Privacy Policy

Last updated: May 2025

Scientific Climate Ratings (hereinafter referred to as 'we' or 'us') is committed to maintaining the privacy of personal information that you provide to us when using our website. This Privacy Policy describes how we treat personal information received about you when you visit our website.

This Privacy Policy applies to personal data processed by us in our business, including on our websites, mobile applications, and other online or offline offerings (collectively, the "Services").

  1. Information we collect

1.1. When you visit our website as an unregistered user, no personal data about you are collected by us. Only the current IP address of your computer, date and time, your browser type and computer operating system, along with a record of the pages on our site which you access, is logged. It is not possible to identify you as a person from this information. The data about your visit to our website, which we store automatically in log files, is used purely for statistical and security purposes or to improve our website.

1.2. When you contact us directly or when you subscribe to the password-protected area of our website, we will collect personally-identifying information from you that may specifically include your name, company, position, address, e-mail address, telephone number and password.

1.3 Personal information you share with us through our Website: You may share personal details with us when completing a form on our Website, such as when you submit a question, request contact regarding our products, services, research, or events; sign up for marketing, careers, or other communications; download resources; register for events; or submit a form for any other purpose (including, for example, exercising applicable privacy rights). The information you provide may include your contact information and any other data collected via the form to enable us to respond to your request.

  1. How we use personal data

2.1 Legal basis for processing: We process your personal data on the following legal bases:

  • Legitimate interest: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests.
  • Consent: You have given us consent to process your personal data for one or more specific purposes.
  • Contractual necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

2.2. We may track and analyse your use of our website and use your personal data for the following purposes:

  • To provide you with news and reports, according to your subscription;
  • To provide you with information on new or existing products and services;
  • Responding to your requests and inquiries, including adding you to our email lists related to marketing and careers (subject to your consent, where required by applicable law);
  • To allow us to develop our website, our products and services;
  • To allow us to personalise the content of our website;
  • To allow us to verify your authorisation to use our website;
  • To allow us to monitor whether your use of our website complies with the applicable terms and conditions.

2.3. Our employees are obliged to respect data confidentiality.

2.4. To the extent legally permitted, we may also use and disclose personally-identifying information in special circumstances where it is necessary to enforce our rights (for example, when necessary to protect our intellectual property or contractual rights). We may also disclose or use your personal information when the law requires us to do so.

2.5 Data sharing and recipients: We may share your personal data with the following categories of recipients:

  • Service providers and vendors who perform services on our behalf
  • Professional advisors such as lawyers, accountants, and tax advisors
  • Advertising partners
  • Affiliated companies
  • Authorities and others: Law enforcement, government officials, or other third parties when we are required to do so by applicable law

2.6 International data transfers: Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. Specifically, our servers are located in London, UK for the front-end and Mumbai, India for the backend].

We have implemented appropriate safeguards to ensure that your information will remain protected in accordance with this Privacy Policy. These include implementing the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and third-party service providers and partners, which require all such recipients to protect personal information that they process from the EEA in accordance with European data protection laws.

2.7 Data retention: We store the personal data we collect for as long as is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.

  1. Cookies

3.1. A cookie is a string of information that is sent by a website and stored on your device. Cookies contain various information in regard to website visits and can identify your device. You can delete the cookies stored on your device at any time.

3.2. We employ cookie technology primarily to facilitate access procedures and provide the requested services. Our cookies are transient cookies that are meant to be deleted by Internet browsers at the end of each session. Since certain browser default configurations allow such cookies to persist, we do not accept cookies older than 24 hours for general website access and 4 hours for access to password-restricted pages. Every time a cookie is deleted or expires, you will be asked to confirm your agreement with the terms and conditions for the use of our website again and/or to re-enter your username and password for access to password-restricted pages.

3.3 We employ Google Analytics technology to collect usage data used purely for statistical purposes or to improve our website. We do not send data that might identify users to Google or any of its partners. You can learn more on how Google uses data when you use our website here: https://www.google.com/analytics/terms/us.html.

3.4 For compliance with European ePrivacy law (Directive 2002/58/EC), users are informed that usage of the website requires consent with the manner in which we use cookies. While our uses of cookies mentioned at paragraph 3.2. are exempt from consent according to the EU advisory body on data protection, consent is required for measurement of audience as described at paragraph 3.3.

3.5 Types of cookies we use:

  • Strictly necessary cookies: These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. These cookies cannot be turned off.
  • Analytical/performance cookies: These cookies allow us to recognize and count the number of visitors and to see how visitors move around our website. This will help us to improve the way our website works.
  • Functionality cookies: These cookies are used to recognize you when you return to our website. This enables us to personalize our content for you and remember your preferences.

3.6 Your cookie choices: When you first visit our website, you will be shown a cookie banner that allows you to accept or decline non-essential cookies. You can change your cookie preferences at any time by clicking on the 'Cookie Settings' link in the footer of our website.

  1. Security

We have implemented appropriate technical and organisational measures, such as limiting access to the data to authorised personnel only and storing data on a secure server, to protect your personally-identifiable information against accidental or intentional manipulation, loss, destruction and access by unauthorised persons. Our security procedures are continually enhanced as new technology becomes available.

Your password is personal and strictly confidential. If you have forgotten your password, you will be able to ask for a password reset online. We will not be able to send you back your current password. For security reasons, we do not store your personal account details for payment.

In the event of a personal data breach, we will notify the relevant supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the breach is unlikely to result in a risk to your rights and freedoms. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

  1. Review and correction Your data protection rights

You may review, update and correct the personally identifiable information that you have provided to us by accessing your profile in the password-protected area of our website, or by contacting us by e-mail at contact@scientificratings.com. You may request the deletion of the personally-identifiable information that you have provided to us by contacting us by e-mail at contact@scientificratings.com or by postal mail at 16-18 rue du 4 septembre, 75002 Paris, FRANCE to EDHEC Business School - Scientific Climate Ratings. Upon request, we will inform you in writing of what personal data we store as defined by applicable law.

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights:

  • Right to access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request that we correct any inaccurate personal data we hold about you and complete any incomplete personal data.
  • Right to erasure (right to be forgotten): You have the right to request that we delete your personal data under certain circumstances, such as when the data is no longer necessary, when you withdraw consent, or when you object to processing based on legitimate interests and there are no overriding legitimate grounds.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data.
  • Right to data portability: You have the right to request that we provide you or a third party with a copy of your personal data in a structured, commonly used, machine-readable format.
  • Right to object: You have the right to object to our processing of your personal data based on our legitimate interests or for direct marketing purposes.
  • Rights related to automated decision-making including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  • Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

You may exercise these rights by contacting us at contact@scientificratings.com  or at our postal address: 16-18 rue du 4 septembre, 75002 Paris, FRANCE to EDHEC Business School - Scientific

Climate Ratings. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests.

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

  1. Policy modifications

We may revise this Privacy Policy from time to time and post the new version on our website, which will be applicable upon posting. Please check our website from time to time and make sure that you are aware of the most recent version of this Privacy Policy. You will find the date that the policy was last revised at the top of this Privacy Policy.

Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g., to object to the processing).

  1. Links to other sites

Through links located on our website, we may make content or services available to you from other websites (including affiliated or co-branded websites) not operated or controlled by us. These other websites are not subject to this Privacy Policy and we are not responsible for the content or the privacy practices of these other websites (including affiliated or co-branded websites). We recommend that you review the privacy policy at each such website to determine how that site protects your privacy.

  1. Comments and questions

If you have any questions, comments or concerns about our Privacy Policy, you may contact us by e-mail at contact@scientificratings.com.

  1. Children's privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.