Privacy policy

Contact and quote forms. When you write to us, request a callback, a visit, a datasheet or a quote (colocation, Private Area, dedicated data center or AI cluster configurators), we collect the information you enter: first and last name, email address, phone number, company, message and project details. We use it to answer you, prepare a proposal and follow up commercially. Legal basis: pre-contractual steps taken at your request and DC2SCALE's legitimate interest in growing its business with professionals.

These requests are recorded in our HubSpot CRM and in our database hosted by Cloudflare. A priority score is computed automatically from your request and your journey on the site (pages viewed, traffic source) to help the team handle requests; it does not lead to any decision about you.

Job applications. When you apply, we collect your identity, contact details, background, CV and cover letter to manage recruitment. Files are stored in the European Union (Cloudflare R2), and the application is tracked in HubSpot and in a Google Sheets tracker. An artificial intelligence tool (Cloudflare Workers AI) produces a summary and an indicative score of the application; the decision is always made by a person. Legal basis: pre-contractual steps taken at your request.

Audience measurement and advertising, with your consent. If you accept through the cookie banner, we use Google Tag Manager, Google Analytics, Mixpanel (servers in the European Union, including anonymised session recording with typed fields masked) and Hotjar to understand how the site is used; Google Ads and OpenAI (ChatGPT Ads) to measure the effectiveness of our campaigns, including by sending, in hashed form, the email and phone number entered in a form (enhanced conversions). Legal basis: your consent, which you can withdraw at any time.

Security and operation. The site is hosted by Cloudflare, which processes your IP address for delivery, bot protection (Cloudflare Turnstile) and abuse limiting on forms. Technical errors are reported to Sentry (servers in the European Union). Legal basis: legitimate interest in securing the site.

Third-party content. YouTube videos are only loaded (in youtube-nocookie mode) when you click them; their thumbnail is served by Google's servers. The "company" field of our forms may query the French government's company search API to complete the name you type.

The cookie banner lets you accept or refuse each category: essential cookies (always on), audience measurement, marketing and preferences.

Cookies set by DC2SCALE:
• user_consent: remembers your cookie choices (essential, 12 months);
• page_id_hydr: technical session identifier (12 months);
• dc2scale_utm: source of your visit (campaign, ad click identifier, landing page), to attribute a request to the campaign that generated it (12 months).

Cookies from the third-party tools listed in section 2 (Google, Mixpanel, Hotjar, OpenAI, Cloudflare Turnstile): their lifetime does not exceed 13 months. You can also delete them at any time from your browser settings.

This processing concerns anyone accessing our sites: employees and contractors of our customers, service providers, visitors and DC2SCALE staff.

Access control and badges. To issue a badge, we record the holder's identity, company, contact details, photo (used to visually identify the badge holder) and access rights (sites, areas, time slots). Each entry generates an access log (badge, door, date and time). This data is kept for 2 years after the badge's last activity. Purpose: safety of people, buildings and equipment entrusted to us by our customers, in line with our ISO 27001 certification. Legal basis: DC2SCALE's legitimate interest and performance of hosting contracts.

Biometric authentication. Access to some areas combines the badge with a biometric check. The biometric template is stored only on the badge, which the holder keeps: DC2SCALE does not keep any template database. The template goes with the badge when it is returned or deactivated. Legal basis: your explicit consent. If you do not wish to use biometrics, contact us to agree on another means of access.

Video surveillance. Our sites are under video surveillance, indicated by signs at the entrances, for the safety of people and property and the prevention of intrusions. Footage is kept for 30 days at most, unless extracted to investigate an incident or for legal proceedings. Only authorised security staff can access it; it may be handed to the authorities upon lawful request. Legal basis: DC2SCALE's legitimate interest in protecting its facilities.

Your data is only accessible to authorised DC2SCALE staff and to our service providers, who act on our instructions: Cloudflare (hosting, database, storage, AI), HubSpot (CRM), Google (Tag Manager, Analytics, Ads, Sheets), Mixpanel, Hotjar, OpenAI, Sentry and our on-site security and reception providers. We do not sell your data.

Some of these providers are established outside the European Union, notably in the United States. These transfers are governed by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's standard contractual clauses.

• Prospects: 3 years after your last contact;
• Customers: term of the contract, then the applicable statutory periods (10 years for accounting records);
• Unsuccessful applicants: 2 years after the last contact, unless you object;
• Audience measurement: 25 months at most;
• Badges, photos and access logs: 2 years after the badge's last activity;
• Video surveillance: 30 days at most.

DC2SCALE is ISO 27001 certified. Access to data is restricted to the people who need it, exchanges with the site are encrypted (HTTPS) and our data centers are protected by multi-factor access control and permanent monitoring.

You have the right to access, rectify, erase, restrict and port your data, the right to object (without giving reasons for direct marketing), the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.

Write to us at [email protected]. We answer within one month. We will only ask for proof of identity if we have reasonable doubts about it.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL.

We may update this policy to reflect changes in our services or in the law. Last updated: October 8, 2026.