Privacy policy

This is a translation of the French original. In case of discrepancy, the French version prevails.

LookID intends to make the control of your data and respect for your privacy a fundamental concern, in keeping with our values of trust and transparency.

In accordance with the General Data Protection Regulation (GDPR) No. 2016/679, which came into force on 25 May 2018, we are committed to applying a very strict policy regarding your personal data.

Our policy is likely to change, in particular due to legislative and regulatory developments, and we therefore invite you to consult it regularly.

1. Types of data collected

A. The data you provide

On our website

To access the resources of the website available at https://www.lookid.com and to allow you to contact the service, we may collect your email address, the first and last names of the person on whose behalf you access our service, your telephone number, your country and, where applicable, the content of the message you send us.

For your account / subscription

To benefit from the services as a User, you must be registered with LookID through our website or our mobile app. However, you can search for an ID without being registered first.

LookID collects all the personal data you provide during your initial registration as a User, namely: last name, first name, mobile phone, email and a check of your identity card (to certify your identity).

If you sign in with a third-party account

You can create your account or sign in with an account you hold with a third-party identity provider. In that case, the provider sends us your email address, or a relay address if you choose to hide yours, your first and last names as they appear on your account, and a technical identifier of your account. This data is used only to create your LookID account and to recognise you when you next sign in. This sign-in gives no access to your mailbox or to any other service of the provider. At the date of this version, the providers offered are Google and Apple.

If you link your mailbox to LookID

LookID offers an optional feature that searches your mailbox for invoices and documents concerning your assets, in order to offer to add them to your inventory. This feature is only activated if you link your mailbox yourself and authorise LookID with your email provider. The data we collect in this context is detailed in section 6 "Access to your mailbox". In short, it consists of the address of the linked mailbox, the access tokens issued by your email provider, the sender, subject and date of messages with an attachment that may be an invoice, and the attachments themselves (PDFs and images).

To contact User support

When you contact our User support, we may collect:

  • your email address if you send us an email and/or your last name, first name, address and possibly your telephone number and email if you send us a form;
  • the content of the messages you send us, by email or by form.

B. The data we collect automatically through your use of our services

We record usage data when you access our service (or use it in any way).

In particular, LookID may collect, store and even use the following data: IP address, visitor number on the user's website, statistics on pages viewed, conversation histories, browsing histories, history of downloaded resources, physical location (city, for example), and any other information provided by the user (name, email address) or allowing them to be identified.

We use login identifiers and cookies to improve your browsing experience and to analyse your use of our services.

Information about the cookies used on our website is available in our COOKIE MANAGEMENT POLICY, appended to this document.

2. Use of your data

We process your personal data for the following purposes and on the following legal bases:

Type of processing, purpose Legal basis for the processing
Processing and managing requests and transactions, and providing our services under the general terms of sale and specific contracts, including for the use of features and services and the execution of any payment. Performance of the contract (GDPR, Article 6(1)(b)).
Searching the mailbox you have linked for invoices and documents, in order to offer to create assets in your inventory and to attach invoices, user manuals, warranty or maintenance contracts to your assets. Consent (GDPR, Article 6(1)(a), GDPR, Article 7), which you give by linking your mailbox and can withdraw at any time by disconnecting it.
Compliance with a regulation (e.g. activity logging). Legal obligation (GDPR, Article 6(1)(c)).
Sending newsletters by email, managing mailing list subscriptions. Consent (GDPR, Article 6(1)(a), GDPR, Article 7).
Maintaining, guaranteeing and improving the quality of our products and services, in particular by carrying out and analysing satisfaction surveys and analysing User feedback, and by processing personal data in a User database, which makes it possible to identify a returning User, better assess requirements and wishes, improve the quality and personalisation of communications, and design offers specially adapted to needs. Legitimate interest (GDPR, Article 6(1)(f)).
Prospecting to promote offers and services. Legitimate interest for professionals. Consent for private individuals (GDPR, Article 6(1)(a), GDPR, Article 7).
Preservation of rights, for the purposes of preventing offences, bringing or defending legal claims, defending LookID's interests in the event of a dispute, preserving IT security, and identifying fraud risks. Legitimate interest (GDPR, Article 6(1)(f)).

Data from your mailbox is never used for any purpose other than the one indicated above. It is used neither for prospecting, nor for advertising, nor for improving our services, nor for training artificial intelligence models.

3. Data controller

LookID is solely responsible for the processing of its users' personal data.

LookID is a registered trademark and an application of ValueGuard SAS, a company registered with the Brest Trade and Companies Register (RCS) under number B 931 080 345, whose registered office is at 110 rue Charles Nungesser 29490 GUIPAVAS, France, represented by W3, a company registered with the Brest RCS under number B 509 686 267 and whose registered office is at the same address, in its capacity as President.

LookID is not affiliated with any email provider. The providers listed in section 6.8 do not provide the invoice import feature and are not responsible for it.

4. Recipients of the data

The Personal Data collected is intended for LookID, the data controller. Only the people involved in processing the data for one of the above purposes may access your data, and only for that purpose.

LookID does not sell or transfer any data to third parties. We do not share your personal data with third parties without first informing you and obtaining your consent. Whenever you receive a communication about the products and services of our partners, we assure you that your contact details have not been passed on: LookID sends the communication on the partner's behalf.

The following may have access to some of your data:

  • Other LookID users, when verifying an asset or item.
  • Processors providing services on behalf of LookID, in particular:
    • Performing services,
    • Managing requests and enquiries,
    • Personalising content,
    • Carrying out maintenance operations and technical developments,
    • Securing online payments and fighting fraud,
    • Collecting User reviews,
    • Providing analytics or audience measurement solutions,
    • Hosting the platform and storing documents: by Amazon Web Services, Inc in Europe (Ireland).
    • Automated analysis of invoices and documents found in your mailbox (detection, reading and extraction of information): Anthropic PBC. This provider receives the sender, subject and file names of preselected messages, then the content of the attachments kept. It is contractually bound not to retain this data beyond the processing and not to use it to train its models.

Our processors access your data on the basis of contracts setting out their obligations regarding the protection of the security and confidentiality of the data.

  • Police, judicial or administrative authorities, when we are legally obliged to do so or in order to protect the rights, property and security of LookID.

Data may also be transferred to public bodies and institutions where legally required (for example at the request of the tax authorities or the judicial authorities).

5. Is data transferred outside the European Union?

Personal data may be transferred to organisations located outside the European Union ("third countries") where (a) such a transfer is necessary for the use of a feature and the performance of the service, (b) the law requires it, (c) or you have given your consent. In that case, we ensure that the transfer complies with the legislation on the transfer of personal data and, in particular, that a sufficient level of protection of your personal data is guaranteed, notably through Standard Contractual Clauses.

This is the case for the "Invoices from your mailbox" feature: the automated analysis provider mentioned in section 4 is established in the United States. The data sent to it (sender, subject, file names and content of the attachments kept) is transferred on the basis of its certification under the EU–US Data Privacy Framework or, failing that, the European Commission's Standard Contractual Clauses, supplemented by a commitment not to retain the data and not to use it to train models. You accept this transfer by linking your mailbox; you can end it at any time by disconnecting it.

6. Access to your mailbox

This section describes the "Invoices from your mailbox" feature. It applies whatever email provider you use. The supported providers and the provisions specific to each of them are set out in section 6.8.

6.1 What you authorise

When you link your mailbox, your email provider shows you a consent screen on behalf of LookID. LookID requests the following permission there, and no other:

  • Read your messages and their attachments, read-only.

LookID also asks for the email address and identifier of your email account, in order to display the linked mailbox in your LookID account and to recognise the same mailbox if you link it again.

LookID requests no permission to send, modify, delete or organise messages, nor any access to your contacts, your calendar, your online files or any other service of your provider.

The authorisation is obtained through the provider's authentication mechanism (OAuth 2.0 protocol), on the website as in the iOS and Android apps. LookID never knows your password.

6.2 What LookID reads

LookID does not read your mailbox as a whole. Our servers query your mailbox with a filter that only keeps messages:

  • with an attachment in PDF, JPG, JPEG or PNG format;
  • received during the last 24 months on the first pass, then only messages received since the previous pass;
  • excluding sent messages, drafts, junk mail and trash.

For each message kept, LookID reads:

  • the sender's address and name;
  • the subject of the message;
  • the date of receipt;
  • the name, type and size of each attachment;
  • the content of the attachments, only when the previous elements suggest that it may be an invoice or a document relating to an asset.

The text of messages (the "body" of the email) may be received from the provider along with the technical structure of the message, but LookID does not use it, does not store it and does not pass it on to any third party.

The passes are automatic: an initial pass after connection, then a daily night-time pass. No one at LookID reads your messages. Human access to this data only occurs in the following cases: with your explicit agreement to solve a problem you report to us, for security reasons (investigating abuse or fraud), to comply with a legal obligation, or on aggregated and anonymised data for internal operational needs.

6.3 What LookID never does with your mailbox

  • LookID sends no email from your mailbox.
  • LookID does not modify, delete, move or organise any message.
  • LookID does not read your contacts.
  • LookID does not store the text of your messages.
  • LookID does not use data from your mailbox to show you advertising, to build an advertising profile or to sell it.
  • LookID does not use data from your mailbox to develop, improve or train artificial intelligence models, whether its own or those of third parties.
  • LookID does not transfer this data to third parties, except to the processors strictly necessary for the feature listed in section 4, or when the law requires it.

6.4 What LookID keeps

Data Why Where How long
Email address and identifier of your email account Display the linked mailbox, recognise a reconnection LookID database As long as the mailbox is linked, then kept without tokens in the connection history
Access tokens issued by your provider (access token and refresh token) Query your mailbox on your behalf without asking for your password again LookID database, encrypted Until the mailbox is disconnected, when they are revoked with the provider and erased
Technical identifier of the message, date of receipt, sender, subject Recognise messages already examined and never offer you the same invoice twice LookID database As long as the mailbox is linked
Name, type, size and digital fingerprint of each attachment examined, and the result of the examination (invoice kept or discarded, and why) Same reason; operating statistics of the feature LookID database As long as the mailbox is linked
Content of the attachments kept as proposals (PDF or image) and extracted information (seller, product, price, date, serial number) Present them to you on the "Invoices found" page so that you decide what to do with them LookID document storage At most 90 days if you do not act on the proposal; erased immediately if you ignore it or disconnect the mailbox
Content of the attachments you have approved They become documents of your assets (purchase invoice, user manual, contract) LookID document storage Like any document in your inventory: as long as your account exists, or until you delete them
Content of the attachments discarded by the analysis None Nowhere Temporary file deleted as soon as the analysis ends

6.5 Who this data is shared with

  • The automated analysis provider mentioned in section 4 receives, for each preselected message, the sender, subject and attachment names in order to determine whether it may be an invoice, then the content of the attachments kept in order to extract the useful information. The text of your messages is not sent to it. This provider processes this data solely on behalf of LookID, does not retain it beyond the processing and does not use it to train its models.
  • Our hosting provider stores the database and documents under the conditions described in section 10.
  • No one else. Data from your mailbox is never sold, rented or transferred, and is not shared with other LookID users, including those with whom you share collections of assets.

6.6 Withdrawing access

You can withdraw LookID's access to your mailbox at any time, in two ways:

  • From LookID: Menu › Account › Mailbox › "Disconnect the mailbox". LookID then immediately revokes its authorisation with your provider, erases the tokens, and deletes the pending or ignored proposals and their files. The assets you have created and the documents you have approved remain in your inventory.
  • From your email account: on your provider's page for managing authorised applications (address given for each provider in section 6.8), by removing LookID's access. LookID will no longer be able to query your mailbox; on its next pass, it will notice the revocation, tell you and erase the tokens.

Withdrawing access does not affect the lawfulness of the processing carried out before the withdrawal.

6.7 Changes to the feature

If LookID adds an email provider, extends the types of documents searched for or changes the data kept, this section is updated before the change goes live and the version date at the top of this document is changed. Any extension of the permissions requested from your provider is presented to you on a new consent screen, which you are free to refuse without losing your existing access.

6.8 Supported email providers

At the date of this version, LookID supports the following provider. The provisions below supplement, for each provider, the common rules of sections 6.1 to 6.7.

Google (Gmail)

  • Permission requested: "Read all your Gmail messages and settings", technical reference https://www.googleapis.com/auth/gmail.readonly, read-only, together with your email address and the identifier of your Google account.
  • Revocation from your account: https://myaccount.google.com/permissions
  • Commitment under the Google API Services User Data Policy: LookID's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In particular, LookID limits the use of Gmail data to providing and improving the user-facing invoice import feature; only transfers this data to third parties to provide this feature, for security reasons, to comply with the law, or as part of a merger or acquisition with prior notice to the user; does not use this data for advertising; allows no human access to this data outside the cases described in section 6.2; and does not use this data to develop, improve or train generalised artificial intelligence or machine learning models.
  • Security assessment: the application undergoes the annual security assessment required by Google for applications accessing Gmail (Cloud Application Security Assessment).

7. Retention period

Your personal data is kept for as long as it is necessary for the performance of contractual and legal obligations. When the data is no longer necessary for the performance of contractual obligations, it is regularly erased or anonymised, except where legal, commercial or tax obligations require further processing involving a longer retention period.

The retention period of your personal data varies according to the purpose of its collection:

Data categories Purposes Retention periods
Data relating to a prospect
All data Building and managing a prospect file 3 years from the collection of the data or the last contact from the prospect
Data relating to an active User
All data Managing the User account and transactions For the whole duration of the contractual relationship and 5 years from the end of the business relationship
Data relating to an inactive User
Data relating to the performance of the contract Managing the User account, orders, deliveries, invoicing and payments 10 years after the end of the contract or the last contact from the inactive User
Identification and contact data, inactive Users Sending information about changes to our offer 3 years after the end of the contract or the last contact from the inactive User
Identification and contact data, newsletter subscribers Sending information about changes to our offer 3 years from unsubscription or the last contact from the User
Identification and contact data, Web account holders Sending information about changes to our offer 3 years from unsubscription or the last contact from the User
Data from your linked mailbox
Access tokens issued by the email provider Querying your mailbox on your behalf Until the mailbox is disconnected
Sender, subject, date and identifier of the messages examined; name, type, size, fingerprint and examination result of the attachments Never offering the same document twice; operation of the feature As long as the mailbox is linked; anonymised on disconnection
Pending proposals (file and extracted information) Letting you decide what to do with them At most 90 days, then erasure; immediate erasure if you ignore the proposal or disconnect the mailbox
Approved documents Documents of your inventory Like the other data of your User account
Data generated by cookies
Data relating to your browsing of our online services Operation and optimisation of the services. Audience measurement. Personalisation of content and advertising 13 months maximum
User data within the business relationship 5 years from the end of the business relationship
Data relating to the use of the service Activity logging and analysis of the use of the service 12 months from the activity that generated their collection
Documents and accounting records, purchase orders, delivery or receipt notes, User and supplier invoices Keeping accounting evidence 10 years from the end of the financial year
Bank card data (by the providers) 13 months after a transaction is executed (from the debit date, or 15 months for deferred-debit payment cards)
Data that may be subject to a judicial requisition (connection data, identity, contact details, transaction data) Protecting LookID's interests and answering requests from authorised third parties 12 months from their collection

8. Your rights

In accordance with the regulations on personal data, and in particular French law No. 78-17 of 6 January 1978, as amended by Law No. 2002-801 of 6 August 2004 known as the "Informatique et Libertés" law, and the European General Data Protection Regulation No. 2016/679 ("GDPR"), you have the following rights regarding your personal data:

  • Access: your right to obtain confirmation as to whether or not your data is being processed and, if so, to access that data (under the conditions of Art. 15 GDPR);
  • Rectification: your right to obtain, as soon as possible, the rectification of your inaccurate data and the completion of your incomplete data. You may also modify your personal data at any time (under the conditions of Art. 16 GDPR);
  • Erasure: your right to obtain, as soon as possible, the erasure of your data, except for the data LookID needs as indicated in section 7 (under the conditions of Art. 17 GDPR);
  • Restriction: your right to obtain the restriction of processing when you object to it, when you contest the accuracy of your data, when you believe its processing is unlawful, or when you need it for the establishment, exercise or defence of legal claims (under the conditions of Art. 18 GDPR);
  • Objection: your right to object at any time to the processing of your data by LookID when it is necessary for LookID's legitimate interests. In particular, you can object to processing for prospecting purposes (under the conditions of Art. 21 GDPR);
  • Withdrawal of consent: when the processing of your personal data is based on consent you have given, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent carried out before the withdrawal (under the conditions of Articles 6(1)(a) and 7 GDPR). For the linked mailbox, you withdraw it directly by disconnecting the mailbox, as described in section 6.6;
  • Portability: your right to receive your data in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another data controller without hindrance from us (under the conditions of Art. 20 GDPR).

Finally, you also have the following rights:

  • The right to be informed within one month of the measures taken following a request (under the conditions of Art. 12 GDPR);
  • The right to be informed of any rectification, erasure or restriction (under the conditions of Art. 19 GDPR);
  • The right to be informed as soon as possible of a data breach likely to result in a high risk to your rights or freedoms (under the conditions of Art. 34 GDPR);
  • If you dispute the conditions of collection and processing of your personal data, you also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (www.cnil.fr);
  • You can also give instructions regarding the retention, erasure and communication of your data after your death. In the absence of instructions from you, you are informed that your heirs have the right to object to the continued processing of your personal data or to have it updated;
  • If your telephone number is collected when you contact us or create your account, we inform you that, in accordance with the legal provisions, you may, if you wish, register free of charge on an opt-out list for telephone marketing, which applies to all professionals except those with whom you have already concluded a contract. You can therefore object to telephone marketing from professionals of whom you are not a Customer by registering on www.bloctel.gouv.fr.

9. Exercising your rights and contact

You exercise your rights with LookID by contacting LookID using the details below.

To exercise your rights in accordance with this policy and the regulations, you can contact the User service through the form: https://www.lookid.com/en/contact-us

For any question about the privacy policy or any request regarding LookID's compliance with the regulations on the protection of personal data, you can contact our data protection officer:

  • By email at: dpo@lookid.com
  • By post at the following address: ValueGuard - Protection des Données – 110 rue Charles Nungesser 29490 GUIPAVAS, France

For any request, you must indicate the context in which you sent us your Personal Data (date of the claim and/or reason).

If we do not have enough information to identify you precisely (email address that cannot be matched, unclear situation…), we will ask you to prove your identity by sending a document that we may keep for 13 months. This is to prevent a third party from impersonating you to exercise your rights in your place.

10. Security of your data

As data controller and as processor for our Users, we implement appropriate technical and organisational measures in accordance with the applicable legal provisions to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorised access, in particular:

  • The appointment of a data protection officer;
  • The monitoring of our information system security;
  • Raising awareness of confidentiality requirements among our staff who need to access your personal data;
  • Securing access to our premises and IT platforms;
  • Implementing a general IT security policy for the company;
  • Securing the access, sharing and transfer of data;
  • A high level of requirements regarding data protection when selecting our processors and partners.

Our protection measures include firewalls and organisational measures (such as a username / password system, physical protection means, etc.).

In addition, when you send us your credit card information during a transaction, SSL (Secure Socket Layer) encryption technology secures your exchanges.

Regarding the linked mailbox:

  • LookID never knows your mailbox password. Access relies on the provider's OAuth 2.0 protocol, which issues revocable tokens without ever passing on your password;
  • the tokens are stored encrypted in our database and are never exposed in our interfaces or our logs;
  • exchanges with your email provider and with our processors are encrypted in transit (TLS);
  • attachments pass through a temporary space that is deleted as soon as the analysis ends;
  • the application undergoes the security assessments required by each supported email provider (see section 6.8).

Appendix: Cookie management policy

This cookie policy applies when consulting all LookID sites, namely the site available at www.lookid.com (hereinafter together "the sites").

The purpose of this policy is to help you better understand:

  • how the cookies that may be placed on your computer, tablet and smartphone when you consult the site work, subject to the choices you have expressed regarding Cookies;
  • and how to use the current tools to set your choices.

1. What is a cookie?

A cookie is a text file placed when you consult a website, a mobile app or an online advertisement, and stored in a specific area of the hard drive of your computer or mobile device. Cookies are managed by your Internet browser or the mobile app you use, and only the issuer of a cookie can decide to read or modify the information it contains.

A cookie has a limited period of validity. Its placement and storage on your device comply with the applicable legislation and are subject to the choices you have expressed, which you can change at any time under the conditions set out in section 7 below.

A cookie does not identify you personally. It allows its issuer to recognise your device and to collect certain information about the browsing done from that device.

Cookies have several functions, such as allowing you to browse a website or mobile app efficiently, remembering your choices and the goods and services you wish to buy, and offering you relevant advertising content based on the interests you have expressed while browsing. You will find more information about cookies on the following sites:

2. Who places the cookies?

The cookies placed on your device from our site may be placed by LookID or by third parties. The cookies placed by LookID are mainly related to the operation of the sites.

The others are "third-party" cookies placed by our partners or by advertising agencies through the connectors used on our site. LookID ensures that the issuing and use of cookies by them comply with the regulations in force.

Only the issuer of a cookie can read the information it contains.

3. Why do we use cookies?

When you visit one of the pages of our Sites, and when you use the services we make available to our Users, we may, subject to your choices, install various cookies on your device that allow us to recognise your device's browser for the period of validity of the cookie concerned.

The cookies we issue are used for the purposes described below, which result from the settings you entered during your visit and which you can express and change at any time under the conditions recalled in this policy.

Five categories of cookies are used for the purposes described below. On an exhaustive basis, we inform you, as far as possible, of the purpose of the third-party cookies we are aware of and of the means available to you to make choices regarding these cookies.

4. What information do cookies collect?

Subject to your choices, the cookies placed by LookID give us access in particular to the following information:

  • identifiers of the device you use (IP address of your computer, Android identifier, Apple identifier, etc.);
  • type of operating system used by your device (Microsoft Windows, Apple OS, Linux, Unix, BeOS, Android, iOS, etc.);
  • type and version of the browser software used by your device (Google Chrome, Microsoft Edge, Apple Safari, Mozilla Firefox, etc.);
  • dates and times of connection to our services;
  • address of the referring Internet page ("referrer");
  • browsing data on our services, content viewed.

Data collected by standard Internet technologies

We may also use standard Internet technologies, such as scripts, pixels and redirects. Scripts (sometimes called tags), written in JavaScript, are programs that run in your browser or mobile app and perform various actions, for example sending information to our servers. Scripts can also create pixels. Pixels (sometimes called transparent GIFs, clear GIFs or web bugs) are lines of code that display a graphic image (usually invisible) on a web page or in an email. Redirects make a web page available under several page addresses (URLs). When a browser opens a redirect URL, a page with a different URL opens.

The purpose of these technologies is to improve your experience on our sites and apps, including providing you with content personalised to your interests.

These technologies give us access in particular to the following information:

  • information about your use of our sites;
  • information about the presence of cookies on your device, the time and date a page was viewed, and a description of the page where the web beacon is placed;
  • information about whether or not you read the emails we send you, and about the clicks you make on the links they contain.

Our sites may also include third-party scripts, pixels and redirects. These technologies allow third-party service providers to collect certain information such as your browser type and the web page that redirected you to our websites or mobile apps. These third-party service providers process the information they collect for auditing and research purposes, and to report information about our sites and apps and the advertisements viewed on them. We do not share your identification data with these third parties as part of their use of these technologies.

Data provided by mobile devices

Some mobile devices, depending on the permissions you have granted to the mobile app and which you can change at any time (for example: "notifications" or "location"), send information, in particular: your phone model, the version of its operating system, connection type, and the name and version of the app used.

This data, necessary for the proper functioning of the mobile apps we publish, is processed automatically by our servers and those of some of our partners (in particular Google Analytics, Matomo) in order to provide you with a service and advertising suited to the technical characteristics of your device and to measure the audience of our mobile apps.

In addition, if you have accepted this feature, we can identify the physical location of your device (geolocation), in particular to check the location of an asset or item entered, to inform you about content or offers we think match your expectations or interests, or to improve your experience in our mobile apps. In accordance with the applicable law, geolocation features can be disabled at any time in your device's system settings.

5. Purposes associated with placing cookies

Operation and optimisation of browsing on our sites

  • Adapting the presentation of our sites to the display preferences of your device (language used, display resolution, operating system, etc.) during your visits, according to the hardware and the viewing or reading software of your device;
  • Remembering information relating to a form you have filled in on our site (registration or access to your account) or to products, services or information you have chosen on our site (service subscribed, content viewed, purchase made, etc.);
  • Automatically signing you in to the reserved or personal areas of our site, such as your account, using identifiers or data you have previously entrusted to us;
  • Providing tools for sharing on social networks;
  • Managing our platforms and carrying out internal technical operations for troubleshooting, data analysis, testing, research, analyses, studies and surveys;
  • Implementing security measures;
  • Quality measurements to make sure the display of our content is adapted to your device.

Traffic and audience measurement

  • Compiling statistics and volumes of traffic and use of the various elements of our site (sections and content visited, paths) in order to improve the interest and usability of our services;
  • Counting the total number of advertisements we display in our advertising spaces, ranking and statistics;
  • Analysing audiences based on the results of advertising campaigns;
  • Determining interests and behaviours;
  • Improving our knowledge of Users for personalisation purposes.

Personalisation of the advertisements on our sites and apps

  • Adapting the advertising spaces to the display preferences of your device (identification of advertisements, compiling statistics and volumes of traffic and use of the various elements of our site: sections and content visited, paths) in order to improve the interest and usability of our services;
  • Adapting the advertisements displayed on your device while you browse our sites and apps to its technical characteristics (1), to your browsing on the web and the cookies you have previously accepted (2), to your interests and uses (3), to the data you have previously provided to us (4), and, where applicable, to the geographical location data of your device (5);
  • Recognising you in order to display personalised advertisements on social networks;
  • Measuring the effectiveness of our advertising campaigns and service offers.

Personalisation of the reader journey

  • Personalising part of the editorial content highlighted so that it matches the reader's presumed interests;
  • Personalising the product and service offers proposed by LookID;
  • Measuring the effectiveness of our personalisation services.

6. Description of the cookies used

A. List of the cookies used on the LookID site

Cookie name Type Function / Purpose Lifetime
_ga Google Analytics Analytics 1 year
_ga_7F5RY8C1CT Google Analytics Analytics 1 year
_pk_ses.1.1e44 Matomo Audience measurement 1 year
_pk_id.1.1e44 Matomo Audience measurement 1 year
_hjSession_5174751 Hotjar In-product surveys and analysis of usage behaviour 45 minutes
_hjSessionUser_5174751 Hotjar In-product surveys and analysis of usage behaviour 1 year
locale LookID Language selected by the user Session
lookid_session LookID Session cookie of a signed-in user Session
remembered-login LookID Remembering the sign-in email address Indefinitely
Disable-webauthn LookID Not re-prompting biometric authentication 1 month
AWSALBCORS AWS AWS load balancing Session
AWSALB AWS AWS load balancing Session

I. Cookies strictly necessary for the operation of the site www.lookid.com

These are the cookies essential for browsing our site (such as session identifiers), which allow you to use the main features of the site and secure your connection. For example, they give you direct access to the reserved and personal areas of our site, using identifiers or data you may have previously entrusted to us.

Without these cookies you will not be able to use the site normally, and we therefore advise you not to block or delete them.

II. Functionality cookies

These cookies optimise the operation of the site.

They also allow you to adapt the presentation of the site to the display preferences of your device during your visits. These cookies thus give you a smooth, tailored browsing experience. Placing cookies on your device is the simplest and fastest way to personalise and improve your user experience. These cookies are placed by LookID. Most of them have a very short lifetime, the duration of the session, and at most thirteen months.

If you have refused these cookies, you will not be able to benefit from the corresponding features.

III. OpenStreetMap

To display maps to each visitor, we use the Leaflet geomapping service on OpenStreetMap, which provides the interactive map engine used on this site.

IV. Analytics / performance cookies

These are cookies that let us know how the sites are used and perform, and compile statistics and volumes of traffic and use of various elements (content visited, paths…) in order to improve the interest and usability of our services (the pages or sections most often viewed…).

Cookies also allow us to count the visitors to a page.

Because of the partners that use these analytics cookies, personal data may be transferred to countries outside the European Union, whose personal data protection legislation differs from that of the European Union.

In that case, a precise and demanding framework, compliant with the models adopted by the European Commission, together with appropriate security measures, ensures the protection of the personal data transferred. The necessary transfers of personal data take place under conditions and with safeguards that ensure the confidentiality and security of that data.

To this end, we implement all appropriate technical and organisational measures to ensure the security of your personal data.

Refusing or deleting these cookies has no impact on your browsing of the site, but may prevent us from ensuring the best quality of service we wish to offer our visitors.

V. Google Analytics

After obtaining your consent, this website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google's privacy policy is available at the following address: https://policies.google.com/privacy

On our website, IP address anonymisation has been enabled for this function. The IP address of Google users from Member States of the European Union, or from any other country party to the Agreement on the European Economic Area, will be shortened. The full IP address will only be transferred in exceptional cases to a Google server in the United States, and will be shortened there. Google will use this information on behalf of LookID to evaluate the website, to compile reports on its activity, and to provide LookID with other services relating to the website activity and Internet use.

Google will not associate the IP addresses transferred as part of Google Analytics with any other data used by Google. For more information, please see the following page: https://support.google.com/analytics/answer/6004245

The legal basis for the use of Google Analytics is your consent (Article 6(1)(a) GDPR). Google Analytics will only be activated if you expressly authorise it. If so, you can then disable Google Analytics at any time by changing your cookie settings. Google Analytics can also be disabled by downloading and installing a browser add-on available at the following address: https://tools.google.com/dlpage/gaoptout

The legal basis for the subsequent processing of the data collected through Google Analytics, in particular its use, analysis and storage, is Article 6(1)(f) GDPR. The legitimate interest pursued by LookID is the improvement and optimisation of the website and of its advertising strategy for the benefit of its visitors.

You have the right to object to this processing at any time, on grounds relating to your particular situation. To exercise this right, you can disable the use of tracking cookies in the tracking settings.

B. Sharing cookies (social links)

We may include on the Sites computer applications from third parties that allow you to share content from our sites with other people, or to let them know that you have viewed content from our Sites or what you think of it.

Our sites may thus contain sharing links to Facebook, Twitter, LinkedIn, YouTube and other similar social networks, which allow you to share content from our sites with other people. When you use these sharing buttons, a third-party cookie from the social network concerned is installed. If you are signed in to the social network while browsing our sites, the sharing buttons make it possible to link the content viewed to your user account.

If you have refused these cookies, you will need to sign in each time you share to the network(s) concerned.

The social network providing such an application button may identify you through this button, even if you did not use it while browsing our Site. This type of application button can allow the social network concerned to track your browsing on our Site simply because your account with that social network was active on your device (open session) while you browsed our Site.

We invite you to consult the privacy policies of these social networks to learn about the purposes, in particular advertising, for which they use the browsing information they may collect through these application buttons. The cookie policies of the social networks concerned are available below:

These privacy policies should in particular allow you to make your choices with these social networks, notably by configuring your user accounts on each of them.

C. Browsing data and advertising cookies

While you browse all the pages of our site, LookID may process your browsing data and/or use advertising cookies in order to offer you the most relevant advertisements possible, adapted to your interests. These advertisements may be displayed on our site, both on the pages accessible to the public and on those to which you have signed in as a member or User. They may also be displayed on other sites you browse.

The relevance of the advertising content displayed on your device may also be achieved, using the technology of one of our partners, by associating the browsing information of your device on our site with the data you provided to us when you registered or accessed one of our services.

Refusing these advertising cookies has no impact on your use of our site.

However, refusing them may not stop advertising on our site or on the Internet, which would then no longer be adapted to your interests. It will only result in displaying advertising that does not take your interests or preferences into account.

These cookies are mostly third-party cookies and depend mainly on advertising agencies. They come from companies such as: Google Remarketing, Google Ads, Google Analytics.

I. Google Remarketing

After obtaining your consent, this website uses Google Remarketing technology, a Google service. This technology allows users to receive targeted advertisements based on content previously viewed in Google's advertising network. In particular, Google Remarketing allows us to use your browsing on this website to show you targeted advertisements when you visit other websites in the Google network.

The legal basis for the use of Google Remarketing is your consent (Article 6(1)(a) GDPR). We will only use Google Remarketing if you expressly authorise it. If so, you can then disable Google Remarketing at any time by changing your cookie settings. Google Remarketing can also be disabled by changing the settings at the following address: https://www.google.com/settings/ads

The legal basis for the subsequent processing of the data collected through Google Remarketing is Article 6(1)(f) GDPR. This marketing approach is in the legitimate interest of LookID, which can thus improve the relevance of the advertisements displayed.

You have the right to object to this processing at any time, on grounds relating to your particular situation. To exercise this right, you can disable the use of tracking cookies in the tracking settings.

If you use this website while signed in to your Google account and you have chosen to allow Google to link your browsing history to your Google account and to use this information to personalise ads, Google will link the information collected through Google Analytics to your Google account data. Google will use the information collected for cross-device marketing purposes. This means that after you have used this website on one device, our ads may be displayed when you browse on another device. On this website, Google collects data relating to the use of a Google account, but this data does not allow LookID to draw any conclusion as to the identity of Google account users. You will find information about Google's collection and use of data at https://policies.google.com/privacy

Google account users can control their advertising experience and change their Google account settings for personalised ads at any time.

II. Google DoubleClick

After obtaining your consent, this website also uses the DoubleClick by Google service. DoubleClick by Google uses cookies to show relevant advertisements to visitors of the site. An identification cookie is assigned to your browser to keep track of the advertisements already displayed in it. The DoubleClick cookie allows Google and partner websites to display advertisements based on previous visits to this site or to third-party sites. Likewise, the identification cookie allows the DoubleClick cookie to track advertising conversions, for example when a user views a DoubleClick advertisement and then visits the advertiser's website using the same browser.

The legal basis for the use of the DoubleClick cookie is your consent (Article 6(1)(a) GDPR). We will only use DoubleClick if you expressly authorise it. If so, you can then disable DoubleClick at any time by changing your cookie settings. The DoubleClick cookie can also be disabled by installing the DoubleClick browser plug-in available at the following address: https://support.google.com/ads/answer/7395996 or by changing the settings on the following website: https://www.google.com/settings/ads

The legal basis for the subsequent processing of the data collected through the DoubleClick cookie is Article 6(1)(f) GDPR. This marketing approach is in the legitimate interest of LookID, which can thus improve the relevance of the advertisements displayed.

You have the right to object to this processing at any time, on grounds relating to your particular situation. To exercise this right, you can disable the use of tracking cookies in the tracking settings.

7. Your rights regarding the acceptance and management of cookies

Placing a cookie on your browsing device depends on your will. You have various means of managing cookies: you can change your choices at any time regarding the acceptance or refusal of the cookies placed on your device, either in your browser or online with various operators.

You can choose at any time to disable cookies or to delete those already installed on your computer, tablet or smartphone, systematically and once and for all.

To manage cookies as closely as possible to your wishes, we invite you to configure your browser taking into account the purpose of the cookies. Please remember that these settings may change your conditions of access to our services that require the use of cookies.

In addition, if your device is used by several people, and when the same device has several browsers, we cannot be certain that the services and advertisements intended for your device correspond to your own use of it and not to that of another user of the device.

How to exercise your choices?

Making your choices with the cookie settings tool

LookID provides a simple tool that allows you to set the placement of cookies by category: "social network" cookies, audience measurement cookies, etc.

The choices you make with this tool will only apply to your browsing on the site.

You can also express your choices regarding cookies in the browser software of your computer or on online sites. In both cases, your choices will apply to all your browsing on the Internet and not only to the site.

Making your choices in your browser

You can configure your browser software so that the acceptance or refusal of cookies is offered to you each time, before a cookie may be stored, or so that it systematically accepts or refuses the storage of cookies on your device.

Please note that any setting in your browser software refusing technical and functionality cookies is likely to impair your browsing comfort on our websites, or even prevent the use of some of our services that require those cookies.

Where applicable, we accept no liability for the consequences of the degraded operation of our websites and services resulting from our inability to store or consult the cookies necessary for their operation that you have refused or deleted.

For the management of cookies and your choices, each browser is configured differently. This is described in your browser's help menu, which will tell you how to change your cookie preferences.

Browser Help
Microsoft Edge https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
Apple Safari https://support.apple.com/en-us/guide/safari/sfri11471/mac
Google Chrome https://support.google.com/chrome/answer/95647
Mozilla Firefox https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera https://help.opera.com/en/latest/web-preferences/#cookies

"Do not track"

You can also configure your browser so that it sends a code telling websites that you do not want to be tracked ("Do not track" option).

Browser Help
Microsoft Edge https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy
Apple Safari https://support.apple.com/en-us/guide/safari/sfri40732/mac
Google Chrome https://support.google.com/chrome/answer/114836
Mozilla Firefox https://support.mozilla.org/en-US/kb/how-do-i-turn-do-not-track-feature
Opera https://help.opera.com/en/latest/security-and-privacy/

Making your choice online, for audience measurement and analytics cookies

Analytics cookies allow us to obtain anonymous traffic statistics for our site in order to optimise it and detect any malfunctions. They are placed on our sites and apps by Google Analytics and Matomo.

If you do not want our sites and services to store cookies in your browser for audience measurement purposes, you can click on the following links, where you will find additional information:

Tool Opt-out
Google Analytics cookies https://tools.google.com/dlpage/gaoptout
Matomo https://matomo.org/privacy-policy/