Privacy policy

Data controller

GBA, société par actions simplifiée, 2 Sentier de la Caserne, 55300 Lacroix-sur-Meuse, France, registered in France under number 947 549 085.

What we collect

When you apply through this site, we collect what you enter in the form.

Identity and contact

First and last name, date of birth, email address, country of residence. Depending on the form you are shown, we also ask for your postal address, city and postal code, your phone number, the phone you use, whether you have run an Instagram account before, how much time you can give, and what draws you to this work.

Your choices in the form

That you have read this policy, whether you agree to receive our emails, and the date of each answer.

What we add to your application

Two things you do not type. If you reached the form through one of our links, a short code that says which one it was; if you did not, it says only that. And which version of the form you were shown, because we try more than one to see which is easier to fill in. Neither says anything about you.

Legal basis: our legitimate interest in knowing which of our links work and which version of our form is easier to fill in.

Why each one

Your name, date of birth, email and country let us handle your application; you must be 18 or over to apply. Your postal address, city and postal code are used to prepare your invoicing if we start working together. Your phone number lets us reach you about your application.

Legal basis: steps taken at your request before any contract.

If your application is successful, we then collect what we need to work together and to pay you: your handle on our team server, and the wallet address required to issue your payment, which we ask you for when you first withdraw your earnings.

Changing or correcting it

Ask your coach, and we change it for you. If you have not joined our team space, use the address in the legal notice: see Your rights below.

If you start the form without finishing it

We keep the steps you have already sent, so we can see where our form is too long. Legal basis: our legitimate interest in improving how we recruit. An application that is not completed is deleted 12 months after our last contact, like any other.

Why

To process your application

Legal basis: pre-contractual steps taken at your request.

To protect the form from automated sign-ups

To limit repeated sends, we read the IP address your connection comes from when you send the form. We use it to count sends over ten minutes, hold it only in our server's memory, and never write it down. Legal basis: our legitimate interest in protecting our form from abuse.

To work together and pay you

Legal basis: performance of the contract.

To send you emails, only if you ticked the box for it in the form

News about Gravity Brand, openings, offers and information about our activities. Legal basis: your consent. The box is optional and never ticked in advance. You can withdraw your consent at any time, through the unsubscribe link in every one of these emails or by writing to us; this does not affect the emails already sent.

We do no profiling, and we do not sell your data to anyone.

How long

Unsuccessful or abandoned application

12 months after the last contact, then deleted.

While we are working together

For as long as the collaboration lasts.

After a collaboration ends

3 years, so we can answer a question about a past payment.

Emails you agreed to receive

Until you withdraw your consent, and at most 3 years after your last interaction with us (a click in one of our emails, a message from you). Your address is then removed from our mailing list.

Who we share it with

Your data is accessible to the members of our team who need it, and is hosted by our technical providers: Airtable, Inc. for the application form and the database, Discord, Inc. for the team communication server, and Cloudflare, Inc. for hosting the site, and Sendinblue SAS (Brevo) for sending our emails. These providers act on our behalf and are not permitted to use your data for their own purposes.

Airtable, Discord and Cloudflare are based in the United States. The corresponding transfers rely on the European Commission's standard contractual clauses. Brevo is based in France; where its own subcontractors are outside the European Union, the same safeguards apply.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability.

To exercise them, write to us at the address given in the legal notice. We reply within one month at the latest.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris.

Cookies

We use one advertising cookie, set by Meta (Facebook). It lets us measure how many people our adverts reach, and how many of them apply. When it is active, Meta receives the page you are on, your IP address and your browser details, and can link your visit to an advert you saw.

In the European Union, the EEA, the United Kingdom and Switzerland we ask before setting it. Refusing takes one click, exactly like accepting, and we remember your answer so we do not ask again. If you refuse, nothing is set and nothing is sent.