Privacy Policy
At Orkelis, protecting your data is our absolute priority. This policy explains how we collect, use, and protect your information.
1. Data Controller
Orkelis SAS is the data controller for personal data collected on the orkelis.com website and through the Orkelis application.
DPO contact: dpo@orkelis.com
2. Data Collected
We collect the following data in the course of providing our services:
Identification data: last name, first name, professional email address, phone number.
Professional data: position, skills, availability, schedule preferences.
Connection data: login logs, IP address, browser type.
Usage data: application interactions, schedules viewed, requests made.
3. Purpose of Processing
Your data is processed for the following purposes: providing and improving the scheduling service, generating optimized schedules, managing swap and leave requests, service-related communications, technical support, and compliance with legal obligations.
4. Legal Basis
The processing of your data is based on the performance of the service contract (Article 6.1.b GDPR), your consent for marketing communications (Article 6.1.a), and our legitimate interest in improving our services (Article 6.1.f).
5. Data Retention
Your data is retained for the duration of your use of the service, then archived for 3 years after the end of the contractual relationship, in accordance with legal obligations. Connection logs are retained for 12 months.
6. Data Recipients
Your data is never sold to third parties. It is only accessible to authorized Orkelis teams and, where applicable, to our technical subcontractors (hosting, support) who are subject to the same confidentiality obligations.
7. Data Security
We implement appropriate technical and organizational measures: AES-256 encryption of data at rest, TLS encryption in transit, multi-factor authentication, access logging, and regular security audits.
Our natural language processing AI runs locally: no personal data passes through third-party servers or external cloud APIs.
8. International Transfers
Your data is hosted in France. No data transfers outside the European Union are made. For clients opting for on-premise deployment, data remains entirely on your infrastructure.
9. Your Rights
Under the GDPR, you have the following rights: right of access, right to rectification, right to erasure, right to portability, right to object, and right to restriction of processing.
To exercise your rights, contact our DPO: dpo@orkelis.com. We commit to responding within 30 days.
10. Changes
This policy may be updated. The date of the last modification is indicated below. We will inform you of any significant changes by email or in-app notification.
Last updated: March 2026.