Data Processing Commitments

[DATA_3] Created on: 12.04.2020 - Last modified / reviewed: 15.09.2025

—

Disclaimer: The present document is exclusively applicable to companies that have expressly requested that their data be hosted within the European Union. It shall not be construed as applicable to any entity that has not made such a request, nor shall it confer any rights or obligations upon parties not expressly identified herein.

—

In accordance with the GDPR Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and as described into the Scaleflex Data Processing Addendum, Scaleflex is committed to process your data in Europe only, unless instructed otherwise.

Over the past years, Scaleflex has carefully selected partners which deliver their business in respect with the GDPR regulations and which allow Scaleflex to provide the quality of services within the data protection rules.

Scaleflex is committed to protecting our customers' data and ensuring that the content we get from them is safely handled and that all of our processing activities are performed in accordance with GDPR legislation as part of our Data Privacy commitment.

In order to provide peace of mind to our customers, Scaleflex has chosen OVHcloud as its primary infrastructure provider, with datacenters throughout Europe, strong GDPR policy, and as a processor, OVH commits to:

• Processing personal data solely for the purposes of carrying out the services correctly: OVH will never process your information for any other purposes (marketing, etc.).

• Keeping your data inside the EU and only in countries recognised by the European Union as offering a sufficient degree of protection, provided that you do not select a datacenter located in a geographical area outside the EU.

• Informing you if we have enlisted a subcontractor to process your personal data: to date, no services involving any access to data you have stored as part of the service have been subcontracted outside the OVH Group.

• Applying strict security standards to provide a high level of security for our customers.

• Reporting any data breach to you without "undue delay".

• Helping you meet your regulatory obligations, by providing you with comprehensive information on our services.

Scaleflex hereby confirms that, upon an express request by the User for their data to remain within the European Union, such data will be securely processed and hosted in our French OVH datacenters, in full compliance with applicable EU and French data protection laws.

Jean-François Lecas	Emil Novakov
CXO, Scaleflex	CEO, Scaleflex