Privacy policy

Last updated: 31 August 2026

INSIDER SAS attaches particular importance to the protection of personal data. This policy describes the processing carried out in connection with the use of the website https://insider.paris (the "Site"), in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended.

Data controller

Personal data collected in connection with the use of the Site is processed by:

INSIDER SAS
Legal form: société par actions simplifiée with share capital of EUR 1,000
SIREN: 951 059 237, R.C.S. Paris
Registered office: 59 rue de Ponthieu, 75008 Paris, France
E-mail: bonjour@insider.paris

Any question relating to the processing of your data may be sent to the address above.

Data collected

Contact form

When you use the contact form, you provide the following information:

• first name and last name;
• e-mail address;
• the content of your message, together with any other information you choose to include in it.

The information entered is transmitted to the Site's server, which forwards it to INSIDER SAS by e-mail through an e-mail delivery provider. It is not stored in any database on the Site. It appears in the message received by INSIDER SAS and in the logs kept by that provider, which retains them for thirty days.

The form includes a hidden field, without a visible label and ignored by assistive technologies, whose sole purpose is to filter out automated submissions. It is never filled in by a user and collects no personal data.

Professional exchanges

In the context of its relationships with advertisers, agencies and partners, INSIDER SAS processes the professional contact details of its counterparts, their role, their company and the history of exchanges relating to projects and campaigns.

Represented creators and applications

INSIDER SAS processes the data of the content creators it represents, including their identity, contact details, pseudonyms, photographs, links to their social media accounts and their audience statistics. Some of this data is published on the Site with the agreement of the persons concerned, who may request its removal at any time.

Unsolicited applications sent to the agency, whether from creators or from job candidates, are subject to a separate processing operation limited to their review.

Technical data

During browsing, technical data may be recorded by the hosting provider for security and proper operation of the Site, in particular the IP address, the date and time of the request, the pages viewed and the browser type.

No sensitive data within the meaning of Article 9 GDPR is collected. We invite you not to include any such data in your messages.

Purposes of processing

Data processed by INSIDER SAS is used in order to:

• respond to requests sent to the agency and follow up with the user;
• monitor exchanges;
• prepare, conclude and perform a commercial or pre-contractual relationship;
• carry out the representation of creators and the delivery of campaigns, including their presentation on the Site;
• review applications received;
• ensure the security and proper operation of the Site;
• comply with applicable legal, accounting and tax obligations.

Legal basis

Depending on the nature of the processing, it is based on:

• the performance of a contract or of pre-contractual measures taken at the request of the data subject, in particular for contact requests and the commercial relationship;
• the consent of the data subject, in particular for the publication of their data on the Site, such consent being capable of withdrawal at any time;
• the legitimate interest of INSIDER SAS in responding to requests addressed to it, monitoring its professional relationships, promoting its business and securing its systems;
• compliance with a legal obligation, where applicable.

Recipients of the data

Data is accessible to authorised staff within INSIDER SAS in the course of their duties.

It may also be processed by the technical providers used by INSIDER SAS, acting as processors within the meaning of Article 28 GDPR:

• hosting of the Site: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States;
• professional e-mail and office tools: Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
• delivery of contact form messages: Plus Five Five, Inc. ("Resend"), 2261 Market Street #5039, San Francisco, CA 94114, United States.

Data may be disclosed to the company's advisers, in particular its accountant, as well as to administrative or judicial authorities upon request.

Where the delivery of a campaign requires it, strictly necessary data may be disclosed to the advertiser and the creator concerned.

INSIDER SAS does not sell or rent the personal data of its users to third parties.

Transfers outside the European Union

Certain data may be transferred outside the European Union, in particular to the United States, as a result of the hosting of the Site by Vercel Inc., the use of Google Workspace for professional e-mail and the delivery of contact form messages by Plus Five Five, Inc.

These transfers are governed by the mechanisms provided for in Chapter V GDPR, namely the European Commission adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, to which these providers are certified, together with the standard contractual clauses adopted by the European Commission and the supplementary technical measures implemented by these providers.

A copy of the applicable safeguards may be obtained on request at bonjour@insider.paris.

Retention periods

At the end of these periods, data is deleted or archived where retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

Your rights

In accordance with Articles 15 to 22 GDPR, you have, subject to the conditions applicable to your situation:

• a right of access to your data;
• a right to rectification;
• a right to erasure;
• a right to restriction of processing;
• a right to object, in particular to commercial prospecting;
• a right to data portability where applicable;
• the right to withdraw your consent where the processing is based on it, without affecting the lawfulness of processing carried out before the withdrawal;
• the right to issue directives concerning the fate of your data after your death.

To exercise your rights, you may contact INSIDER SAS at bonjour@insider.paris or by post at INSIDER SAS, 59 rue de Ponthieu, 75008 Paris, France.

A response will be provided within one month of receipt of the request, extendable by two months in the event of complexity. Proof of identity may be requested where there is reasonable doubt as to your identity.

Complaint to the CNIL

If, after contacting INSIDER SAS, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority:

CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
https://www.cnil.fr

Cookies and other trackers

The Site uses only technical elements strictly necessary for its operation and security. In accordance with Article 82 of the French Data Protection Act, these trackers are exempt from prior consent.

The Site uses no audience measurement tool, no advertising cookie and no tracker intended for profiling or personalised advertising.

Should cookies or other trackers subject to user consent be implemented at a later stage, specific information would be provided and the user's prior consent would be collected by means of a mechanism allowing refusal as easily as acceptance.

You may configure your browser at any time to block or delete cookies. Blocking strictly necessary trackers may impair the operation of the Site.

Minors

The Site is intended for a professional audience and is not directed at minors under the age of fifteen. No data is knowingly collected from minors.

Security

INSIDER SAS implements appropriate technical and organisational measures to preserve the security and confidentiality of the personal data processed and to prevent unauthorised access, alteration, disclosure or destruction, in particular encryption of communications, management of access rights and the selection of providers offering sufficient guarantees.

In the event of a data breach likely to result in a high risk to your rights and freedoms, you would be informed under the conditions set out in Article 34 GDPR.

Changes to this policy

INSIDER SAS may amend this policy to reflect changes to the Site, to the processing carried out or to applicable regulations. The version published on the Site is the version in force.