Protecting your personal data is a priority for us. This Privacy Policy aims to provide you with transparent information on how we collect, use, store, and protect your information when you use our website and services.
We are committed to complying with applicable regulations, including the General Data Protection Regulation (GDPR), the French Data Protection Act (“Informatique et Libertés”), and any other applicable data protection legislation.
By interacting with our platform, our website, and our teams, you agree to the practices described in this policy. We encourage you to read it carefully and to contact us if you have any questions or wish to exercise your privacy rights.
Data Collection and Use
When using our website, communications, and services, we collect different categories of data to ensure their proper functioning, optimize the user experience, facilitate customer relationship management, and comply with legal obligations.
This data may include:
- Statistical analysis of visits to better understand our website’s audience, without the use of cookies or storage of personal identifiers.
- Cookie management and preferences, allowing us to respect your privacy choices.
- Use of the platform, to guarantee a smooth and personalized service.
- Commercial and marketing prospecting, in order to present our offers, content, and events, and to maintain a personalized pre-sales relationship.
- Recruitment process, if you apply for a job offer or send an unsolicited application.
- Security assurance and fraud prevention, by detecting and preventing fraudulent activities, to protect the integrity of our systems and ensure user confidentiality.
This section details the different purposes of data collection and the information involved.
Website Visit Statistical Analysis
We use Plausible to analyze visits to our website in an anonymous and cookie-free manner. The data collected includes:
- Source of the visit
- Browser and browser language
- Country of connection
- Pages visited
- Time spent on the website
- Type of device used
- Operating system
This information is collected in an aggregated and anonymized manner, without cookies or storage of personal identifiers.
Retention period:
Anonymized data is kept only for the time necessary to produce global statistics on website traffic, then permanently deleted.
Cookies and Preference Management test
When you visit our website, we use Cookiebot to manage your cookie consent. The data collected includes:
- Consent preferences (acceptance or refusal by cookie category)
- Date and time of consent
- Encrypted unique identifier linked to consent
- Categories of cookies consented to and cookies actually active at the time of consent
- IP address (anonymized)
- Technical information of the browser (type, version, language)
- Device type and operating system
- URL where consent was given
Retention period:
Consent logs are kept for 12 months, then automatically deleted.
This information ensures that you maintain control over the use of cookies in accordance with the GDPR and other applicable regulations.
Categories of cookies used on our website
The cookies collected from our website are classified into 4 distinct categories:
- Strictly necessary cookies: Essential for the operation of the website and Scalingo’s platform. These cookies cannot be disabled in our systems.
- Preference cookies: Allow us to remember your choices and settings (e.g. language or region).
- Statistics cookies: Help us understand how visitors interact with the website, in an anonymous and aggregated manner.
- Marketing cookies: Used to track visitors across websites and offer them tailored content or advertisements.
List of cookies currently in use
We limit the use of cookies to the strict minimum. The list below is automatically generated by Cookiebot and updated with each analysis of our website.
Managing your preferences
You can manage or modify your cookie preferences at any time via:
- The cookie banner displayed during your first visit
- The “Privacy Settings” link available at the bottom of our website
- The “Cookie Management” page available here
Commercial Prospecting and Marketing
As part of our commercial prospecting activities, we collect and process certain personal data of prospects in order to present our offers, content, and events, and to maintain a pre-sales relationship.
Data collected:
- Identification data: name, surname, professional email address, phone number, position, company, business sector, LinkedIn profile URL
- Interaction data: completed forms, event or webinar registrations, email opens and clicks, replies to our messages
- Information from public or professional sources
- Internal notes relating to commercial or marketing exchanges
This data may be obtained:
- When you provide it directly (form, event registration, demo request, document download, etc.)
- Or via public and professional sources (e.g. LinkedIn profiles, company websites, professional directories).
Legal basis:
- Consent, when you voluntarily provide your information
- Legitimate interest, for B2B prospecting to professional contacts likely to be interested in our services, subject to your rights (possibility to object at any time)
Retention period:
3 years from the last contact or interaction initiated by you, unless objection or withdrawal of consent before that period.
Recipients:
Marketing and sales team, CRM (Pipedrive), email platform (Brevo), prospecting tool (Lemlist), Intercom.
Your rights:
You may object at any time via the unsubscribe link in our emails or by contacting dpo@scalingo.com.
Applications / Recruitment
As part of your application to a job offer or unsolicited application, we collect in particular the following information:
- Personal data: name, surname, date of birth, address, phone number, email
- Application documents: CV, cover letter
- Recruitment process information: interview dates, test results, evaluations
This information is used exclusively for evaluating your application and managing the recruitment process.
Information Sharing
We may share some of your data with third parties in the following cases:
- With our service providers: we work with third-party partners to ensure the proper functioning of our services, notably for hosting (Dato CMS), data analysis (Plausible), payment management (Pennylane), consent management (Cookiebot), and customer and prospect relationship management (Pipedrive, Lemlist, and Brevo). These providers have access only to the data strictly necessary for their tasks, in compliance with applicable regulations.
- With integrated third-party services (with your consent): certain tools such as Intercom and Brevo are integrated into our platform to improve customer relationship and communications.
- To comply with legal obligations: we may disclose certain information if required by law, in response to a request from a competent authority, or to comply with a regulatory obligation.
- Partner selection: we commit to selecting trusted partners who meet the data protection standards essential to Scalingo, in line with our commitments visible through our certifications.
We ensure that your information is only shared when necessary and under conditions that guarantee its security and confidentiality.
Your Rights and Choices
In accordance with the General Data Protection Regulation (GDPR), the French Data Protection Act (“Informatique et Libertés”) and other applicable regulations, you have several rights regarding your personal data.
Link to your Data Protection Rights and how to exercise them with the CNIL.
- Right of access, rectification, and deletion: you can request access to the information we hold about you, correct it if inaccurate, or request its deletion when legally possible.
- Right to object to processing: you have the right to object to the processing of your data for legitimate reasons, including direct marketing.
- Right to data portability: you can request to receive your personal data in a structured, commonly used format, or to have it transferred directly to another provider where technically possible.
- Right to restriction of processing: in some cases, you may request the temporary suspension of processing, for example, during verification of accuracy or contesting its use.
- Exercising your rights: for any request related to the exercise of your rights, you can contact us at dpo@scalingo.com. We are committed to responding within the legal timeframes and handling your request securely and confidentially.
You also have the right to lodge a complaint with the competent data protection authority if you believe your rights are not being respected.
Policy Updates
We may update this Privacy Policy to reflect legal, regulatory, or operational changes in our services.
We encourage you to check this page regularly to stay informed of any updates. The date of the last revision will always be indicated at the top of the document. By continuing to use our platform after updates take effect, you accept the updated terms of this policy.
Exercising Your Rights
For any questions or requests regarding your data privacy, the exercise of your rights (access, rectification, deletion, objection, restriction, portability), or any other concerns regarding our data protection policy, you can contact us at:
Dedicated email address: dpo@scalingo.com
Postal address: 9 Rue de la Krutenau, 67000 Strasbourg, France
You can also review our Data Processing Agreement (DPA) via this link
We are committed to processing your requests as quickly as possible and in compliance with applicable regulations.