Version dated 25th March 2024

This Cookies Policy describes how and when Yes We Hack S.A.S., a simplified joint stock company incorporated in France having its seat at 14 rue Charles V, 75004 Paris, registered under number 814 037 214 (R.C.S. Paris) and its affiliates (hereafter “YesWeHack”, “we”, “us” or “our”) uses cookies and other technologies when you visit our storefront site available at https://www.yeswehack.com/ (hereafter the “Site”).

YesWeHack is committed to providing you with the best interactions and services while protecting your information and respecting your right to privacy. Depending on the purposes for which they are collected and, where applicable, subject to your consent, we use cookies in accordance with our Privacy Policy to ensure the proper functioning of our Site; to detect and prevent unusual behaviors and violations of our Terms of Use; to understand how you use and interact with our Site; to promote our products and services; and to analyze and improve our services and your experience on our Site.

1. WHAT ARE COOKIES AND WHO SETS THEM ON THE SITE?

Cookies are text files with a small set of data created by the server upon your connection and labeled with an ID unique to your terminal so the server may read this ID and know from the information already collected, how to specifically serve you. The purpose is to identify you and improve your web browsing experience.

When browsing our Site, cookies may come directly from YesWeHack (i.e., first-party cookies) or indirectly from our partners (i.e., third-party cookies).

YesWeHack uses technical cookies (necessary cookies) which are needed for using the Site and its main functionalities. These cookies are exempt from your consent and are always activated. YesWeHack may also use preferences cookies to personalize your experience on the Site. Such cookies can only be deposited with your prior consent unless they are set up to prevent visitors from being tracked.

Our partners may use cookies for performance measurements and analyses (i.e., pages visited, volume of visits, etc.) to improve the performance of the Site or targeting cookies to propose suitable advertisements on other sites. These cookies can only be deposited with your prior consent. If you reject these cookies, YesWeHack will not track how you navigate and interact with the Site, and no targeted advertisements will be suggested to you.

2. WHICH COOKIES ARE USED ON THE SITE?

You will find below a regularly updated list of first-party cookies and third-party cookies deposited on our Site, classified into four (4) categories: (i) necessary cookies (allowing the site to be fully functional and enable its basic features); (ii) functional cookies (enabling certain functionalities according to your preferences); (iii) analytics cookies (providing us with metrics to understand how you interact with our Site); and (iv) advertisement cookies (allowing us to create a user profiles to provide you with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns).

Necessary cookies:

Cookie: cookieyes-consent
Purpose: CookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.
Data retention period: six (6) months

Cookie: __cf_bm
Purpose: This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
Data retention period: one (1) hour

Functional cookies:

Cookie: VISITOR_PRIVACY_METADATA
Purpose: YouTube sets this cookie to store the user's cookie consent state for the current domain.
Data retention period: six (6) months

Cookie: yt-remote-device-id
Purpose: YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
Data retention period: persistent

Cookie: yt-remote-connected-devices
Purpose: YouTube sets this cookie to store the user's video preferences using embedded YouTube videos.
Data retention period: persistent

Cookie: lidc
Purpose: LinkedIn sets the lidc cookie to facilitate data center selection.
Data retention period: one (1) day

Cookie: li_gc
Purpose: Linkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.
Data retention period: six (6) months

Cookie: _cfuvid
Purpose: The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address.
Data retention period: session

Cookie: bcookie
Purpose: LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.
Data retention period: one (1) year

Cookie: bscookie
Purpose: LinkedIn sets this cookie to store performed actions on the website.
Data retention period: one (1) year

Cookie: rxVisitor
Purpose: This cookie is set by the provider Dynatrace. This cookie is used to store the visitor ID for the returning visitors.
Data retention period: session

Cookie: rxvt
Purpose: This cookie is set by the provider Dynatrace. This is a session cookie used to store two timestamps.
Data retention period: session

Analytics cookies:

Cookie: YSC
Purpose: Youtube sets this cookie to track the views of embedded videos on Youtube pages.
Data retention period: session

Cookie: yt.innertube::requests
Purpose: YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.
Data retention period: persistent

Cookie: yt.innertube::nextId
Purpose: YouTube sets this cookie to register a unique ID to store data on what videos from YouTube the user has seen.
Data retention period: persistent

Cookie: _ga_*
Purpose: Google Analytics sets this cookie to store and count page views.
Data retention period: one (1) year, one (1) month, four (4) days

Cookie: _ga
Purpose: Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
Data retention period: one (1) year, one (1) month, four (4) days

Cookie: _fuid
Purpose: Factors set this main cookie for tracking visitors.
Data retention period: one (1) year, one (1) month, four (4) days

Cookie: try_get_old_cookie
Purpose: Factors set this cookie to correlate various data, more or less detailed depending on interactions with the Site, in order to enrich the visitor's profile and enable identification.
Data retention period: session

Cookie: __hssrc
Purpose: This cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.
Data retention period: session

Cookie: __hssc
Purpose: HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
Data retention period: one (1) hour

Cookie: AnalyticsSyncHistory
Purpose: Linkedin set this cookie to store information about the time a sync took place with the lms_analytics cookie.
Data retention period: one (1) month

Cookie: __hstc
Purpose: Hubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).
Data retention period: six (6) months

Cookie: hubspotutk
Purpose: HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.

Data retention period: six (6) months

Advertisement cookies:

Cookie: _gcl_au
Purpose: Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.
Data retention period: three (3) months

Cookie: li_sugr
Purpose: LinkedIn sets this cookie to collect user behaviour data to optimise the website and make advertisements on the website more relevant.
Data retention period: three (3) months

Cookie: IDE
Purpose: Google DoubleClick IDE cookies store information about how the user uses the website to present them with relevant ads according to the user profile.
Data retention period: one (1) year, twenty-four (24) days

Cookie: test_cookie
Purpose: doubleclick.net sets this cookie to determine if the user's browser supports cookies.
Data retention period: fifteen (15) minutes

Cookie: UserMatchHistory
Purpose: LinkedIn sets this cookie for LinkedIn Ads ID syncing.
Data retention period: one (1) month

Cookie: VISITOR_INFO1_LIVE
Purpose: Youtube sets this cookie to provide ad delivery or retargeting, store and track a visitor's identity, Store and track interaction.
Data retention period: six (6) months

3. MANAGING COOKIES

When arriving on the Site home page or at any time thereafter, you can accept or reject the storage of cookies or withdraw your consent at any time by clicking on “Change Cookie Preferences” on the footer of the Site and change your settings.

YesWeHack will record your proof of your consent or refusal for six (6) months, then you will be asked for your consent again.

4. WHO OPERATES THIRD-PARTIES COOKIES?

Our partners identified below operate cookies on our Site (e.g. to display content from external providers such as YouTube content).

Third-party providers on the Site:
Processor: CookieYes Limited
Location: 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom
Data transfer mechanism (for data transfers outside the EU/EEA): N/A
Privacy policy: CookieYes Privacy Policy

Processor: Cloudflare Inc.
Location: 101 Townsend St., San Francisco, CA 94107, USA
Data transfer mechanism (for data transfers outside the EU/EEA): Privacy Framework Program
Privacy policy: Cloudflare Privacy Policy

Processor: Google Ireland Limited (for Google and Youtube Cookies)
Location: Gordon House, Barrow Street, Dublin 4, Ireland
Data transfer mechanism (for data transfers outside the EU/EEA): N/A
Privacy policy: Google Privacy Policy

Processor: LinkedIn Ireland Unlimited Company
Location: Wilton Place, Dublin 2 – Ireland – One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Data transfer mechanism (for data transfers outside the EU/EEA): N/A
Privacy policy: LinkedIn Privacy Policy

Processor: Dynatrace LLC
Location: 1601 Trapelo Road, #116, Waltham, MA 02451 USA
Data transfer mechanism (for data transfers outside the EU/EEA): Privacy Framework Program
Privacy policy: Dynatrace Privacy Notice and Supplemental Privacy Notice for Individuals Within the EU, Switzerland, UK, and Brazil

Processor: Slashbit Inc d/b/a Factors.ai
Location: 3524 Silverside Road Suite 35B Wilmington, DE 19810, USA
Data transfer mechanism (for data transfers outside the EU/EEA): Standard Contractual Clauses
Privacy policy: Slashbit Inc d/b/a Factors.ai Privacy Policy

Processor: HubSpot Inc.
Location: 25 First Street, Cambridge, MA 02141, USA
Data transfer mechanism (for data transfers outside the EU/EEA): Privacy Framework Program
Privacy policy: HubSpot Privacy Policy

Some third-party data providers may use and store the cookies they set, and the personal data generated from these cookies for their own purposes. Such processing is subject to their data protection policy.

5. WHAT ARE YOUR RIGHTS?

Where applicable, you may exercise the following rights under the conditions provided for in the regulations:

• The right of access, rectification and erasure of your data (Art. 15 to 17 of the GDPR);
• The right to withdraw your consent (opt out) at any time (Art. 13-2(c) of the GDPR);
• The right to restriction of Processing of your data (Art. 18 of the GDPR);
• The right to object the Processing of your data (Art. 21 of the GDPR);
• The right to data portability (Art. 20 of the GDPR);
• The right to issue instructions allowing access to your data in the event of death (Art. 85 of the French Data Processing, Data Files and Individual Liberties Act n°78-17 of 6 January 1978, as amended).

You can exercise these rights by e-mail to our Data Protection Officer (see contact details hereafter), specifying the right you wish to exercise and attaching proof of your identity (if necessary) or a power of attorney if you are being represented.

You can lodge a complaint to the French Data Protection Authority (CNIL – Commission Nationale de l'Informatique et des Libertés): https://www.cnil.fr/fr/plaintes.

6. OUR DATA PROTECTION OFFICER

YesWeHack has appointed an external Data Protection Officer who is responsible for ensuring the compliance of our processing operations, keeping a record of the processing activities, and ensuring the exercise of your rights specified hereabove.

Contact details of the DPO (Data Protection Officer): privacy@yeswehack.com

7. UPDATING OF THIS COOKIES POLICY

This Cookies Policy may be updated periodically and without notice. Any changes will be effective immediately upon posting of the new policy at https://www.yeswehack.com/. However, we will deposit cookies in accordance with the Policy in effect at the time of the collection.