Privacy policy
Last updated: 9 August 2026
This is a translation provided for convenience. In case of any discrepancy of interpretation, the French version of this policy prevails.
This site collects one single piece of personal data: your email address, and only if you choose to enter it. This page explains what we do with it, who has access to it, how long we keep it and how to have it deleted.
Data controller
- Identity
- Salah-Eddine Sriar — enseigne Glazen
- Contact
- [email protected]
Data collected
- Email address
- Entered voluntarily by you in the waiting list form.
- IP address
- Processed transiently, at the moment the form is submitted, for the sole purpose of verifying that the request comes from a human being and of limiting the number of submissions per minute. It is neither stored in a database nor linked to your email address.
- Display language
- The language you selected travels with your request so that emails reach you in that language. It cannot be used to identify you.
- Audience measurement
- Pages viewed, referring source, country, device and browser type. This information is strictly anonymous: nothing is written to your device, and none of it can identify you or recognise you from one visit to the next.
No other data is collected. This site has no advertising tracker, no social network button, and uses no external font service. Traffic measurement is anonymous and sets no cookie.
Purpose and legal basis
Your email address is used solely to notify you of the opening of the Glazen store and to send you news about the brand.
The legal basis is your consent, under Article 6(1)(a) GDPR. This consent is collected in two stages: entering your address, then clicking the confirmation link received by email. Until that second action takes place, no signup is recorded. The timestamp of that click is the proof of your consent.
Recipients and processors
- Resend — sending and hosting of the list
- Plus Peculiar, Inc. Contacts and sending for this domain are processed on its infrastructure located in Ireland, within the European Union. No transfer outside the EU is required for the waiting list to work.
- Cloudflare — site hosting and bot protection
- Cloudflare, Inc., a US company. It delivers the pages and provides the Turnstile service, which distinguishes human visitors from automated bots. Turnstile sets no advertising cookie and builds no browsing profile. Any transfers to the United States are governed by the European Commission's standard contractual clauses and by Cloudflare's certification under the EU-US Data Privacy Framework.
- PostHog — traffic measurement
- PostHog Inc. Traffic data is processed on its European infrastructure, located in Germany. It is anonymous: nothing is stored on your device and visitor counting relies on a non-reversible technical fingerprint. Session recording is disabled. As the company is incorporated in the United States, any transfers are governed by the European Commission’s standard contractual clauses.
Your email address is never sold, rented or passed on to third parties for commercial purposes.
Retention period
Your address is kept until you withdraw your consent. If you have no interaction with us for three years, it is deleted automatically. An unused confirmation link expires after 24 hours and leaves no trace.
Your rights
Under the GDPR, you have the following rights:
- Access — obtain a copy of the data concerning you.
- Rectification — correct an incorrect address.
- Erasure — have your address deleted.
- Restriction — request a temporary freeze of processing.
- Objection — object to the processing at any time.
- Portability — retrieve your data in a readable format.
- Withdrawal of consent — at any time, without justification.
The fastest route remains the unsubscribe link at the bottom of every email we send: one click is enough, with no need to write to us. For any other request, write to [email protected]; we reply within one month at the latest.
Complaints
If you consider that the processing of your data does not comply with the law, you may lodge a complaint with the French data protection authority — cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — or with the supervisory authority of your own country of residence.
Cookies
This site sets no analytics or advertising cookie. Traffic is measured without writing anything to your device: Article 82 of the French Data Protection Act, which requires consent, applies to reading from or writing to the user’s equipment — and there is none here. Turnstile may use a technical token strictly necessary for bot detection; it is exempt on the same grounds, as a tracker indispensable to providing the service you requested.