Privacy Policy

Who we are

This Privacy Policy (Software and Services) provides the policy and practice of SCALITY (“We” or “SCALITY”) for the protection of personal data and details on how we collect, use, process, and share personal data we may collect through the use of SCALITY’s software and services (“Software and Services”) by the users (the “Users” or “You”) and during our business and marketing activities.
This Privacy Policy is composed of General Provisions and Specific Provisions to make it easier for you to read and understand what provisions should apply to you depending on which country you reside or are located in.
Please note that this Privacy Policy does not describe SCALITY’s data protection policy and practices relating to information that SCALITY collects through its website www.scality.com which is accessible on Privacy Policy (Website).

1. SCALITY contact details

As a general overview, SCALITY is a group of affiliated companies, held by SCALITY Inc. based in San Francisco (United States of America) and providing the Software and Services described in Section 2 below.
For any general questions about SCALITY’s practice of personal data, these General Provisions, to exercise your rights, and/or other privacy requests or inquiries, please contact us:
By email: legal@scality.com
By mail: SCALITY Inc.
149 New Montgomery Street, Suite 607 San Francisco, CA, 94105
For any question or request for information related to a specific country, please refer to the appropriate contact information in the Specific Provisions of the relevant country.

2. SCALITY Software and Services

SCALITY provides secure storage software through the below 2 types of software:

ARTESCA: a simple and secure S3 object storage software for modern applications and immutable backups, ARTESCA enables hassle-free, efficient growth from a single physical server or virtual machine all the way to petabyte capacity. For more details, please visit this link.
RING: an unbreakable cloud storage solution for data centers that offers unlimited, independent scale out of capacity and throughput performance — plus, multi-protocol application support with AWS S3-compatible API and standard NFS, SMB file interfaces. For more details, please visit this link.
SCALITY provides also updates, upgrades, and maintenance services for the Users of ARTESCA and RING.

3. Information collected

This section describes the type of information we may collect and process to perform the Software and Services that you use. SCALITY may also collect and process some personal information that you have provided us through an exchange of business cards, during a promotional event through specific register forms and marketing and promotional materials such as satisfaction questionnaires.
Please note that the Specific Provisions provide you with more detailed information and definitions of the type of information collected according to the applicable local regulations.

3.1. What type of information we collect

SCALITY may collect the following personal information or data from you directly that you have agreed to provide us:

Direct identifier information (first and last name, job title and position, address, email address, telephone number, or personal email address).
Company’s name, address, email address, and telephone number
Country and States (for the United States of America)
Registration information (user ID and password)
Transaction information (bank account number for direct debit, credit card number etc.
Geolocation information (device location, IP address, etc.)

3.2. What information we do not collect

SCALITY does not collect information or data related to medical status, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information or data, biometric information or data, and criminal records, offenses, or accusations.
SCALITY does not knowingly collect any information or data directly or indirectly that may allow us to identify an individual under the age of 18.

4. Purpose of processing

We may use the information or data that we collect about you for the following purposes:

Software and Services administration and improvement
Your personal information or data may be used to perform our contractual obligations to you with the purchased Software or requested Services, to provide you with the updates and upgrades of Software and maintenance services, offer you the optimal customer experience, to improve existing Software and Services, and to develop new products and services.
Marketing communications
We may use your personal information or data for marketing communications by sending newsletters, promotional messages for the purchase of the Software, the provision of the Services, participation in events, and/or provide you with other information that may be of interest to you.
You can opt-out of marketing communications at any time by submitting a request by email at: team.web@scality.com
Security
We may use your personal information or data to verify your identity, to monitor compliance with our policies and procedures, for fraud prevention, to ensure Software and processes work properly and securely, and to investigate and prosecute Users who violate our rules or who engage in behavior that is illegal or harmful to SCALITY or a third party.
Compliance with legal and regulatory matters
We may also use your personal information or data in connection with legal and regulatory matters such as our maintenance of business or processing records, compliance with external reporting requirements and internal policies and procedures, and responses to requests by government, law enforcement, regulators, courts, rights holders or other third parties.

5. Disclose of Personal Data

Affiliates – as part of conducting business within SCALITY’s group, SCALITY’s companies may disclose the personal information or data collected through the provision of Products and Services to other affiliates or subsidiaries for the purposes described in this Privacy Policy and subject to the provisions of this Privacy Policy. For the list of SCALITY’s companies, please access this page.
Services Providers – SCALITY may disclose personal information or data with third-party vendors, service providers contractors, and agents (the “Service Providers”) for business and commercial purposes and who perform functions on our behalf and according to a contractual relationship. The Service Providers are authorized to use the personal information or data provided by SCALITY only where such disclosure is necessary to provide these services to us. These Service Providers have agreed to minimize and proportionality restrict the use of any personal information or data we share with them either solely for the purpose of providing the contracted service to us.
Legal obligations – SCALITY may disclose personal information or data in case it is necessary to prevent, investigate, or take action against illegal activities, suspected fraud, situations involving potential threats to the safety of any person or public orders, to comply with a legal obligation, decision of a judicial court or governing regulatory authorities, or as evidence in a litigation involving SCALITY.

6. International transfer

SCALITY may transfer your personal information or data to foreign countries where SCALITY’s companies or Service Providers are located. For the details of the regulations applicable to the international transfer of a specific country, please refer to the relevant Specific Provisions.
Intercompany transfer – your personal information or data may be transferred and/or processed by and among SCALITY’s companies located in several foreign countries. For the list of SCALITY’s companies, please access this page.
International transfer to Service Providers – your personal information or data may also be transferred to our Service Providers located in foreign countries. Any international transfer of personal information or data to Service Providers located in foreign countries is conducted in compliance with the relevant data protection regulations of the transferor and transferee’s country including, where appropriate, by concluding an appropriate data transfer agreement between SCALITY and the Service Provider.

7. Storage and Security

SCALITY stores your personal information and data as long as it is reasonably necessary for the purpose described in this Privacy Policy and for which it was collected, except if otherwise required by applicable laws and regulations. Where your personal information or data is no longer needed, we will ensure that your personal information and data are deleted securely.
SCALITY has implemented and maintains appropriate technical and organizational security measures, internal policies, and procedures, and provides training to its employees to protect appropriately your personal information and data from unauthorized access, exfiltration, theft, loss, misuse, disclosure, alteration, or destruction. However, risks such as hacking by unauthorized third parties and interference with our security system cannot be ruled out. Therefore, please take care when transmitting personal data via the Internet.

8. Your rights

As a general rule, you have the following rights:

Right to withdraw your consent: you have the right to withdraw at any time your consent previously given regarding the collection and processing of your personal information and data and to request SCALITY to cease the use of such information or data.
Right of access and to be informed: you have the right to access and request information about the purposes, legal framework, interests, recipients, or categories of recipients with whom your personal information or data is shared, and the transfer to a third country.
Right to rectify, restrict the processing, or erase: you have the right to request SCALITY to verify the accuracy of your personal information or data and request to update, correct restrict the processing, or erase your personal information or data if necessary.

In addition, subject to the country where you live, specific or additional rights may be granted to you depending on the local data protection regulations. We invite you to verify the Specific Provisions for the rights provided by the local data protection regulations.
To exercise the rights described above, you need to submit your verifiable request to legal@scality.com

To respond to your request, we will need to verify your identity. Therefore, you can only exercise the above rights by making a verifiable request which must:

provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or data or an authorized representative(or if you have appointed an agent, that you in fact authorized such agent);
describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We will not respond to any request if we are unable to verify your identity and therefore confirm the personal information or data in our possession actually relates to you. If you are an adult, you can make a verifiable request on behalf of a minor under your parental authority. . Unless otherwise permitted by law, you can submit a maximum number of 2 requests over a period of 12 months.
We will confirm receipt of your verifiable request within the period proscribed by applicable law, provided that where no such period is proscribed, we endeavour to respond within 10 days and provide information about how we will process your request.
We will respond to your request within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to the shorter of the longest period permitted by applicable law, or 90 days to fulfill your request.
Our disclosure(s) will cover not more than the preceding 12-month period.
Should we deny your request, we will explain to you the reasons behind our denial.
We do not charge a fee to process or respond to reasonable verifiable requests unless such request is manifestly unfounded or excessive. In such cases, we may charge a reasonable fee, or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind it

9. Privacy for minors under 18

The Software and Services are not intended to be used by minors under the age of 18 except in specific circumstances for educational purposes under the direct supervision of a teacher or parent.
SCALITY does not knowingly collect personal information or data from minors under 18. If a parent or guardian becomes aware that his or her child has provided us with personal information or data without their consent, he or she should contact us at contact at legal@scality.com.
If we become aware that a minor under 18 has provided us with personally identifiable data, we will delete such information or data from our database.
10. Changes to the Privacy Policy (General Provisions)
These General Provisions are effective as of the date indicated in the Section “Update History”. Please note that the effective date of Specific Provisions may differ from the General Provisions.
Changes to these General Provisions or any Specific Provisions will be promptly posted to this page and accompanied by a new effective date in the Section “Update History”.