Privacy in the Glimska app
This page says what the app records about your use of it, why, and what you can do about it. The photos you upload and the files you get back are governed by the data processing agreement with your company; this page is not about those.
1. The activity log
The app keeps a record of who did what and when: logging in, uploading, downloading, opening a product, reporting a problem. For each action we keep the time, the username, the company, the action, a short device label (for example "iPhone · Safari") and the IP address. It exists so we can answer your company's questions ("who deleted this car?") and trace faults. This log is stored on servers inside the European Union.
2. Usage measurement
We also want to measure how the app is used, so we can improve it. We do this only if you agree to it when you sign in. For that we use PostHog's analytics software, which runs for us on servers in Frankfurt.
Before you answer, and if you choose "No thanks": we only measure, anonymously and without cookies, which pages are visited, just like on our website. No name is attached, no cookie is set, and nothing is recorded.
If you choose "Accept":
- the measurement is tied to your company account, not to your name or email address;
- we may make a recording of your session to see where the app is awkward. In it all photos and images are blocked (they are never recorded), everything you type is masked, and all text on the screen is made unreadable, including names, filenames and car and frame codes;
- we then keep a cookie and an identifier in your browser, so we remember your choice and can follow your session;
- your IP address is used to determine the country and is not stored there;
- the measurement data travels through our own domain to PostHog and is processed for us under a data processing agreement. We share it with nobody and do not use it for advertising;
- session recordings are kept for thirty days; the other measurement data stays with PostHog for our plan's retention period, currently up to one year. You can always ask us to delete your data sooner.
The content of the photos you upload is never measured or recorded, in any case.
3. Why this is allowed
The activity log in point 1 is part of delivering the service to your company and tracing faults (article 6(1)(b) and (f) GDPR). The usage measurement in point 2 we carry out only on the basis of your consent (article 6(1)(a) GDPR). You give it when you sign in and you can withdraw it yourself at any time under Account > Privacy; the measurement is then off for your account.
4. Your rights
You can withdraw your consent at any time and object to the measurement: switch it off under Account > Privacy in the app, or email studio@glimska.com and we will switch it off for your account. You can also ask to see what we have recorded, have it corrected or deleted. You will hear from us within a month. If you switch on "Do Not Track" in your browser, the measurement respects it.
5. Who we are
Glimska is a trade name of Disk Media, the Netherlands. For this processing we are the controller for the usage measurement and the processor for the work on your photos. The full privacy statement of our website is at glimska.com/privacy.