Demo Request
MenuClose

Privacy notice

This notice explains what personal data the Quilane website at quilane.com collects, why, who handles it, how long it is kept, and how you can exercise your rights.

It covers this website only: demo requests and the technical operation of the site. The Quilane product has its own privacy model, described on How Quilane handles data.

Who is responsible

The controller of your personal data is [FOUNDER: company name, once the company is registered], the company that publishes this website. Its details are in the Legal notice.

For any question about your data, write to alex@quilane.com.

[COUNSEL: confirm whether a data protection officer must be designated, or whether a named contact is enough.]

What we collect when you request a demo

The form on the demo request page asks for:

  • first name
  • last name
  • work email
  • organisation
  • role
  • primary focus, chosen from a list
  • a message, if you choose to write one

If you reach the form from the self-assessment, the form also sends a hidden topic, “maturity review”, so that we know what the request is about.

The form contains a hidden field that people do not see and do not fill in. It filters automated spam. It does not identify or track you. We use no captcha.

What we collect when you write to us

You can write to alex@quilane.com instead of using the form, or if the form does not go through. We then receive your email address, your name if it appears, and whatever you write.

What the host records when you visit

When your browser requests a page, the website’s host records technical data about the request in access logs. [COUNSEL/FOUNDER: confirm from Scaleway what its access logs contain (for example IP address, date and time, page requested, browser) and how long they are kept.]

Cookies and tools

  • The website sets no cookies.
  • It uses no advertising tools. While audience measurement is off, it uses no tracking tools either. [FOUNDER: once audience measurement is on, keep only “It uses no advertising tools.”]
  • Its fonts are served from quilane.com, not from a third party.
  • The self-assessment runs in your browser. Your answers stay there and are not sent to us.

Audience measurement

[FOUNDER: keep this section only once audience measurement is switched on; remove it otherwise.]

We use Umami Cloud to count visits to pages on quilane.com. It sets no cookie and respects your browser’s Do Not Track setting. It counts a sent demo request as an event, recorded by name only, without any detail from the form. It records page addresses without their query string. It receives nothing from the self-assessment, and it is not linked to our form service.

For each visit it sees the page address, the page you came from, your browser, your device type and your approximate country. [COUNSEL: confirm what Umami processes, its data region, and how to describe it as a processor.]

[COUNSEL: confirm whether this measurement needs your consent. Setting no cookie is not enough on its own: the tracking rules also cover other techniques (EDPB guidelines on the technical scope of the ePrivacy rules). It may run without consent only if the CNIL audience-measurement exemption applies; do not state the exemption until confirmed.]

Why we use it

  • To answer your demo request and arrange the demo. This uses the details you send through the form or by email.
  • To filter spam sent through the form.
  • To operate the website and keep it secure. This uses the host’s access logs.
  • To count visits to pages, once audience measurement is on. [FOUNDER: remove this line if audience measurement stays off.]

[FOUNDER: decide whether demo request details are used for anything else, such as news or marketing emails (D27). If yes, this notice and the privacy line on the demo page must both change. Until then, say nothing either way.]

[COUNSEL: state the legal basis for each purpose. Likely: for the demo request, steps taken at your request before a possible contract, or our legitimate interest in answering it; for spam filtering and access logs, our legitimate interest in running a secure website. Confirm whether a consent checkbox is needed on the form; it has none today.]

Who receives your data

  • The Quilane team that handles demo requests. [FOUNDER: who has access.]
  • Brevo, our form service, acting as our processor [COUNSEL: confirm this role]. The form sends your request directly to Brevo. Brevo stores it as a contact in a list kept only for demo requests, and sends an email alert to our team. [FOUNDER: Brevo’s legal entity and address, from Brevo’s terms (formerly Sendinblue, Paris).] [COUNSEL: Brevo’s data processing agreement to be accepted in the account and filed.]
  • Scaleway, our website host, acting as our processor [COUNSEL: confirm this role]. Scaleway stores the website’s files and delivers them through its content delivery network, Scaleway Edge Services. Its access logs are described above.
  • Our email provider, for requests sent by email. [FOUNDER: name of the mail provider.] [COUNSEL: data processing agreement in place.]

Where your data is processed

The website’s files are stored in Scaleway’s Paris region. This concerns the website only, not the Quilane product. Some processing through Scaleway’s content delivery network may take place outside the European Union. [COUNSEL: confirm.]

[FOUNDER/COUNSEL: confirm from Brevo’s own documentation where Brevo stores demo requests, and which of its sub-processors are outside the European Economic Area.]

[COUNSEL: confirm whether personal data is transferred outside the European Economic Area through Brevo, Scaleway Edge Services, the mail provider or Umami, and which safeguards apply (for example an adequacy decision or standard contractual clauses). Word this section accordingly.]

How long we keep it

  • Demo requests: [FOUNDER/COUNSEL: period for requests that lead to no conversation (suggested: 12 months), and for requests that lead to a business relationship.] This applies in Brevo and in our mailbox.
  • Access logs: [COUNSEL/FOUNDER: Scaleway’s log retention period.]

Your rights

[COUNSEL: confirm the list below and its wording.]

You may ask us to:

  • give you access to your personal data
  • correct it
  • delete it
  • restrict how we use it
  • object to how we use it
  • give it to you, or to another organisation, in a portable format, where this applies
  • withdraw your consent at any time, where we rely on consent

To exercise a right, write to alex@quilane.com. We may ask you to confirm your identity before we act. [COUNSEL: response time wording.]

You may also complain to a data protection supervisory authority. [COUNSEL: name the authority; the CNIL if the company is French.]

Changes to this notice

We update this notice when what the website collects, or who handles it, changes. The date at the end of this notice shows the latest version. [COUNSEL: confirm wording.]

Last updated: [FOUNDER: date of publication]