Privacy Policy
Last update: March 6, 2026
Table of Contents
Introduction
Our company ENALEAN operates the website
https://www.tuleap.com/
(hereinafter the “Site“) through which it presents its software solution
Tuleap for businesses (hereinafter the “Solution“).
When using the Site, we may ask you to provide us with personal data concerning you.
The term “Personal Data” refers to any information that allows an individual to be identified directly or indirectly, including but not limited to email address, title, first name, last name, birth name, nationality, date of birth, phone number, place of birth, country of birth, ethnic origin, profession, data relating to your transactions on the Site, as well as any other information that we may ask you to provide and that you choose to share with us.
ENALEAN places the highest importance on the confidentiality and security of Personal Data. This privacy policy (hereinafter the “Privacy Policy“) has been established in compliance with applicable laws, regulations, and standards and informs you about the methods of collection, processing, sharing, retention, and protection of your Personal Data.
This Privacy Policy applies to the Site and to any other website, web or mobile application, communication, and services associated with ENALEAN, including off-site services such as partner services (hereinafter the “Services“), except where services are explicitly provided under another privacy policy.
Our Privacy Policy applies to all users of the Site and Services (hereinafter the “Users“).
Data Controller
ENALEAN acts as the data controller for the Personal Data you provide when using the Site and our Services.
Purposes of Processing the Collected Data
Personal Data is processed mainly for the following purposes:
| Categories of collected information | Information collected | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Contact data | First name, last name, title, position, phone number, professional email address and any Personal Data that the User may provide when submitting a contact request. | Contacting the user and providing advice, responding to quote requests, or answering questions related to ENALEAN and/or the Solution. | We rely on our legitimate interests to provide relevant and effective Services to our Users. User consent is also relied upon when they voluntarily provide their data to contact us. | Data is retained only for the time necessary to process the request submitted. |
| Newsletter subscription data | Email address, first name, last name | Subscription to and sending of ENALEAN news and updates by email | Processing is based on the User’s consent. | Data is retained only for the duration necessary to send the newsletter and is deleted immediately upon notification of unsubscription. |
| Technical data | IP address / device identifier, user agent. We may also collect the name associated with your device, device type, phone number, country, and any other information you voluntarily provide. | Identify accounts with incidents or anomalies and notify them. Detect suspected fraud. | We rely on our legitimate interests to provide reliable and relevant Services to our Users. | Data is retained only for the time necessary for processing. In the event of an alert: 12 months from the date of the fraud alert. Alerts not confirmed after twelve (12) months are deleted. Confirmed alerts may be retained for a maximum of five (5) years from the closure of the fraud case. |
Recipients
Personal Data may be collected, transmitted, or processed by third parties on behalf of ENALEAN strictly for the purposes mentioned above in section 3 “Purposes of processing collected data”.
In such cases, ENALEAN ensures that all service providers with whom it works maintain the confidentiality and security of the Personal Data.
ENALEAN may request services requiring the processing of Personal Data from subcontractors or service providers such as:
- IT services providing maintenance, hosting, and technical support for the Site and Services that may contain Personal Data relating to Users
- Marketing and/or web agencies responsible for the website and marketing or advertising campaigns
- Administrative services such as lawyers, auditors, accountants, or competent public authorities upon request
All transfers of information to service providers are covered by appropriate data protection agreements and, in the case of cross-border transfers, by legally recognized mechanisms.
Security and Confidentiality
ENALEAN implements organizational, technical, and software measures to ensure the physical and IT security of Personal Data and to protect it against alteration, destruction, or unauthorized access.
All employees, contractors, and subcontractors of ENALEAN are required to comply with strict confidentiality and data protection obligations.
User Rights
In accordance with the regulations applicable to Personal Data, the User has the following rights:
- The right to access and rectify Personal Data concerning them. In such cases, before implementing this right, ENALEAN may request proof of the User’s identity in order to verify its accuracy.
- The right for the User to withdraw their consent at any time to the processing of their Personal Data, for processing carried out on this basis.
- The right to request the deletion of their Personal Data. However, data necessary for compliance with a legal obligation imposed on the data controller cannot be deleted. In such cases, the User will be duly informed and we undertake to delete the relevant Data once the legal retention period has expired.
- The right to object to the processing of their Personal Data on legitimate grounds.
- The right to data portability. In accordance with Article 20 of Regulation (EU) No. 2016/679, known as the “GDPR”, the User has the right to receive the Personal Data concerning them that they have provided to ENALEAN, in a structured, commonly used, and machine-readable format, and has the right to transmit those Data to another data controller without hindrance from ENALEAN, to whom the Personal Data have been provided.
- Finally, the User may define what happens to their Personal Data after their death and may choose whether ENALEAN communicates (or does not communicate) these Data to a third party that they have previously designated. In the event of death and in the absence of instructions from the User, ENALEAN undertakes to destroy these Data, unless their retention proves necessary for evidentiary purposes or to comply with a legal obligation.
Rights related to the GDPR may be exercised by postal mail or by email at:
ENALEAN
87 AVENUE DE CHAMBERY, 73230 SAINT-ALBAN-LEYSSE
Email: dpo@enalean.com
If you believe that your “Data Protection and Freedom” rights have not been respected after contacting us, you may file a complaint with the French Data Protection Authority (CNIL).
Cookies
Personal data is under no circumstances transferred to third parties for commercial purposes.
However, ENALEAN uses cookies. Cookies are text files, often encrypted, stored in your browser. They are created when a user’s browser loads a given website: the site sends information to the browser, which then creates a text file. Each time a user returns to the same site, the browser retrieves this file and sends it back to the website’s server.
Two types of cookies can be distinguished, which do not have the same purposes: technical cookies and advertising cookies.
- Technical cookies are used throughout your browsing session to facilitate navigation and enable certain functions. For example, a technical cookie may be used to remember responses entered in a form or the user’s preferences regarding language or website display when such options are available.
- Advertising cookies may be created not only by the website on which the user is browsing but also by other websites displaying advertisements, banners, widgets, or other elements on the page being viewed. These cookies may in particular be used to deliver targeted advertising, meaning advertising based on the user’s browsing activity.
Cookie categories
Strictly necessary cookies
These cookies are essential for the proper functioning of the website and do not require consent.
They include session cookies, security cookies, as well as Plezi technical trackers required for the display and operation of contact forms on tuleap.com.
Service name: Plezi and Hubspot
Purpose: Audience analysis and user experience optimization (form memorization).
Type of cookies: First-party cookies.
Processing: Plezi collects browsing data separately on your behalf. No data is transmitted to advertising networks or third parties.
Functional and marketing cookies (YouTube, Storylane)
These cookies enable advanced features:
YouTube: Allows the playback of videos hosted on the platform. Without your consent, the videos will not be displayed.
Storylane: Enables the display of interactive product demonstrations.
Analytics cookies (Matomo, Google Analytics, Clarity, Hotjar)
These cookies are used to measure website traffic and analyze how the sites are used in order to improve their operation.
Functional, marketing, or analytics cookies are used subject to the user’s consent. The User is considered to have given consent to the placement of cookies if they continue browsing the Site by clicking the “I accept” button on the banner informing them about the use of cookies.
This consent is valid for a period of twelve (12) months from the first placement of the cookie. After this period, consent will be requested again for the use of these cookies.
For more information on the use, management, and deletion of cookies for any type of browser, please consult the following link:
https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser
For your information, you may refuse the placement of cookies by configuring your browser. However, such refusal may prevent the proper functioning of the Site.
Changes to the Privacy Policy
ENALEAN reserves the right to modify or update this Privacy Policy at any time without prior notice.
Note: This page is an English translation of the original French Privacy Policy.
In the event of discrepancies or interpretation issues, the French version shall prevail.
