This policy explains what information may be processed when you visit the Scalia website or talk with us, why, and how to exercise your rights.
Data controller
The data controller is Kevi Moronta, a sole proprietor trading as SCALIA (French micro-entreprise), 61 route de Borny, 57070 Metz, France, SIRET 103 056 552 00013.
For any question about your data, write to contact@scalia.do.
Data concerned
The website does not offer user accounts. Depending on how you use it, the following data may be processed.
- When you contact us (email or WhatsApp): your name, contact details, company name and the information you share about your project.
- When you book a call through our booking form: your name, your email address, the type of project you choose, the date, the time and your time zone and, if you provide them, your phone number, your company and the description of your project.
- While you browse: technical data (IP address, browser, operating system, pages requested) processed by the host to deliver and secure the website.
- Audience measurement: anonymous, aggregated statistics (page views, referrer, country, device and browser type) and a few on-site actions, with no identifying data (see “Cookies and audience measurement”).
- Testimonial videos: when the testimonials section comes into view and when you play a video, files are loaded from Wistia’s servers, which receive your IP address and technical playback data.
Purposes and legal bases
- Answering your requests and preparing a proposal: pre-contractual steps taken at your request.
- Organising and holding a meeting, including by video call: pre-contractual steps.
- Delivering and following up your project: performance of the contract.
- Hosting the website and keeping it running and secure: Scalia’s legitimate interest.
- Measuring audience anonymously to improve the website: Scalia’s legitimate interest.
- Showing the testimonial videos: Scalia’s legitimate interest in presenting its clients’ feedback.
- Meeting accounting and tax obligations: legal obligation.
Your data is neither sold nor used for advertising.
Appointments and video calls
Bookings are made with our own form, with no third-party service loaded in your browser. The times offered are calculated from our Google Workspace calendar; your meeting is recorded there and the confirmation is emailed to you from contact@scalia.do.
A reminder with the Google Meet video-call link may be emailed to you about an hour before the call.
When the call takes place by video, your contact details are used to send you the invitation and the joining link. The video service named in the invitation processes the data needed to run the call, such as your display name and connection data.
Video calls are neither recorded nor transcribed, and no AI note-taking tool is used.
Applications
When you apply through the application page, we receive your contact details (first name, last name, email, phone, country, city, desired role and, if you provide them, your LinkedIn and portfolio links), your answers to the questionnaire and your CV.
This information is used only to review your application and to reply to you, on the basis of your consent. It is sent by email to Scalia through Google Workspace, which also sends the acknowledgement to your address. No decision is made automatically: every application is read by a person.
To help us read applications, your answers to the questionnaire and the role you are looking for may be sent to OpenAI, an artificial intelligence provider, to produce a short internal summary. Your name, email, phone number and CV are not sent to it. When data sharing is enabled, some of the questionnaire answers sent to OpenAI to generate the summary may also be used by OpenAI to improve its services and models. Personal contact details and the CV are not sent in this context. This summary is only a reading aid: no recruitment decision is made automatically.
If you start an application without finishing it, your answers and details (never your CV) are kept in your browser only, for 24 hours at most, and erased as soon as you submit.
Project start brief
The project start form (scalia.do/start) collects your contact details (name, company, email, phone), your answers about your business and your future website, and the files you choose to send: logo, photos, videos, documents. This information is used only to carry out your project.
Files go straight from your browser to Scalia’s private storage: they are never public and only the Scalia team can download them. Your answers are stored in Scalia’s database and emailed to Scalia; you receive a confirmation email.
Sending documents
The document page (docs.scalia.do) collects your company name, the files you send and, if you write one, your message. Files go straight from your browser to Scalia’s private storage: they are never public and only the Scalia team can download them. They are used only to carry out your project and are deleted on request or at the end of the project; a sending started but never finished is erased within 24 hours.
Conversation with the AI assistant
The conversation area, opened from the flame at the bottom of the screen, is handled by Scaly, Scalia’s AI assistant: answers are generated automatically by an artificial intelligence, not by a person. Each message you send, together with the latest exchanges of the conversation, is sent to OpenAI, an artificial intelligence provider, to generate an answer from Scalia’s official information and, for general questions about the web, from general knowledge. Please do not share personal or sensitive information there. No automated decision concerning you is made.
Data sharing with OpenAI is enabled for this project: the messages sent and the answers generated may be used by OpenAI in line with this setting, in particular to improve its services and models.
The conversation is kept only in your browser, for the session: it is erased when the tab is closed or with “New conversation”. Scalia does not record the text of the messages in its logs.
Recipients and service providers
Your data is intended for Scalia. It is only shared with the service providers needed for the purposes above:
- Vercel Inc. (United States): website hosting, private storage of client area and project brief files, cookie-free audience measurement;
- Neon, Inc. (United States): database for the client area and project briefs;
- Wistia, Inc. (United States): hosting and streaming of the testimonial videos;
- Google (Google Workspace): calendar, Google Meet video calls and email for contact@scalia.do;
- OpenAI (United States): internal summary of application answers, without name, contact details or CV, and the conversation with Scaly, the site’s AI assistant;
- WhatsApp (Meta), only if you choose to contact us this way.
The LinkedIn and Instagram links lead to the personal accounts of Kevi Moronta, founder of Scalia: no data is sent to these platforms unless you click them.
Transfers outside the European Union
Several of these providers are based in the United States. The related data transfers are covered by the safeguards each of them provides, such as the European Commission’s standard contractual clauses or, where the provider is certified, the EU–US Data Privacy Framework.
Retention period
- Messages and requests that do not lead to a project: as long as needed to handle the request and follow up the business relationship.
- Appointments: as long as needed to organise and follow up the meeting.
- Clients: the duration of the contract, then the periods required by law, including accounting rules.
- Project start briefs: a brief started but never sent is deleted with its files after 24 hours; a sent brief is kept for the duration of the project, and deleted on simple request to contact@scalia.do.
- Audience measurement: aggregated statistics only; the technical visit identifier is discarded after 24 hours.
Security
Scalia takes reasonable measures to protect the information entrusted to it and to limit access to the people who need it. The website is served over HTTPS only.
Your rights
In accordance with applicable data protection regulations, you may request:
- access to your data;
- its rectification;
- its erasure;
- restriction of its processing;
- its portability, where this right applies.
You may also object to its processing.
To exercise these rights, write to contact@scalia.do. Proof of identity may be requested if there is reasonable doubt.
If you believe your rights are not being respected, you can lodge a complaint with the competent data protection authority, which in France is the CNIL.
Changes to this policy
This policy may be updated, in particular if new services are used on the site. The date of the last update appears at the top of this page.