Personal data protection and privacy
Last updated: August 21, 2026
This privacy policy describes our practices regarding the collection, use, and protection of your personal data. It applies to the websites oskala.com and softena.com and their .fr extensions, as well as to the Oskala solutions (web platform and mobile application) published by Softena.
This policy does not apply to services provided by our partners, who may have their own privacy policies. By accessing this site or using our solutions, you accept the provisions of this policy.
Softena, publisher of the Oskala solutions, is the controller of your personal data.
When your data is entered into the Oskala solutions in the course of a client organization's activity (for example, work reports or timesheets filled in by its employees), that organization is the controller of this data. Softena then acts as a processor within the meaning of Article 28 of the GDPR and processes this data only on the instructions of its client.
Contact details:
When you subscribe to a service or request a service delivery, we collect the information required to fulfill and invoice your order, including:
Other information may be collected on an optional basis:
We collect the information required to process transactions, including:
We also collect other types of information that you provide voluntarily, including:
To ensure security and performance and to measure the use of our services, we record account activity data, including:
Traffic is encrypted end to end over HTTPS.
On some of our products, you can:
For all our services, we apply logical or strong data isolation (dedicated storage account and database instance per customer) depending on the plan.
When you use our Artificial Intelligence features for automatic corrections, analyses, and multilingual summaries of reports or files, the submitted text data is processed temporarily by our AI algorithms. This data is used solely to provide the requested service and is not kept longer than necessary to perform the task.
Data is stored on Microsoft Azure and hosted exclusively in Europe (geo-replication to Dublin).
Microsoft Azure is certified compliant with:
Backups are performed daily with a retention period of 1 to 7 days depending on the service and volume.
Softena uses your personal data to:
So that you can take full advantage of our products, we send you:
These communications are sent by email, through the user interface of your Customer Area, and occasionally by phone.
We process your data on the following legal bases:
We keep your personal data for the following periods:
The personal data collected is intended for the people in charge of information processing within Softena.
Softena does not use advertising and does not resell, assign, transfer, or share data with third parties for commercial purposes.
However, for some of our products that require the involvement of partner companies, or when we act as an intermediary, it may be necessary to share some of your data with third parties, in particular:
Our main technical processors are:
These partners are bound by strict contractual obligations and only have access to the data necessary to perform their services.
We may disclose your personal data to the competent authorities when required to do so by law.
Your personal data is hosted and processed in Europe. We do not transfer any data outside the European Union, except where legally required or where necessary for the performance of the contract, and subject to appropriate safeguards in accordance with the GDPR.
The websites and applications of the softena.com and oskala.com domains and subdomains use cookies, small text files placed on your device to help us provide a better user experience.
We use the following types of cookies:
On your first visit to the site, a consent banner (Cookiebot) lets you accept or refuse non-essential cookies, category by category. No cookie subject to consent is set before you make your choice. You can change or withdraw your consent at any time by reopening the cookie management banner.
You can also configure your browser to refuse cookies. Refusing a cookie may prevent access to certain services.
Instructions for managing cookies in different browsers:
In accordance with the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
To exercise these rights, you can contact us by:
We will endeavor to respond to your request within one month.
To request the deletion of your Oskala account (mobile app or web platform) and the associated data, a dedicated procedure is available on the Account and data deletion page.
If, after contacting us, you believe your rights have not been respected, you can file a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Providing personal data (whether directly on the site, by phone, or over the Internet) is never without risk, and electronic communication systems cannot be fully protected against sabotage or hacking.
Nevertheless, Softena is committed to taking appropriate technical and organizational measures to:
These measures include:
Softena reserves the right to modify this privacy policy at any time. Changes take effect as soon as they are published on the site.
In the event of a substantial change, we will inform you by email or by a notification on our site.
The date of the last update is always shown at the top of this policy.
For any question relating to this privacy policy or the exercise of your rights, you can contact us: