Privacy

Privacy policy

How SULO Group handles your personal data on this website.

Last updated: November 2026

1. Who is responsible

The controller for the processing of personal data on this website is SULO SAS, 1 rue du Débarcadère, Immeuble Perspective Défense, Building A, 92700 Colombes, France, together with its subsidiaries (“SULO Group”, “we”). Our Data Protection Officer can be reached at dataprotection@sulo.com.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

2. Visiting this website

When you open a page, your browser automatically sends technical data to our server: IP address, date and time, the page requested, the referring page, browser and operating system. Our hosting provider, Mittwald CM Service GmbH & Co. KG, Espelkamp, Germany, stores this data in server log files. We use it only to deliver the website and to keep it secure and working. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Log files are kept only as long as needed for security and fault analysis and are then deleted.

3. Fonts

To display text consistently, this website loads the “Open Sans” font from Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your browser connects to Google’s servers, which receive your IP address. Legal basis: our legitimate interest in a consistent and readable presentation (Art. 6(1)(f) GDPR). More information: Google privacy policy.

4. Videos

Some pages show YouTube videos in privacy-enhanced mode (youtube-nocookie.com). Nothing is loaded from YouTube until you click the play button. Only then does your browser connect to the servers of Google Ireland Limited, which receive your IP address and may store information in your browser. Legal basis: your consent, given by clicking the play button (Art. 6(1)(a) GDPR).

5. Contact by e-mail

When you write to us by e-mail, we process the data you send – usually your name, e-mail address, company and message – to answer your enquiry. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep this data for up to two years after our last contact, unless longer retention is required by law. Our e-mail is provided by Microsoft.

6. Job openings and applications

On the “Join us” page, current openings are shown on an interactive map. To display it, your browser loads the map software Leaflet from unpkg.com, map tiles from the servers of the OpenStreetMap Foundation and country flags from flagcdn.com. These providers receive your IP address. Legal basis: our legitimate interest in presenting open positions clearly (Art. 6(1)(f) GDPR). When you click “Apply now”, you are taken to the job ad of the local Business Unit, where its own privacy policy applies.

If you send us an application, we use your data and your CV only for the recruitment process (Art. 6(1)(b) GDPR). If we do not hire you, we keep your application for up to two years so that we can contact you about other positions; you can ask us to delete it earlier at any time.

7. Investor and lender area

Access to the investor and lender area is limited to accounts issued by SULO Group Finance. When you sign in, we process your user name and check your password against a stored, encrypted value. A session cookie (“SULO_IR”) keeps you signed in; it is deleted when you close your browser or after 30 minutes without activity. To protect the area against misuse, failed sign-in attempts are counted per IP address, stored only in encrypted form, and access is blocked for 15 minutes after five failed attempts. Legal basis: providing the requested access (Art. 6(1)(b) GDPR) and our legitimate interest in security (Art. 6(1)(f) GDPR).

8. Cookies and similar technologies

Which cookies and browser storage this website uses is explained in our cookies management policy.

9. Recipients

Your data may be shared with SULO Group companies where this is needed for your request, and with the service providers named above, who act on our behalf: Mittwald (hosting), Microsoft (e-mail) and Google (fonts and videos), as well as with the providers of the job map named in section 6. We share data with authorities only where we are legally required to do so. We do not sell personal data.

10. Transfers outside the EU

Google and Microsoft may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework; in addition, the European Commission’s standard contractual clauses apply. The providers of the job map named in section 6 may also process data outside the EU.

11. No automated decisions

We do not use your data for automated decision-making or profiling.

12. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw your consent at any time with effect for the future. You can also give instructions on what happens to your data after your death. Send your request to dataprotection@sulo.com or by post to SULO SAS, Data Protection Officer, 1 rue du Débarcadère, Building A, 92700 Colombes, France. We answer within one month; we may ask for proof of identity.

You also have the right to lodge a complaint with the French data protection authority: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.

13. Changes

We update this policy when the website or the law changes. The current version is always available on this page.