Privacy policy
Which personal data we process, why, for how long, with which providers, and how to exercise your rights.
Last updated: October 30, 2026
This policy explains which personal data ASCALATE processes when you use ascalate.com, in particular the Scale Scorecard and meeting booking, why, and what your rights are. It is drawn up in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
ASCALATE, SASU with a share capital of €15,000, RCS Paris 925 154 882, 103 rue de Vaugirard, 75006 Paris, France. Contact for any question about your data: [email protected].
ASCALATE has not appointed a data protection officer, as this is not required for its activity.
2. Data, purposes and legal bases
| Situation | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You complete the Scale Scorecard without requesting the detailed report | Your answers and your company profile, without name or e-mail | Calculate and display your results; produce anonymous statistics to improve the questionnaire | ASCALATE's legitimate interest in providing and improving the tool | Answers kept without any data that identifies you |
| You request the detailed report | First name, last name, company, work e-mail, your answers, company profile, free-text answer and results | Prepare your report and send it to you as a PDF by e-mail | Pre-contractual steps taken at your request | 6 months from your request, then deleted automatically. Only anonymous statistics are kept (company profile and results, without your name, e-mail address, company name or free-text answer). If you unsubscribed, we keep only a pseudonymized form of your e-mail address, so that we never contact you again. |
| We contact you after the report | The same data | Discuss your results and our services, in connection with your professional role | ASCALATE's legitimate interest; you can object at any time | 6 months from your request; if we then talk or meet, 3 years from our last exchange |
| You book a meeting | Name, e-mail, company, chosen time slot, optional message | Organize and prepare the meeting | Pre-contractual steps taken at your request | 3 years from our last exchange |
| You write to us | Your contact details and the content of your message | Reply to you | ASCALATE's legitimate interest in answering requests | 3 years from our last exchange |
| You visit the website | Technical data (IP address, browser type, pages viewed) | Keep the website secure and protect the Scale Scorecard against automated use (the IP address is kept only in pseudonymized form, as a salted hash, to enforce request limits); measure audience in aggregate, without cookies; count, without identifying anyone, how many visitors start and finish the Scale Scorecard | ASCALATE's legitimate interest | Limited period set by the hosting provider; pseudonymized IP address kept with a report request, or for 30 days when a connection is blocked; aggregated statistics only; Scale Scorecard counters are daily totals that contain no personal data |
If an exchange leads to an engagement, data is then kept for the duration of the contractual relationship and for the applicable legal periods.
3. The Scale Scorecard and artificial intelligence
Scale Scorecard scores, maturity levels and on-screen results are calculated from your answers using fixed rules defined by ASCALATE. When you request the detailed report, its personalized synthesis (overall reading, key risks and opportunities) is written by an artificial intelligence system, Claude, provided by Anthropic, based on instructions set by ASCALATE. Anthropic receives your answers, your company profile, your company name and your free-text answer, never your name or your e-mail address.
Under its commercial terms, Anthropic does not use the data sent by ASCALATE to train its models.
This processing does not result in any decision producing legal effects concerning you or similarly significantly affecting you. We recommend that you do not enter personal data or confidential information in the free-text answer field. To protect the tool against bots, the report form uses Cloudflare Turnstile, an invisible check that analyzes technical signals from your browser for security purposes only, and the number of requests is limited.
4. Recipients
Your data is intended for ASCALATE. It is never sold or rented. ASCALATE uses the following service providers, which act on its instructions:
| Provider | Role | Location and safeguards |
|---|---|---|
| Cloudflare, Inc. | Website hosting, security, cookie-free audience measurement, storage of answers and PDF reports, production of the PDF report, protection against bots (Turnstile) | United States; certified under the EU-U.S. Data Privacy Framework |
| Anthropic Ireland, Limited | Writing the Scale Scorecard analyses (Claude) | Ireland, with possible transfers to the United States governed by the European Commission's standard contractual clauses |
| Microsoft Ireland Operations Limited | E-mail, calendar, video meetings and telephony (Microsoft 365) | Ireland; data stored in the European Union (EU Data Boundary), any transfers governed by the EU-U.S. Data Privacy Framework and standard contractual clauses |
| Cal.com, Inc. | Meeting booking | United States; certified under the EU-U.S. Data Privacy Framework |
| Brevo | Automated sending of Scale Scorecard detailed reports (PDF by e-mail) | France; data hosted in the European Union |
5. Transfers outside the European Union
Some providers are located in the United States or may process data there. These transfers are governed either by the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers, or by standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to [email protected].
6. Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, as well as the right to object, in particular at any time and without giving reasons to the use of your data to contact you. Under French law, you may also set guidelines for the handling of your data after your death.
To exercise these rights, write to [email protected]. We reply within one month. Every e-mail we send you also includes a link to stop being contacted. If you object, we keep your e-mail address on an opposition list, only to honor your choice.
If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
7. Cookies
This website uses no cookies that require your consent. Audience measurement is provided by Cloudflare Web Analytics, which does not set cookies. Meeting booking opens on Cal.com's own page, which is subject to its own privacy policy.
8. Security
The whole website is served over an encrypted connection (HTTPS). Access to collected data is limited to the people at ASCALATE who need it.
9. Changes
This policy may change, in particular when a new service or provider is added. The date of the last update appears at the top of the page. The French version of this policy prevails.