Insign, headquartered at 7, rue de la République 69001 Lyon, France, as the data controller, is committed to protecting the personal data and privacy of anyone accessing our digital ecosystem.
This policy aims to inform you, in accordance with Regulation No. 2016-679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter referred to as the "GDPR"), and in accordance with the amended French Data Protection Act No. 78-17, about our practices regarding the collection, use, and sharing of information you provide through our website.
This policy aims to inform you about the categories of personal data we may collect or hold about you, how we use it, who we share it with, how we protect it, and your rights regarding your personal data.
By continuing to browse this website (hereinafter "site"), users acknowledge that they have read this policy as well as the website's terms of use, of which this policy is an integral part.
↳ Who collects personal data (Identity of the data controller)?
Your personal data is collected by Insign – 7, rue de la République 69001 Lyon, France – SAS – registered under SIREN number 524347945 with the Lyon Trade and Companies Register.
Insign has appointed a dedicated team for personal data protection, which can be reached at: rgpd@insign.fr.
↳ What personal data is collected?
"Personal data" refers to any information relating to an identified or identifiable natural person.
When using our site, you may provide us with information, some of which can identify you and therefore constitutes personal data. This is particularly the case when you complete the contact form or newsletter subscription.
Personal data includes information about you that allows identification, such as:
| Identification Data |
|
| Professional Information |
|
| Connection Data | IP address, browsing history, visit path, operating system, information about devices used to access the website, etc. |
For any other data collected elsewhere, the data collection form will describe the applicable rules if they differ from those in this Policy.
During data collection, you will be informed whether certain data must be mandatory or optional. Data identified with an asterisk in the collection form is mandatory. Without this, the execution of your request may be restricted.
If you connect to our services using social network features, we will have access to certain data (including your first name, last name, photograph, email address, and number of Facebook friends) from your social network account in accordance with the terms of use of the social network concerned. We may also collect certain data when you interact with features of these social networks, such as "Like" features.
↳ When do we collect personal data?
Insign collects your personal data explicitly and transparently through information notices or references to this Policy.
Your personal data may be collected when you:
Browse the website
Complete any form on the website or leave a message
Subscribe to our newsletter
Request a catalog or information about our expertise
Communicate with us by phone, email, social networks, forum, or any other means
Apply for a job
Report a problem or request assistance
↳ For what purposes is personal data collected? What is the legal basis for processing?
The collection and processing of your personal data is only possible for a specific purpose, which is specified at the time of collection.
Insign commits to collecting personal data only for specific, explicit, and legitimate purposes and not to process this data in a way incompatible with these purposes.
Insign commits to collecting and processing only personal data that is adequate, relevant, and not excessive in relation to the purposes for which it is collected.
We use the data we collect to:
| Purposes | Legal Basis |
| Respond to your requests | Consent |
| Manage recruitment | Pre-contractual measures |
| Communicate with you about our products and services and provide marketing information | Consent |
| Website operation, maintenance, and improvement | Legitimate interest |
↳ Who are the recipients of my personal data?
The data collected by Insign is intended for us as the data controller.
Insign commits not to sell, rent, or transfer your personal data to third parties without your prior express consent.
However, Insign may need to share your personal data with other entities.
↳ Data transferred to third partie
We work closely with third-party companies that may have access to your data, including:
Our service providers and subcontractors. In particular, Insign may use third-party providers to host the website, provide services related to website operation, maintain the site, and send communications and commercial offers. We only transmit to these third parties the data they need to perform their services, and we require that they do not use your data for other purposes. These third parties will act only according to our instructions and will be contractually bound to ensure a level of security and confidentiality of your data identical to ours and to comply with applicable personal data protection regulations.
Our commercial partners (Google, Hubspot, GetQuanty) and other Insign group entities within the European Union (http://agenceproches.com/fr, https://thewhyfactorcompany.com/), subject to your express prior consent, so they can offer you special offers and advertisements.
We may also transfer your personal data to any potential buyer in the event of a sale of an Insign entity or its assets.
↳ Data transferred to authorities and/or public bodies
In accordance with current regulations, personal data collected by Insign may be transmitted to competent authorities upon request, including public bodies, court officers, ministerial officers, debt collection agencies, exclusively to comply with legal obligations, as well as in the case of investigating perpetrators of offenses committed on the internet.
↳ How long is my personal data retained?
Insign keeps your personal data in a secure environment for the time necessary to achieve the processing purposes for which they were collected, in accordance with retention periods from CNIL recommendations and/or provided by applicable legislation.
| Purposes | Retention Period |
| Respond to your requests | 3 years after last contact |
| Manage recruitment | 24 months |
| Communicate about products and services and provide marketing information | 3 years after last contact |
| Website operation, maintenance and improvement | 12 months |
↳ Is my personal data transferred outside the European Union?
Collected personal data is not transferred outside the European Union territory. It is hosted in France.
↳ How is my personal data protected?
Insign takes technical and organizational protection measures to ensure the confidentiality and security of your personal data and prevent it from being modified, damaged, deleted, or accessed by unauthorized third parties.
Only authorized personnel have access to your personal data due to their functions. They are bound by a confidentiality obligation.
In case of a personal data breach, Insign is obligated to notify the competent supervisory authority (CNIL) and inform you, as soon as possible, of any personal data breach likely to result in a high risk to your rights and freedoms, to allow you to take necessary measures.
↳ What are my rights and how can I exercise them?
In accordance with applicable regulations, you have rights of access, rectification, erasure, restriction of processing, objection to processing, and data portability.
When processing is based on your consent, you also have the right to withdraw your consent at any time.
You also have the right to lodge a complaint with the CNIL or a data protection authority of a European Union Member State and to define post-mortem directives.
You can exercise your rights at any time by email at: dpo@insign.fr.
Regarding commercial prospecting, you have the right to object and can choose at any time to stop receiving commercial prospecting by using the unsubscribe link in the message.
↳ Protection of minors' personal data
The site is not intended for minors under 15 years of age.
However, if you are a minor and have transmitted personal data about yourself, you guarantee that you have obtained prior authorization from one of your parents, with Insign disclaiming all responsibility in the event that such authorization has not been obtained. All parents and guardians are encouraged to promote responsible and careful behavior by minors when communicating their personal data on the internet.
↳ Links to other websites
The Insign website may contain links to third-party sites with which Insign is not affiliated.
Insign has no control over these sites and cannot be held responsible for their content or their use of your personal data.
To ensure the protection of your personal data, we recommend consulting the privacy policy of any other site you access through a link on our website. In all circumstances, we decline any responsibility for such policies.
↳ Policy modifications
Insign reserves the right to modify the Policy at any time without notice, particularly to comply with any regulatory, judicial, editorial, or technical developments. Where applicable, this modification will be indicated on the site and will be effective upon publication. The modification date will be inserted at the top of this policy.
↳ Contacting Insign
For any comments or questions about this document, to exercise your rights, or for any request regarding your personal data, you can write to:
By email: dpo@insign.fr;
By postal mail: INSIGN SAS 7, rue de la République 69001 Lyon, France.
For any information about personal data protection, you can also consult the website of the Commission Nationale de l'Informatique et des Libertés (CNIL) www.cnil.fr.