Privacy Policy

Last updated: October 2026

1. Preamble

The protection of personal data lies at the heart of Scoliom's business: we support schools, which handle sensitive data, and we apply to our own website the requirements that we implement for the schools we support.

This policy describes the processing of personal data carried out via the scoliom.com website, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel), and with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

The data controller is the publisher of the scoliom.com website (see the legal notice), who can be contacted at contact@scoliom.com.

2. Data collected

The scoliom.com website is a showcase website: it includes neither a client area nor account creation. The only personal data collected are as follows.

2.1 Data submitted via the contact form

When you send us an enquiry via the contact form, you provide us with:

• Name and position (required field);
• School (required field);
• Professional e-mail address (required field);
• Telephone number (optional field, submitted only with your enquiry);
• Content of your message (description of your needs or your project).

We invite you not to include in your message any sensitive data or any data relating to pupils or families: such data are not necessary at the stage of an initial exchange.

If you have accepted cookies and arrived on the website from a Google ad, the form also contains a hidden field, filled in automatically: the ad click identifier (gclid, gbraid or wbraid). It does not appear in the message sent to us; it is used solely to link your enquiry to that ad (see section 8.1 bis).

2.2 Technical server logs

As with any website, the server hosting scoliom.com automatically records technical logs: IP address, date and time of the request, pages viewed, browser type. These logs are used exclusively to ensure the security, maintenance and proper operation of the website. They are neither cross-referenced with the form data nor used for profiling or advertising purposes.

2.3 Audience measurement and advertising data

If you accept via the cookie banner, visit data (pages viewed, device type, source of the visit), with an anonymised IP address, are collected by Google Analytics 4 for audience measurement purposes, and Google Ads may place cookies to measure conversions from Scoliom's ads and personalise those ads. If you refuse or make no choice, none of these cookies is placed, but Google's tags still load and send Google cookieless signals. Details are given in section 8 — Cookies, audience measurement and advertising.

3. Processing purposes

The data submitted via the contact form are used for a single purpose: responding to your enquiry — contacting you back, understanding your needs and, where applicable, preparing an initial exchange or a support proposal.

They are used neither for automated canvassing, nor for sending unsolicited newsletters, nor for any other purpose.

Browsing data are also used for two distinct purposes, detailed in section 8: audience measurement of the website (Google Analytics 4) and advertising measurement and personalisation (Google Ads: measuring conversions from Scoliom's ads and personalising those ads). The corresponding cookies are placed, and ads personalised, only with your consent; without it, only cookieless signals are sent to Google. The data you enter in the contact form are never used for these purposes.

4. Legal basis

The processing of the contact form data is based on:

• the performance of pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR), where your message concerns a request for support or a service;
• the legitimate interest of Scoliom (Article 6(1)(f) of the GDPR) in responding to the enquiries addressed to it.

The processing of technical logs is based on the publisher's legitimate interest in ensuring the security and proper operation of the website.

The placing of audience measurement and advertising cookies (see section 8) is based exclusively on your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time via the "Manage cookies" link at the bottom of the page.

These processing operations are also carried out in compliance with the principles laid down by Moroccan Law 09-08: fairness, specified purpose, proportionality and minimisation of the data collected.

5. Retention period

• Contact enquiries not followed by a business relationship: the data are retained for a maximum of 12 months from your last exchange with us, and then deleted.
• Enquiries followed by a contractual relationship: the data are then retained in the context of that relationship, for the periods required by the applicable legal and contractual obligations.
• Technical server logs: retained for a limited period, in line with standard security practice, and then erased or anonymised.

6. Data recipients

The data submitted via the contact form are intended exclusively for Scoliom.

• They are never sold, hired out, assigned or exchanged with third parties.
• They are not disclosed to any commercial partners.
• Only the website's hosting provider (see the following section) acts as a technical processor, for the storage and routing of the data, without accessing them for its own purposes.

Browsing data gathered by Google's tags (see section 8) are sent to Google Ireland Ltd, which acts as a processor for audience measurement and as an independent controller for the advertising uses of Google Ads, in particular ad personalisation. Without your consent, Google receives only the cookieless signals described in section 8.1 bis, possibly accompanied by the ad click identifier present in the page address.

7. Data hosting

The scoliom.com website and the data passing through it are hosted in the European Union (Germany / France) by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
Website: www.ionos.fr

Exchanges between your browser and the website are encrypted (HTTPS/TLS).

The data that the tags described in section 8 send to Google are processed by Google Ireland Ltd and may be transferred outside the European Union under the European Commission's standard contractual clauses.

8. Cookies, audience measurement and advertising

8.1 Audience measurement — Google Analytics 4

The scoliom.com website uses Google Analytics 4, an audience measurement service, to understand how the website is visited (pages viewed, source of visits, device type) in order to improve its content. Your data are never resold. If you accept cookies, they may also be used for the advertising purposes described in section 8.1 bis.

Prior consent required: no audience measurement cookie is placed without your agreement. The Google Analytics tag is loaded on every page in Consent Mode v2: until you have accepted via the banner provided for this purpose, it neither writes nor reads any cookie on your device and sends Google only cookieless signals (see section 8.1 bis). You may withdraw your consent at any time via the "Manage cookies" link at the bottom of each page; the effects of withdrawal are described in section 8.1 bis.

• Cookies concerned: _ga and _ga_*, placed only after your acceptance;
• Lifetime: 13 months at most;
• IP address: anonymised;
• Processor: the data are processed by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland); any transfers outside the European Union are governed by the European Commission's standard contractual clauses.

8.1 bis Advertising — Google Ads

Scoliom runs Google ads to raise awareness of its services. A Google Ads tag is loaded on the website's pages in Consent Mode v2, whether or not you have accepted; it is used to measure conversions — for example, a diagnostic request sent after clicking an ad — in order to assess the effectiveness of these ads.

If you click "Accept" on the banner, the tag may place and read advertising cookies (in particular _gcl_au and _gcl_aw), and your consent allows Google to use this data to personalise the Scoliom ads you may be shown. If you arrived from an ad, the click identifier is also kept by the website and attached to the contact form (see the list below).

If you refuse or make no choice, no advertising cookie is placed and your data are not used to personalise ads. Google's tags nevertheless send Google cookieless signals, used in aggregate to estimate audience and ad effectiveness. In particular, sending an enquiry via the form may be reported to Google as a conversion, without cookies, even without your consent. If you arrived from an ad, the ad click identifier in the page address (gclid, gbraid or wbraid) may be carried over from page to page in the address of the website's links and accompany these signals; it is not then stored on your device.

The data you enter in the form (name, school, e-mail address, telephone, message) are not transmitted to Google.

Withdrawing your consent: the "Manage cookies" link in the footer erases your recorded choice, immediately switches the consent signals back to refused, erases the click identifier kept by the website and displays the banner again. The withdrawal applies to the rest of your browsing: the tags no longer read or write the cookies described in sections 8.1 and 8.1 bis. It does not, however, delete cookies already placed: they remain on your device until they expire. To delete them, clear the cookies and site data for scoliom.com in your browser settings (under "Privacy" or "Cookies and site data", depending on the browser).

• Cookies concerned: _gcl_au and _gcl_aw, placed only after your acceptance;
• Lifetime: 90 days at most;
• Ad click identifier: if you arrived from an ad and have accepted cookies, Google's click identifier (gclid, gbraid or wbraid) is kept in your browser's session storage, then attached to the contact form in a hidden field; once your enquiry is sent, it is included in the address of the thank-you page, from which the Google Ads tag may send it to Google, together with the conversion signal where applicable, so that your enquiry can be linked to the ad. It is kept only after your acceptance, is erased as soon as you refuse or withdraw your consent, and disappears when the tab is closed;
• Links to the demo space: on links leading to essai.scoliom.ma, the Google tag may add a _gl parameter to the address (cross-domain measurement); it passes to that site the measurement identifiers available in your browser — those of Google's cookies if you have accepted them, or the ad click identifier — so that both visits can be measured as a single journey;
• Recipient: Google Ireland Ltd, which acts as an independent controller for ad personalisation (see its privacy policy); any transfers outside the European Union are governed by the European Commission's standard contractual clauses.

8.2 Technical and internal storage

Apart from the Google tags described in sections 8.1 and 8.1 bis — whose cookies are placed only with your consent — the website places no other profiling tracker, and no social media button is deployed.

Without asking for your consent, the website uses only the following items, kept in your browser's storage (they are not cookies, and they contain no personal identifier):

• scoliom_consent (local storage): remembers your "Accept" or "Refuse" choice, so that you are not asked again on every page;
• scoliom_lead_fired and scoliom_contact_fired (session storage): on the thank-you pages, prevent the same enquiry from being reported twice if the page is reloaded; they disappear when the tab is closed;
• scoliom_internal (local storage, internal use): written only when the page address contains the "internal=1" parameter, reserved for the Scoliom team; it flags visits from that browser as internal traffic so that they are excluded from the statistics.

8.3 Website fonts and icons

The typefaces (Plus Jakarta Sans, Inter) and the Font Awesome icon library used to display the website are self-hosted: they are served directly from the scoliom.com server, in the same way as the website's other files.

Loading these resources therefore involves no request to a third-party content delivery network (CDN): no IP address or browsing data is transmitted to an external provider in order to display the pages.

9. Your rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access: obtain confirmation that data concerning you are being processed and receive a copy of them;
• Right to rectification: have inaccurate or incomplete data corrected;
• Right to erasure: request the deletion of your data, under the conditions laid down by the regulations;
• Right to object: object to processing based on legitimate interest, on grounds relating to your particular situation;
• Right to restriction of processing: request the temporary freezing of the use of your data;
• Right to data portability: receive the data you have provided to us in a structured, commonly used format.

Moroccan Law 09-08 grants you equivalent rights — in particular the rights of access, rectification and objection — for processing falling within its scope.

10. Exercising your rights

To exercise any of these rights, simply write to: contact@scoliom.com, stating the subject of your request. Proof of identity may be requested where there is reasonable doubt as to the identity of the applicant, solely in order to protect your data.

We reply to every request within 48 working hours, and process it within the time limits laid down by the applicable regulations.

11. Lodging a complaint with a supervisory authority

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the competent supervisory authority:

• CNIL (Commission nationale de l'informatique et des libertés — France): www.cnil.fr;
• CNDP (Commission nationale de contrôle de la protection des données à caractère personnel — Morocco): www.cndp.ma.

12. Updates to this policy

This policy may be updated to reflect changes to the website, to the processing operations or to the regulations. The date of the last update appears at the top of this page. In the event of a substantial change to the processing operations, clear information will be published on the website.