Privacy Policy
Twinsight SAS attaches great importance to the protection of your personal data. This privacy policy informs you about how we collect, use and protect your data in accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679).
1. Data Controller
Company name: Twinsight SAS
Registered office: 43 rue Lachmann, 38000 Grenoble, France
RCS: Grenoble B 882 692 320
Contact: contact@twinsight-medical.com
2. Data Collected
We collect the following categories of personal data:
2.1. Data provided directly by you
- Contact/demo form: first name, last name, professional email address, reason for contact, message
- Applications sent by email: name, email address, CV, cover letter
2.2. Automatically collected data
- When you send the contact form: your IP address, kept only as a one-day hash to limit the number of requests per address, and a hash of your email address to refuse the same request sent twice within minutes
- Technical logs of our hosting provider (IP address, browser, page requested), kept 30 days for security and troubleshooting
- The map on the contact page loads its library from unpkg.com and its map tiles from OpenStreetMap: these services receive your IP address when the page is displayed
3. Purposes and Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Respond to contact/demonstration requests | Consent (Art. 6.1.a GDPR) |
| Manage job applications | Pre-contractual measures (Art. 6.1.b GDPR) |
| Protect the contact form against abuse (daily limit per address, duplicate check) | Legitimate interest (Art. 6.1.f GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
4. Data Recipients
Your personal data is intended for Twinsight SAS internal services involved in processing your request.
They may also be transmitted to:
• Our technical service providers, acting as processors and subject to confidentiality obligations: Google Ireland Limited (Firebase Hosting, Cloud Functions and Firestore: hosting of the site and storage of the requests) and Twilio SendGrid (delivery of the notification email to our team)
• Competent authorities upon legal request
No data is sold or rented to third parties.
5. Data Transfers Outside the EU
The site and the contact requests are hosted by Google in the European Union (Belgium and the Netherlands). The notification email that forwards your request to our team is delivered by Twilio SendGrid, which may process it in the United States; this transfer is governed by appropriate safeguards (European Commission standard contractual clauses, EU-US Data Privacy Framework).
6. Retention Period
- Contact/demo requests: 3 years from receipt
- Applications: Maximum 2 years from receipt
- IP address and email hashes used against abuse: 1 day at most
- Hosting technical logs: 30 days
After these periods, your data is deleted or anonymized.
7. Your Rights
In accordance with GDPR, you have the following rights:
- Right of access (Art. 15): obtain a copy of your data
- Right of rectification (Art. 16): correct inaccurate or incomplete data
- Right to erasure (Art. 17): request deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18): restrict processing of your data
- Right to portability (Art. 20): receive your data in a structured format
- Right to object (Art. 21): object to processing of your data
- Right to withdraw consent: at any time, without affecting the lawfulness of previous processing
To exercise these rights: send an email to contact@twinsight-medical.com with the subject "Exercise of my GDPR rights" specifying your request and attaching a copy of your ID.
We undertake to respond within one month (extendable by two months if necessary).
8. Right to Complaint
If you believe that the processing of your data violates your rights, you can file a complaint with the CNIL:
CNIL (French Data Protection Authority)
3 Place de Fontenoy - TSA 80715, 75334 Paris Cedex 07, France
Tel : +33 1 53 73 22 22
www.cnil.fr
9. Data Security
Twinsight SAS implements appropriate technical and organizational measures to ensure the security and confidentiality of your personal data against any unauthorized access, modification, disclosure or destruction:
- Data encryption in transit (HTTPS/TLS)
- Restricted data access (principle of least privilege)
- Secure and regularly backed up servers
- Staff awareness of data protection
10. Cookies
This site sets no cookies and uses no analytics or advertising tracker.
11. Policy Modifications
We reserve the right to modify this privacy policy at any time. Any modification will be published on this page with a new update date. We encourage you to regularly consult this page to stay informed about how we protect your data.
12. Contact
For any questions regarding this privacy policy or the processing of your personal data, you can contact us:
Email: contact@twinsight-medical.com
Address: Twinsight SAS, 43 rue Lachmann, 38000 Grenoble, France
Last updated: October 2026
Version: 1.1