Privacy policy

Gistin, Abu Dhabi, United Arab Emirates, contact@gistin.ae, is the data controller for the personal data collected through this website.

We only collect personal data when you actively send it to us:

• Through the contact form: full name, e-mail address, optional company, message content.
• Through any direct e-mail you send us.

We do not build advertising profiles and we do not resell anything. The site does, however, measure its audience and may load an advertising conversion tag: both are described in the next section.

Personal data sent through the contact form is used exclusively to reply to your request, scope a potential pilot project or partnership, and keep a record of the exchange. We do not use it for marketing or sell it to third parties.

Visits are counted by Umami, an audience measurement tool we host ourselves, in its default configuration. Umami sets no cookie and writes nothing to your device: a visit is attached to a session through a fingerprint computed on the server from your IP address and your browser, with a salt that is rotated every day, so the same visitor cannot be recognised from one day to the next nor from one site to another. What is recorded is the page viewed, the referring page, the country, the device type and the browser language. The instance runs in its default configuration, which purges nothing on its own. تُحفظ هذه الإحصاءات لمدة 25 شهرًا، وهو الحد الأقصى الذي توصي به الهيئة الفرنسية لحماية البيانات، ثم تُحذف عبر عملية تنظيف مجدولة.

When a Google Ads identifier is configured on the site, gtag.js is loaded from googletagmanager.com to attribute conversions to advertising campaigns. Google is then a recipient of your browsing data on this site and sets its own cookies. When no identifier is configured, nothing is loaded and no request reaches Google.

The following parties process personal data on our behalf, or receive it as part of the service they provide:

• OVHcloud (France): hosting of the site and of its server logs.
• Resend, Resend Inc. (United States): delivery of the e-mail generated by the contact form. Everything you type into that form, including your name, e-mail address, company and message, passes through Resend's infrastructure in the United States before reaching contact@gistin.ae.
• Umami, self-hosted by us in France: audience measurement. No third party receives this data.
• Google (Ireland and United States): advertising conversion measurement, only when a Google Ads identifier is configured, and the YouTube player of the award video, served in youtube-nocookie.com mode.
• X Corp. (United States): the news article covering the award embeds a post from X, whose widget is loaded from platform.twitter.com. X therefore sees your IP address and your browser when you open that article.

Resend, Google and X are companies established in the United States. Sending a message through the contact form, or opening the news article that embeds a post from X, therefore involves a transfer of personal data to the United States, framed by the standard contractual clauses those providers publish. If you would rather avoid that transfer, write to contact@gistin.ae directly instead of using the form.

Contact requests land in a mailbox and stay there until they are deleted by hand. No automatic deletion is in place today, so no period can honestly be announced. Ask us at contact@gistin.ae and your message will be deleted.

You can ask us at any time, by writing to contact@gistin.ae, to:

• Access the personal data we hold about you.
• Correct or update inaccurate data.
• Delete your data, subject to our legal obligations.
• Restrict or object to certain processing operations.
• Receive a copy of your data in a portable, machine-readable format.