Privacy policy

1. Data controller

The controller of your personal data is S.C.A.D., whose registered office is located at 643 rue JA de Barras de la Penne, 13200 Arles, France. For any question or request about your personal data, you can contact us at rgpd@scad.fr.

2. Data collected

We collect different categories of personal data through the use of our website and the management of contracts with client companies:

• Contact form: last name, first name, email address, company (optional), solution concerned (optional) and the content of your message. We advise you not to send sensitive personal data (such as information about your health, religious beliefs or political opinions) through our contact form.
• Client area: last name, first name, email address, password (never stored in plain text).
• Under contracts with client companies: last name, first name, business email address and phone number of the employees representing the company, and information required to manage the contract (for example, the company's bank details and postal address for invoicing).
• Cookies: technical cookies (client-area login, remembering your cookie choices) and, with your consent, those of Google Maps (see section 6).

3. Purposes of processing

The personal data collected is processed for the following purposes:

• Answering requests sent through the contact form.
• Providing secure access to the client area for employees of client companies.
• Managing contractual and pre-contractual relationships with companies, including invoicing and communication for companies under contract.
• Ensuring the security and proper operation of the website through technical cookies.

4. Legal basis for processing

The processing of your personal data is based on the following legal grounds:

• Consent: for displaying third-party content that sets cookies (Google Maps map), collected through the cookie banner and changeable at any time.
• Performance of a contract: for managing the services provided to client companies, including client-area access for their employees, and for answering your requests for quotes, demonstrations or other pre-contractual information.
• Legal obligation: to comply with our legal obligations regarding accounting, invoicing and data retention.

5. Data retention

Personal data is kept only for as long as necessary for the purposes for which it was collected:

• Contact form: kept for thirteen months after the last exchange.
• Contractual data: kept for the whole duration of the contract, then archived for five years for legal purposes (e.g. accounting).
• Cookies: 7 days at most for login cookies, 6 months for remembering your cookie choices (see section 6), and in any case never more than thirteen months.

6. Cookies and third-party content

The website does not use any audience-measurement or advertising cookies. The following technical cookies, strictly necessary for the client area, are only set once you log in:

• access_token: keeps your login session active (15 minutes).
• refresh_token: securely renews your session (7 days).
• is_authenticated: shows the "logged in" state in the menu, without any personal data (15 minutes).

The technical cookie NEXT_LOCALE may also be set to remember the chosen language (French or English); it expires when you close your browser.

The technical cookie cookie_consent remembers the choices you make in the cookie banner (6 months). Strictly necessary, it contains no personal data.

Your display preference (light or dark theme) is stored only in your browser and is never sent to our servers.

The Contact page offers a Google Maps map, provided by Google, which may set its own cookies. It is only displayed if you have accepted third-party content in the cookie banner, or if you click "Show the map": otherwise, no Google content is loaded. Their use is governed by Google's privacy policy.

You can change or withdraw your consent at any time with the "Cookie settings" link at the bottom of every page. Your choice is kept for 6 months, after which you are asked again.

7. Data sharing

Your personal data is not sold to third parties. However, it may be shared with employees of our company who need it for their duties. It may also be shared with external service providers (hosting, maintenance, email delivery) for the proper performance of the services. These providers are bound by strict confidentiality and data-protection obligations, and only access personal data to the extent necessary to perform their services.

8. Your rights

Under the GDPR, you have the following rights:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request the correction of inaccurate or incomplete information.
• Right to erasure: you may request the deletion of your personal data, under certain conditions.
• Right to restriction: you may request that the processing of your data be restricted in certain circumstances.
• Right to object: you may object to the processing of your personal data, in particular processing based on our legitimate interest.
• Right to data portability: you may request to receive your data in a structured, commonly used format, or to have it transferred to another controller.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.

To exercise your rights, you can contact us at: rgpd@scad.fr. We will answer your requests as soon as possible, and within one month at the latest.

If, after contacting us, you believe your data-protection rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority).

9. Data security

We implement all appropriate technical and organisational measures to ensure the security and confidentiality of your personal data, such as secure transmission and storage of your data, and restricting access to your information to authorised persons only.

10. Changes to this privacy policy

We reserve the right to modify this privacy policy at any time. Any change will be published on this page, along with the date of the latest update.