FR/ENRequest a quote

Privacy Policy

Last updated: 22 August 2026

This privacy policy explains how Scroll SARL collects, uses, and protects personal data submitted via the agence-scroll.com website, as well as in the context of its business exchanges and services.

Scroll places particular importance on the confidentiality of personal data and is committed to processing data in a fair, transparent, proportionate, and secure manner.

1. Data Controller

The data controller is:
Scroll SARL
Registered office: 50 rue Rodier, 75009 Paris, France
Email: contact@agence-scroll.com

For any questions regarding your personal data or to exercise your rights, you may contact us at the following address: contact@agence-scroll.com.

2. Personal Data Collected

Scroll may collect personal data when you use the website, fill out a form, contact us, or enter into a business relationship with Scroll.

The data concerned may include, but is not limited to:

  • Identification and contact data: first name, last name, email address, phone number, company, position or role.
  • Data related to your request or project: information submitted via our forms, quote requests, appointment requests, specifications, expressed needs, indicative budget, deadlines, messages, and files voluntarily provided.
  • Data related to the business relationship: email exchanges, quotes, contracts, invoices, project tracking information, and information necessary for the performance of our services.
  • Technical and navigation data: pages visited, date and time of visit, device type, browser used, navigation events, and technical data necessary for audience measurement and the proper functioning of the site.

Scroll does not request that you submit sensitive data via its forms. We invite you not to share sensitive or confidential information that is not necessary for processing your request.

3. Purposes of Processing and Legal Bases

The collected data is used for the following purposes:

  • Responding to a request sent via the website — Legitimate interest or pre-contractual measures.
  • Scheduling an appointment or qualifying a need — Pre-contractual measures.
  • Preparing a quote, a commercial proposal, or a contract — Pre-contractual measures.
  • Executing a service entrusted to Scroll — Contract performance.
  • Ensuring customer follow-up and project management — Contract performance or legitimate interest.
  • Manage billing, accounting, and administrative obligations — Legal requirement.
  • Improve the website, measure its audience, and measure campaign-page conversions (Advanced Consent Mode) and conversions from ads shown in ChatGPT (OpenAI pixel, with consent) — Legitimate interest for cookieless measurement; consent for optional storage.
  • Send B2B commercial communications related to our services — Legitimate interest, with the option to opt out.
  • Ensure website security and prevent abuse — Legitimate interest.

4. Forms and contact requests

When you fill out a form on the website, the information provided is used to process your request, respond to you, and, where applicable, offer you an exchange, an appointment, or a tailored proposal.

Mandatory fields are limited to the information necessary to process your request. Without this information, Scroll may not be able to respond to you properly.

5. Audience measurement and Consent Mode

The website uses an audience measurement solution to understand how visitors browse the site, identify the most visited pages, improve the user experience, and measure content performance.

To this end, Scroll uses two audience measurement tools: Matomo, self-hosted by Scroll within the European Union and set up with IP address anonymisation, relies on a consent-exempt internal cookie (maximum duration of 13 months) under CNIL guidelines (the French data protection authority). If you refuse in the preferences, Matomo continues without cookies. To stop Matomo completely in this browser, use the dedicated control in the privacy policy. PostHog, provided by a third-party vendor hosting data within the European Union, works without storing cookies and, if you accept audience measurement from the preferences banner, enables full analytics tracking, including across visits. On campaign pages only, this consent also enables PostHog to replay your navigation; entered fields are masked, hidden technical fields are excluded from recordings, and replays are retained for 30 days.

In this configuration, Scroll aims to limit data collection to what is strictly necessary for audience measurement. The collected data is not used to track visitors across other sites or to create advertising profiles.

The data that may be processed can include:

  • pages visited;
  • date and time of visit;
  • device or browser type used;
  • navigation events necessary to understand site usage;
  • limited technical data used to generate audience statistics.

Scroll does not seek to personally identify visitors through its audience measurement tools. In particular, Scroll does not transmit directly identifying data, such as an email address, name, or phone number, to its audience measurement tools (Matomo, PostHog) without an appropriate legal basis.

On advertising campaign pages, Scroll loads the Google tag with Advanced Consent Mode. Before your choice and after a refusal, analytics and advertising storage, ad user data, and personalization remain denied; Google nevertheless receives limited cookieless signals and measurements to measure and model conversions. If you accept a category, the corresponding storage is allowed. The strictly necessary cookie that remembers your choice is retained for 180 days, and you can change that choice at any time. When you arrive on the site from an ad shown in ChatGPT, the banner also lets you accept the OpenAI measurement pixel: it is loaded only after your consent, then stores two first-party cookies (__oppref, 30 days, and __obref, 12 months) and sends OpenAI the pages viewed and the forms submitted in order to attribute those conversions to the campaign. Without consent, no OpenAI script or cookie is loaded.

6. Data recipients

The personal data collected is intended for Scroll and authorized personnel within its team.

It may also be shared with technical service providers acting on behalf of Scroll, notably for:

  • website hosting;
  • form management;
  • appointment scheduling;
  • email;
  • billing;
  • commercial management;
  • audience measurement;
  • project management.

Scroll uses Matomo and PostHog for audience measurement. On campaign pages, Google also processes limited signals for conversion measurement and modeling according to the choices expressed in the banner. OpenAI acts in the same way, only with your consent, to attribute conversions to ads shown in ChatGPT.

Scroll does not sell your personal data to third parties.

Where necessary, certain data may also be disclosed to administrative, judicial, or tax authorities, solely to comply with a legal obligation.

7. Subcontracting and services provided for clients

As part of its services, Scroll may process personal data on behalf of its clients, particularly when creating websites, applications, automations, internal tools, or solutions incorporating artificial intelligence.

In such cases, Scroll acts as a data processor under the GDPR. The data entrusted by the client is processed solely for the purposes of the service, in accordance with the client’s instructions and the terms set out in the contract.

The specific terms of processing, security, confidentiality, retention, or deletion of data may be detailed in the quote, contract, special conditions, or a dedicated subcontracting agreement.

8. Transfers outside the European Union

Some of the technical service providers used by Scroll may be located outside the European Union or process data from third countries.

When such transfers are necessary, Scroll ensures they are governed by appropriate safeguards in accordance with applicable regulations, including standard contractual clauses, an adequacy decision, or any other mechanism recognized by the GDPR.

For audience measurement, Scroll prioritizes a configuration that limits data collection. On campaign pages, limited cookieless signals may be sent to Google; any transfers outside the European Union are governed by applicable safeguards. Data sent to OpenAI (United States) with your consent falls under the same safeguards.

9. Retention periods

Scroll retains personal data only for as long as necessary to fulfill the purposes for which it was collected.

For reference:

  • Contact requests and incoming inquiries — Duration necessary to process the request, then up to 36 months after the last contact.
  • B2B prospect data — Up to 36 months after the last contact from the prospect.
  • Client data and project tracking data — For the duration of the contractual relationship, then archived if necessary for evidence or legal obligation.
  • Unfollowed quotes — Duration necessary for commercial follow-up, then deletion or archiving depending on the situation.
  • Invoices and accounting documents — 10 years in accordance with accounting obligations.
  • Audience measurement data — Limited and proportionate duration for the purpose of audience measurement.
  • Data required to manage a commercial opt-out — Duration required to process the opt-out.

10. Data Security

Scroll implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.

These measures may include, as applicable: access restrictions, permission management, authentication, backups, selection of providers with security guarantees, team awareness, and securing the tools used.

11. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to object;
  • right to restriction of processing;
  • right to data portability, where applicable;
  • right to withdraw your consent at any time, where processing is based on consent;
  • right to define instructions regarding the handling of your data after your death.

To exercise your rights, you may write to: contact@agence-scroll.com.

To protect your data, Scroll may request proof of identity if necessary to verify your request.

You also have the right to lodge a complaint with the CNIL if you believe your rights are not being respected.

12. Commercial Prospecting

Scroll may contact you in a professional context to present its services, solely when relevant to your business or your interactions with us.

You may object at any time to receiving commercial communications by writing to: contact@agence-scroll.com.

13. Automated Decision-Making

Scroll does not make automated decisions that produce legal or significant effects on you based on data collected via the website.

14. Privacy Policy Updates

This policy may be updated to reflect changes to the website, services offered by Scroll, tools used, or applicable regulations.

The update date indicated at the top of the page identifies the latest applicable version.