Privacy Policy

1. Scope of This Policy

This Privacy Policy applies only to rolework.com, the corporate website of Rolework. It covers visits to this website and inquiries sent through its contact form, chat-style contact interface, or contact email address.

Rolework operates a network of specialized job boards. Each job board has its own privacy policy describing the processing specific to that service. Accounts, applications, job postings, and payments on those job boards are outside the scope of this policy.

This website presents our services to a professional audience. It does not offer user accounts or a newsletter.

2. Data Controller

Rolework SAS is responsible for the personal data processing described in this policy. Privacy inquiries are handled directly by Rolework.

Company name

Rolework SAS

Legal form

French simplified joint-stock company (SAS)

Share capital

EUR 1,000

SIREN

993 818 558

SIRET

993 818 558 00013

3. Personal Data We Process

We process the information you provide when contacting us and technical information needed to deliver, understand the use of, and protect the website.

• Contact details and correspondence: Your name, email address, subject, message, date of submission, and any additional information you choose to include. The chat-style contact interface also includes the company name you provide in the email subject.
• Technical and security data: IP address, browser and device information, request metadata, delivery and security logs, and the browser signals used by Cloudflare Turnstile to detect automated activity.
• Abuse-prevention records: Pseudonymous identifiers derived from your IP address and email address, together with submission counters, timestamps, and temporary blocking information. These records are stored in our database to limit abusive submissions.
• Website usage statistics: Information about visits and use of the website through Vercel Analytics, as described in section 8.

Messages submitted through the form or chat-style interface are sent to Rolework by email. Their content is not saved in the website database or copied into a CRM. Correspondence remains in our email system and is subject to the retention policy below.

The information marked as required in the contact interface is needed to process your submission and reply. Without it, the form cannot be submitted. Please include only information relevant to your inquiry.

4. Purposes and Legal Bases

We use contact information to respond to your message and manage the correspondence needed to address your request. We do not add contact form or chat senders to marketing campaigns or newsletters.

• Responding to inquiries: Our legitimate interest in answering professional inquiries and handling related correspondence. Where you ask us to take steps towards a contract with you, the processing necessary for those steps is based on that request.
• Website delivery and security: Our legitimate interest in operating a reliable website, preventing spam and abuse, and protecting our communication channels.
• Understanding website use: Our legitimate interest in understanding how our corporate website is used and improving its content through limited usage statistics. Any tracking requiring consent is subject to that requirement.

5. Recipients and Service Providers

Messages are accessed or shared only with the people and service providers involved in processing your request or operating the services described here. Sharing is limited to the information needed for that purpose. Our email hosting provider also processes correspondence to receive, store, and send our replies.

• Vercel: Website hosting, content delivery, technical logs, and website usage statistics.
• Mailgun: Delivery of messages submitted through the contact form and chat-style interface.
• Cloudflare Turnstile: Detection and prevention of automated submissions and abuse. Cloudflare also processes security signals to improve its bot detection, as explained in its Turnstile Privacy Addendum.
• Supabase: Database hosting for abuse-prevention records and storage delivery for job board media displayed on the website.

6. International Data Transfers

Our hosting, security, database, and email providers may process information outside France or the European Economic Area, including in the United States. Processing locations depend on the service and its infrastructure.

Where personal data is transferred outside the European Economic Area, applicable safeguards may include an adequacy decision or the European Commission’s Standard Contractual Clauses, depending on the provider and transfer. You can contact us at contact@rolework.com for information about the safeguards relevant to your data and how to obtain a copy.

7. Data Retention

We retain information according to its purpose.

• Contact emails and related correspondence: Up to three years from receipt or the last meaningful contact, then deleted unless longer retention is needed to meet a legal obligation or establish, exercise, or defend legal claims.
• Abuse-prevention records: Records become eligible for automatic cleanup after seven days without an update. Cleanup runs in batches during subsequent activity, so deletion may occur later.
• Provider logs and usage statistics: Retention depends on the service, subscription, and provider settings. The three-year correspondence period does not apply to these technical records. Contact us for the retention information applicable to a particular service.

8. Analytics, Cookies, and Tracking

Rolework uses Vercel Analytics to understand website traffic and improve its content. We do not use Google Analytics, advertising pixels, a newsletter, or marketing cookies on this website.

Vercel describes its Web Analytics service as providing aggregate statistics about page views, referring websites, approximate location, and browser or device type. It uses a request-derived identifier with a visitor session discarded after 24 hours, rather than third-party cookies. That session lifetime is separate from the retention of aggregate statistics. Details are available at https://vercel.com/docs/analytics/privacy-policy.

Hosting and security services may use technical mechanisms necessary to deliver the website and protect its contact interfaces. Cloudflare Turnstile processes browser and connection signals to distinguish human visitors from bots. Its processing is explained in the provider link in section 5.

9. Data Security

The website uses HTTPS to protect data in transit. Contact submissions are validated on the server and protected by Cloudflare Turnstile, automated-submission checks, and submission limits. Abuse-prevention identifiers stored by the application are derived using keyed hashing rather than storing the original IP address or email address in those records.

Access to correspondence is limited to handling the request, as described above. These measures reduce risk but cannot guarantee absolute security. To report a concern involving your data, contact contact@rolework.com.

10. Your Rights

Subject to the conditions of applicable data protection law, you may exercise the following rights:

• Request access to your personal data and information about how it is used.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data or restriction of its processing where the legal conditions are met.
• Object to processing based on legitimate interests, on grounds relating to your particular situation.
• Request data portability where processing is automated and based on consent or a contract.

Email contact@rolework.com with your request and enough information to locate the relevant correspondence, such as the email address used and approximate contact date. Vincent Baus handles these requests directly. We may ask for additional information only where needed to confirm your identity.

We will respond without undue delay and normally within one month of receiving your request. If the complexity or number of requests requires an extension, we may extend the period by up to two further months and will explain the reason within the first month.

You may also lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL), the French data protection authority, at https://www.cnil.fr/fr/plaintes, or with the competent supervisory authority in your country of residence or work.

11. Visitors Under 18

This corporate website is intended for professional inquiries and is not directed at children. Please avoid sending personal data about children through the contact interfaces. If you believe a child has provided personal data that should be removed, contact contact@rolework.com so we can review the request.

12. External Websites and Job Boards

Rolework.com links to specialized job boards operated by Rolework and to other external websites, including social media. Each service has its own privacy policy, which identifies the responsible organization and explains the processing specific to that service.

This policy does not cover recruitment accounts, candidate applications, or other activity on those job boards. Please consult the privacy policy of the site concerned. Following an external link takes you to a service whose privacy practices may differ from those described here.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes to the website, our practices, or applicable law. The current version is published on this page with its last updated date.

14. Contact

For questions about this policy or requests relating to your personal data, contact Vincent Baus on behalf of Rolework using the details below.