FR/ENDiscuss my project

Privacy Policy

Last updated: 30 September 2026

This privacy policy explains how SCROLL collects, uses, and protects personal data submitted via the agence-scroll.com website, as well as in the context of its business exchanges and services.

Scroll places particular importance on the confidentiality of personal data and is committed to processing data in a fair, transparent, proportionate, and secure manner.

1. Data Controller

The data controller is:
SCROLL, a limited liability company (SARL) with a capital of 1 000 €
SIREN: 894 148 998
Registered office: 50 rue Rodier, 75009 Paris, France
Offices: 20 rue des Taillandiers, 75011 Paris, France
Email: contact@agence-scroll.com

For any questions regarding your personal data or to exercise your rights, you may contact us at the following address: contact@agence-scroll.com.

2. Personal Data Collected

Scroll may collect personal data when you use the website, fill out a form, contact us, or enter into a business relationship with Scroll.

The data concerned may include, but is not limited to:

  • Identification and contact data: first name, last name, email address, phone number, company, position or role.
  • Data related to your request or project: information submitted via our forms, quote requests, appointment requests, specifications, expressed needs, indicative budget, deadlines, messages, and files voluntarily provided.
  • Data related to the business relationship: email exchanges, quotes, contracts, invoices, project tracking information, and information necessary for the performance of our services.
  • Technical and navigation data: pages visited, date and time of visit, device type, browser used, navigation events, and technical data necessary for audience measurement and the proper functioning of the site.

Scroll does not request that you submit sensitive data via its forms. We invite you not to share sensitive or confidential information that is not necessary for processing your request.

3. Purposes of Processing and Legal Bases

The collected data is used for the following purposes:

  • Responding to a request sent via the website — Legitimate interest or pre-contractual measures.
  • Scheduling an appointment or qualifying a need — Pre-contractual measures.
  • Preparing a quote, a commercial proposal, or a contract — Pre-contractual measures.
  • Executing a service entrusted to Scroll — Contract performance.
  • Ensuring customer follow-up and project management — Contract performance or legitimate interest.
  • Manage billing, accounting, and administrative obligations — Legal requirement.
  • Improve the website, measure its audience and measure conversions on campaign pages (Advanced Consent Mode) and from ads shown in ChatGPT — Legitimate interest for audience measurement, exempt from consent under the conditions set by the CNIL, with the right to object; consent for session recording, linking forms to your visit and the OpenAI pixel.
  • Send B2B commercial communications related to our services — Legitimate interest, with the option to opt out.
  • Ensure website security and prevent abuse — Legitimate interest.

4. Forms and contact requests

When you fill out a form on the website, the information provided is used to process your request, respond to you, and, where applicable, offer you an exchange, an appointment, or a tailored proposal. Along with your request, we also record the page through which you entered the website and the name of the site you came from (for example a search engine), unless you have turned off audience measurement.

Mandatory fields are limited to the information necessary to process your request. Without this information, Scroll may not be able to respond to you properly.

5. Audience measurement and Consent Mode

The website uses an audience measurement solution to understand how visitors browse the site, identify the most visited pages, improve the user experience, and measure content performance.

To this end, Scroll uses two audience measurement tools, configured according to the conditions set by the CNIL, the French data protection authority, for exemption from consent. Matomo is hosted by Scroll within the European Union; it anonymises two IP address octets and uses a first-party cookie for up to 365 days. PostHog is provided by a vendor that hosts data within the European Union and acts on behalf of Scroll; it does not keep IP addresses, and the identifier stored in its cookies is renewed no later than 13 months after its creation. These tools are used to produce visit statistics: Scroll does not use them to analyse the individual journeys of visitors who have not given their consent. If you accept the advanced analytics features in the preferences banner, PostHog starts a new identifier, records your session on campaign pages and links your contact request to your visit from that moment on, without going back to previous visits. The “Disable audience measurement” button at the bottom of this page stops both tools and deletes their cookies. Detailed Matomo visits older than 750 days are deleted during weekly cleanup; aggregate statistics remain available without a fixed expiry.

In this configuration, Scroll aims to limit data collection to what is strictly necessary for audience measurement. The collected data is not used to track visitors across other sites or to create advertising profiles.

The data that may be processed can include:

  • pages visited;
  • date and time of visit;
  • device or browser type used;
  • navigation events necessary to understand site usage;
  • limited technical data used to generate audience statistics.

Scroll does not seek to personally identify visitors through its audience measurement tools. In particular, Scroll does not transmit directly identifying data, such as an email address, name, or phone number, to its audience measurement tools (Matomo, PostHog) without an appropriate legal basis.

On advertising campaign pages, Scroll uses the Google tag with Advanced Consent Mode. Until you give your consent, it sets no cookies and keeps analytics and advertising storage, ad user data and personalization disabled; it only sends Google limited signals, without cookies or advertising identifiers, to measure and model conversions. If you accept a category, the corresponding storage is allowed. The strictly necessary cookie that remembers your choice is retained for 180 days, and you can change that choice at any time.

When you consent to advertising measurement, the OpenAI pixel can attribute website visits and conversions to ads shown in ChatGPT. It uses the first-party cookies __oppref (advertising click, 30 days) and __obref (browser identifier, 12 months). Its consent preference is stored in __oaiq_consent (30 days) and in browser local storage under oaiq_consent.

Automatic advanced matching is enabled: after your marketing consent, the pixel may detect information entered in contact fields to improve attribution. Email, phone number, first name and last name may be sent as hashes (transformed into fingerprints, which does not make them anonymous). Depending on the available fields, country, city, region and postal code may be sent in normalized form.

Without marketing consent, the website does not load the pixel. If you withdraw consent, it stops measurement and deletes measurement cookies; the preference may remain stored to remember your choice. You can change your choice through cookie preferences.

6. Data recipients

The personal data collected is intended for Scroll and authorized personnel within its team.

It may also be shared with technical service providers acting on behalf of Scroll, notably for:

  • website hosting;
  • form management;
  • appointment scheduling;
  • email;
  • billing;
  • commercial management;
  • audience measurement;
  • project management.

Scroll uses Matomo and PostHog for audience measurement. On campaign pages, Google also processes limited signals for conversion measurement and modeling according to the choices expressed in the banner. OpenAI acts in the same way, only with your consent, to attribute conversions to ads shown in ChatGPT.

Scroll does not sell your personal data to third parties.

Where necessary, certain data may also be disclosed to administrative, judicial, or tax authorities, solely to comply with a legal obligation.

7. Subcontracting and services provided for clients

As part of its services, Scroll may process personal data on behalf of its clients, particularly when creating websites, applications, automations, internal tools, or solutions incorporating artificial intelligence.

In such cases, Scroll acts as a data processor under the GDPR. The data entrusted by the client is processed solely for the purposes of the service, in accordance with the client’s instructions and the terms set out in the contract.

The specific terms of processing, security, confidentiality, retention, or deletion of data may be detailed in the quote, contract, special conditions, or a dedicated subcontracting agreement.

8. Transfers outside the European Union

Some of the technical service providers used by Scroll may be located outside the European Union or process data from third countries.

When such transfers are necessary, Scroll ensures they are governed by appropriate safeguards in accordance with applicable regulations, including standard contractual clauses, an adequacy decision, or any other mechanism recognized by the GDPR.

For audience measurement, Scroll prioritizes a configuration that limits data collection. On campaign pages, limited signals without cookies may be sent to Google; any transfers outside the European Union are governed by applicable safeguards. Data sent to OpenAI (United States) with your consent falls under the same safeguards.

9. Retention periods

Scroll retains personal data only for as long as necessary to fulfill the purposes for which it was collected.

For reference:

  • Contact requests and incoming inquiries — Duration necessary to process the request, then up to 36 months after the last contact.
  • B2B prospect data — Up to 36 months after the last contact from the prospect.
  • Client data and project tracking data — For the duration of the contractual relationship, then archived if necessary for evidence or legal obligation.
  • Unfollowed quotes — Duration necessary for commercial follow-up, then deletion or archiving depending on the situation.
  • Invoices and accounting documents — 10 years in accordance with accounting obligations.
  • Audience measurement data — Limited and proportionate duration for the purpose of audience measurement.
  • Data required to manage a commercial opt-out — Duration required to process the opt-out.

10. Data Security

Scroll implements reasonable technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.

These measures may include, as applicable: access restrictions, permission management, authentication, backups, selection of providers with security guarantees, team awareness, and securing the tools used.

11. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to object;
  • right to restriction of processing;
  • right to data portability, where applicable;
  • right to withdraw your consent at any time, where processing is based on consent;
  • right to define instructions regarding the handling of your data after your death.

To exercise your rights, you may write to: contact@agence-scroll.com.

To protect your data, Scroll may request proof of identity if necessary to verify your request.

You also have the right to lodge a complaint with the CNIL if you believe your rights are not being respected.

12. Commercial Prospecting

Scroll may contact you in a professional context to present its services, solely when relevant to your business or your interactions with us.

You may object at any time to receiving commercial communications by writing to: contact@agence-scroll.com.

13. Automated Decision-Making

Scroll does not make automated decisions that produce legal or significant effects on you based on data collected via the website.

14. Privacy Policy Updates

This policy may be updated to reflect changes to the website, services offered by Scroll, tools used, or applicable regulations.

The update date indicated at the top of the page identifies the latest applicable version.