Effective May 1, 2023
There are different ways you can use GLABS – you may be (i) (a user on behalf of) one of our customers with a subscription agreement; (ii) (a user on behalf of) one of our customers without a subscription agreement (referred to as a partner in GLABS); and/or (iii) a visitor to a page in GLABS that is available without signing in or creating an account at all.
We collect information about you as we are providing the Services. The information we collect, and how that information is used, depends on how you use GLABS. This information may contain personal data – information that can be used to identify an individual.
WHO IS RESPONSIBLE FOR ANY PERSONAL DATA COLLECTED?
We, GLABS LSS Ltd., a company registered in Hungary with registered number 01-09-414655 whose registered office is at Máté street 2., Budapest, 1163, Hungary are responsible for processing your personal data.
Your organisation (our customer) is the controller for the processing of your personal data and is responsible for making sure that the user’s privacy rights are respected and that required consents are obtained before entering personal data into the Services, including ensuring appropriate disclosures about third party data collection and use.
GLABS LSS acts as a data processor for our customers, acting on the lawful and technically feasible instructions of our customers within the scope of the Services we offer. The documentation to the Services is considered part of such instructions.
WHAT PERSONAL DATA DO WE GATHER?
We collect information about you as a user of GLABS and/or visitor to a page in GLABS that is available without signing in or creating an account at all. This information is generally only related to your role at your company, and is not related to you as a private person or as an individual consumer and may be either information that you provide to us or information that we obtain through your use of the Services.
Information that you provide to us
When creating a GLABS account, we will request that you (or your company) provide your personal data – your name, work e-mail address and the company you work for. You may complete your profile with other work-related information like your position and work contact information (but you can decide not to provide us with this information). If you are a user on behalf of one of our customers with a subscription agreement, your company may provide us further personal data in your personal profile like your employee number or an alternate login id necessary for the performance of the Services and/or authentication.
You are not obliged to provide any personal data to GLABS LSS. If you object to providing personal data to GLABS LSS, please contact your company for alternatives.
You (or our customer) may also provide us various type of personal data through transactions that use the custom field and form features in GLABS, like a Sourcing event or a Compliance assessment, or result in the sending of system email messages. Transaction documents uploaded into the Services may also include your personal data like when you are a signatory on an agreement uploaded to GLABS.
If you are a sole-proprietor or individual contractor or you have been requested by one of our customers to provide personal data in the Services as a private person in a custom form and you object to providing personal data to GLABS LSS, please contact our customer directly to investigate other options.
You (or our customer) may also provide us with personal information when using our customer support services in connection with the Services.
Information that we obtain through your use of the Services
We will also collect information as you use the Services – how you use them, where you use them and when you use them and which transactions you engage in. This information is not provided by you but is automatically collected and stored as a result of your interaction with the Services. Such information may include:
the browsers and devices that you use to access the Services – this information is used for example to remind you to turn off a browser extension that may interfere with your use of GLABS;
your activity – we may collect log information with different detail levels about your activity in the Services so that we can retrospectively establish who accessed or modified data and when. This is essential for our customers to stay compliant and for the security of GLABS;
your location information – your location can be determined with varying degrees of accuracy by your IP address and helps us detect, prevent, and respond to fraud and security risks;
your engagement with system email messages – we may track the delivery and opening of the messages generated by GLABS at the individual level which helps us improve our log information and our customer support services.
We use various technologies to collect and store information, including cookies, pixel tags, local storage, such as browser web storage or application data caches, databases and server logs.
Information that we obtain through your use of third-party authentication services (Google, Microsoft, LinkedIn)
We may also receive information about you from third-party authentication services when you choose to sign in to GLABS (https://auth.GLABS.eu) with those services. When you use a third-party authentication service, your email address will be used to check for an existing GLABS account.
You will get to review the data that will be shared from your third-party account to GLABS. You can remove access at any time. If you remove access, GLABS will retain information about when you signed in with your third-party account.
YOU MAY ONLY USE THIRD-PARTY AUTHENTICATION SERVICES IF YOU ALREADY HAVE AN ACTIVE GLABS ACCOUNT. YOU ARE NOT OBLIGED TO USE THIRD-PARTY AUTHENTICATION SERVICES.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
We process your personal data collected in the Services for the purposes of:
providing the Services to your company;
maintaining and improving the Services;
communication with you and facilitating communication between you and other GLABS users;
transaction security and preventing, detecting and investigating fraud.
More information on these purposes is available below:
Providing the Services to your company
We use your information to provide the Services to you (and your organisation) such as processing the requested transactions through GLABS.
Maintaining and improving the Services
We also use your information to ensure that the Services are working as intended, such as tracking outages or troubleshooting issues that you report to us. And we may use your information to make improvements to the Services, including developing new services.
Communication with you and facilitating communication between you and other GLABS users
We use your information to interact with you directly. For example, we may send you a notification about failed login attempts to your GLABS account. Or we may let you know about upcoming changes or improvements to the Services. And if you contact GLABS Support, we’ll keep a record of your request in order to help solve any issues you might be facing. We will use your information to facilitate your business relationships in GLABS.
We may perform research into usage trends through statistical analysis. We use the results of such research to improve the Services. The research results are only reported on an aggregate basis.
Transaction security and preventing, detecting and investigating fraud
We may use personal data to prevent, detect and investigate fraud and to enforce our Terms and Conditions.
WHAT ARE OUR LEGAL GOUNDS FOR PROCESSING YOUR PERSONAL DATA?
We process your information for the purposes described in this policy, based on the following legal grounds:
with your consent;
when we’re pursuing legitimate interests;
when we’re providing a service;
when we’re complying with legal obligations.
More information on these legal grounds is available below:
With your consent
We ask for your agreement to process your information for specific purposes. For example, we ask for your consent to record the calls you make to GLABS Support for record-keeping, training and quality-assurance purposes. If your data is based on your consent, you may withdraw your consent at any time. (The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.)
When we’re pursuing legitimate interests
We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means that we process your information for things such as:
providing, maintaining and improving the Services to meet the needs of our users or our customers;
developing new products and features that are useful for our users or our customers;
understanding how our customers use the Services to ensure and improve the performance of the Services;
detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with the Services;
protect against harm to the rights, property or safety of our users, our customers or GLABS LSS as required or permitted by law;
performing research that improves the Services for our users or our customers;
enforcing legal claims, including investigation of potential violations of applicable Terms of Service.
When we’re providing a service
We process your data to provide a service you’ve asked for (including fulfilling our contractual obligations). For example, we process your information when you contact GLABS Support for help or to process a transaction which you have requested.
When we’re complying with legal obligations
We’ll process your data when we have a legal obligation to do so, for example, if we’re responding to legal process or an enforceable governmental request.
WHO WILL WE SHARE YOUR PERSONAL DATA WITH?
GLABS LSS will treat personal data as confidential. Your personal data is exclusively processed for the purposes referred to above and will only be shared with third parties on a strict need to know basis in the following cases:
with your consent;
to your potential or current business partners in GLABS;
for external processing,
for legal reasons.
More information on these cases is available below:
With your consent
For external processing
For legal reasons
We will share personal information outside of GLABS if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
meet any applicable law, regulation, legal process or enforceable governmental request.
enforce applicable Terms of Service, including investigation of potential violations.
detect, prevent or otherwise address fraud, security or technical issues.
protect against harm to the rights, property or safety of our users, our customers or GLABS LSS as required or permitted by law
INTERNAL DATA TRANSFERS
You have the right to access, modify and delete personal data about you although this may require approvals by your employer. To exercise these rights, GLABS LSS has procedures to allow updates to personal data in a timely manner. In most Services, the administrative contact for your company can directly change personal data by logging on to the Services and managing your account profile directly. In some Services, each individual user can self-administer his/her own user account details or changes may be requested by contacting GLABS Support at email@example.com.
Deletion of your personal data may require approval by your (current or former) employer. Requests to delete or anonymize personal data must be made to the administrative contact for your company and such steps may require GLABS LSS assistance.
If you are unable to access, correct, update, or delete your personal data because you are no longer an employee of the business that is the account holder, or your account has been terminated, you may contact the us at firstname.lastname@example.org. In each case, GLABS LSS will take reasonable measures to contact the customer that is responsible for the account and accommodate your request or respond in writing with the legal basis for denying the request within thirty (30) days.
You have the right to receive personal data that concerns you and which you have provided to GLABS LSS, in a structured, digital form and transmit such data to another party if this is technically feasible. You can export the personal data stored in your account profile if you want to back it up or use it with a service outside of GLABS or contact us at email@example.com for further information or for submitting such request.
We may charge a reasonable fee for the administrative costs of complying with unfounded, excessive or repetitive requests.
COOKIES AND SIMILAR TECHNOLOGIES
SECURITY OF YOUR PERSONAL INFORMATION
We work hard to protect you and GLABS LSS from unauthorized access, alteration, disclosure, or destruction of information we hold. We have implemented commercially reasonable administrative, physical and technical safeguards which include data encryption, firewalls, physical access controls to buildings and files, and ongoing employee training and education. We have policies and procedures in place to limit access to our systems to only those employees and trusted third parties that have a need-to-know basis based on specific job function or role. We offer security features for your account like notification of failed login attempts and locking your account after 5 failed login attempts. We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems. We restrict access to personal information to GLABS LSS employees, contractors and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.
In the event we have a reasonable, good faith belief that an unauthorized party has gained access to or been disclosed personal information that we have collected or received through the Services, we will promptly notify our customers.
HOW LONG WE RETAIN YOUR DATA
We will retain personal data in active databases for varying lengths of time depending upon the specific Service, type of data, the agreement between GLABS LSS and your organization and applicable law in accordance. Customers are provided with user administration features with which they can remove or update elements of their users’ personal data. Personal data being processed by GLABS LSS for customers with a subscription agreement in the Services is deleted or obfuscated after expiration or termination of the customer’s agreement with some time delay to confirm termination and allow for log files to be overwritten, unless there is a legal obligation for GLABS LSS to retain the information, retention is required for some time (e.g. time necessary to resolve a dispute), or an alternate approach has been mutually agreed with the customer. Personal data stored in the Services for suppliers is retained longer due to the requirements for account administration, but we will work with the supplier to remove or anonymize personal data associated with users as soon as reasonably possible if there is no longer a legitimate need for retention.