the requirements for account administration, but we will work with the supplier to remove or anonymize personal data associated with users as soon as reasonably possible if there is no longer a legitimate need for retention.
FURTHER INFORMATION
If you have questions or concerns regarding this Privacy Policy, you should first contact your company’s administrator for the use of the Services. If you do not receive acknowledgment of your inquiry or your inquiry has not been satisfactorily addressed or you do not have an active customer relationship with GLABS LSS, please contact us at support@glabs.me for further information or for submitting such requests.If you remain unsatisfied by the handling of your complaint and the processing of your personal data by GLABS LSS, you may also lodge a complaint to the Hungarian National Authority for Data Protection and Freedom of Information whose visiting address is 22/c Szilágyi Erzsébet fasor, Budapest, 1125, Hungary. Please visit https://www.naih.hu for more information.