Privacy and Data Protection Policy

As part of its activity as a publisher of professional news and its related event and commercial activities, News Tank processes information about you.
When you complete an event registration form, request trial access, subscribe to our services, contact our teams, browse our websites and applications, read our emails or use our artificial intelligence features (Quid and Quid+), you provide us with information, some of which can identify you: this is personal data.
This Privacy and Data Protection Policy explains how we collect and process this personal data. It applies to all the content and services of the News Tank group's publications (information service, events, clubs, newsletters and alerts, mobile application, artificial intelligence features, etc.), whichever website or application you use to access them.
It supplements the Terms and Conditions of Subscription (TCS), the Terms of Individual Online Subscription (TIOS) and the Terms and Conditions of Use (TCU), which refer to it for details of the processing. We invite you to read it carefully.
We only use your personal data in the cases provided for by the regulations in force: Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR") and the amended French Data Protection Act No. 78-17 of 6 January 1978 (loi « Informatique et Libertés »).

1. Data controller and Data Protection Officer

The controller of the processing described in this policy is News Tank Network, a French simplified joint-stock company (SAS) with a share capital of €269,500, whose registered office is at 48 rue de la Bienfaisance, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 751 023 896, represented by Marc Guiraud. It is referred to below as "News Tank".

News Tank has appointed a Data Protection Officer (DPO), François Lenoble. You can contact the DPO through the DPO contact page of each of our websites, by email at dpd@newstank.fr or by post: News Tank, DPO, 48 rue de la Bienfaisance, 75008 Paris, France.

2. What data do we collect?

Data you provide

This is the data you enter when you register for trial access, a subscription (including an individual subscription taken out online) or an event, the data you give our teams in writing or orally, and the data you enter in your profile.

Data received from your organisation

When your organisation takes out a subscription for its teams, it provides us with the information needed to create your access and deliver the service: your surname, first name, business email address and job title. The TCS require it to inform you that News Tank processes this data. This policy is the information you are owed when your data is not collected from you directly.

Data collected when you browse and read our emails

To ensure that our websites and applications work properly, to secure access to them and to measure their audience, we automatically collect data when you use them: your IP address, the type of browser and device, and your logins, the pages and articles you view and the searches you run. This data is linked to your account when you are logged in. The cookies we use are described in the "Cookie policy" box (section 4).

The pixels in our emails

Our newsletters and alerts may contain two types of pixel, small invisible images loaded when the message is opened:

• a technical pixel, present in all our emails and exempt from consent. Its sole purpose is to detect delivery problems and maintain our mailing list. It records only a date of last activity, with no time, no IP address and no information about your device;
• an audience measurement pixel, placed only if you have accepted it. It records when our emails are opened and which content you view in them, with the date and time, your IP address and the type of browser and device used. We use it to make our emails more relevant, adapt our content and adjust how often we send them; where you have a subscription, to monitor how that subscription is used; and to protect subscriber-only content by detecting unusual forwarding of our emails.

Your choice about the measurement pixel applies to all the News Tank group's publications, whatever device you read your emails on. You can change it at any time from any of our emails (see section 8). Refusing has no effect on the newsletters and alerts you receive.

Data related to the artificial intelligence features (Quid and Quid+)

Quid is the artificial intelligence assistant built into our websites. To formulate its answer, your question and the conversation history are sent to our generative artificial intelligence provider, OpenAI (see section 5), which processes them in the United States and keeps this history for a maximum of 30 days. The name of your organisation may be sent to it to tailor the answer; your surname, first name and email address are not. News Tank does not keep the text of your questions or of the conversations: it keeps only a technical reference, for 24 hours, to keep the exchange going.

News Tank does, however, record the searches Quid runs in our content to answer you (search terms, articles returned), together with the date and time, the website concerned, your IP address and your browser. For access through your organisation's IP address, a random reader identifier, stored in a cookie, distinguishes your conversations from those of your colleagues. Quid's answers are generated automatically, without review by the newsroom, and are presented as such.

Quid+ lets you connect the artificial intelligence assistant of your choice (for example ChatGPT, Claude or Mistral Vibe) to the content covered by your access. We record the authorisation or access key you create (name of the tool, websites concerned, dates of creation, last use and revocation) and, for each call, the tool used, the search terms, the articles viewed and the IP address of the calling tool.

Use of Quid and Quid+ is logged, as provided for in the TCU (Art. 6.8), for the purposes of security, enforcing usage limits, detecting abnormal use, audience measurement and improving the service. Your questions and conversations are not used by News Tank or by its provider to train artificial intelligence models.

We ask you not to enter in your exchanges with the AI any personal data about third parties that is not needed for your search, any sensitive data, or any confidential information or information covered by a secret.

The data we collect

The data we collect mainly consists of:

• Identity and business contact details: surname, first name, title, business email address, telephone number(s), job title, organisation;
• Date of birth: you are not asked for it when you register or in your profile, but our teams may enter it as part of their editorial work and their relationship with our contacts;
• Account: username, password (in the form of a hash), one-time login codes, Quid+ authorisations and access keys;
• Directory: photographs, career history and education shown on your profile;
• Relationship with News Tank: subscription and event registration history, attendance at events, requests sent to our teams, feedback on our services;
• Payment (individual online subscription): invoices and instalments. Your card or direct debit mandate details are entered and stored by our payment providers (ProAbono and Stripe): News Tank has no access to them;
• Login and use: IP address and the approximate location derived from it, browser and device, logins, articles read, searches and their terms, receipt of our newsletters and alerts and, if you have accepted it, whether they were opened and which content was viewed;
• AI Features: terms of the searches run by Quid and Quid+ and articles viewed, usage logs, Quid+ authorisations and access keys;
• Your choices: delivery preferences, consents and refusals (measurement pixel, cookies, partners), with their date.

Your password is never stored in plain text: we keep only an irreversible hash of it, and our teams do not know it. You can also log in without a password, using a one-time code sent by email or text message, valid for ten minutes.

People mentioned in our content and in our directory

As part of its journalistic activity, News Tank publishes articles, appointments and a directory of the decision-makers in each of its sectors, which mention people who are not necessarily its subscribers. Directory profiles show the person's identity, positions, career history and, where applicable, a photograph. A summary version (name, current positions, photograph) is publicly accessible and may be indexed by search engines; the full profile is reserved for subscribers. Personal contact details (email, telephone) are not displayed.

This processing falls under freedom of expression and information (Article 85 of the GDPR and Article 80 of the French Data Protection Act), which adjusts certain rights. You may nevertheless at any time ask us to correct inaccurate information about you, or send us any request concerning your profile, by contacting the DPO (section 1).

Sensitive data

News Tank does not collect any sensitive data about you to manage its services. Sensitive data means data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic, biometric or health data and data concerning a person's sex life or sexual orientation. We ask you not to enter any such data in Quid or Quid+.

3. What is your data used for?

Each processing operation is based on one of the legal bases provided for in Article 6 of the GDPR.

When you access the service under a subscription taken out by your organisation, the contract is the one concluded with it: the processing needed to provide your access is then based on our legitimate interest, and that of your organisation, in performing that contract.

Automated decisions

News Tank does not take any decision producing legal effects concerning you based solely on automated processing. Signals of abnormal use, such as suspected sharing of login details, are reviewed by our teams before any action is taken.

4. How long is your data kept?

Your data is kept for as long as necessary for the purposes for which it is processed, then deleted or anonymised:

If you withdraw your consent to the audience measurement of our emails, the individual measurements already collected are removed from our tools, then deleted.

---

Cookie policy

Cookies subject to your consent

We use an audience measurement service (Google Analytics) and video embedding services in our articles (YouTube, Vimeo and Dailymotion), which may place cookies in your browser. They are only placed with your agreement, which you give in the banner displayed on your first visit. You can accept all, refuse all or choose service by service, and change your choice at any time from the cookie management page .

Cookies necessary for the service to work

These cookies are exempt from consent:

• the browsing session, which expires after one hour of inactivity;
• automatic login ("Stay logged in"), for a maximum of 12 months;
• identification of your device, which secures your account and is used to detect use contrary to the TCU, for a maximum of 12 months;
• for access through your organisation's IP address, a random Quid reader identifier, for a maximum of 12 months;
• storage of your cookie choices.

These cookies contain encrypted technical identifiers. Disabling them in your browser may prevent all or part of the service from working.

---

5. Who receives your data?

Our teams only access your data where their duties require it: managing your subscription, invoicing, commercial relationship, updating your directory profile, security of the service. They are bound by confidentiality.

When you access the service under a subscription taken out by your organisation, we may, at its request, provide it with the data about your use of the service and of the AI Features (logins, articles read, use of Quid and Quid+), to the extent necessary to manage the subscription and check compliance with the TCS and TCU. The content of your conversations with Quid is never provided to it.

Your data is also processed by our processors and, with your agreement, by the partners of our events. News Tank does not sell your data.

Our processors

We use the following providers, which process your data on our behalf, on our instructions and under a contract compliant with Article 28 of the GDPR:

Stripe also processes certain payment data on its own behalf, as a controller, to combat fraud and meet its regulatory obligations, in accordance with its own privacy policy.

The audience measurement and video services subject to your consent (Google Analytics, YouTube, Vimeo, Dailymotion) are described in the cookie box (section 4).

Artificial intelligence assistant connected through Quid+

When you connect a third-party artificial intelligence assistant to our content through Quid+, that assistant is entirely your choice. Its publisher processes your exchanges with it as a controller, under its own terms and its own privacy policy, which we invite you to read. News Tank has no access to these exchanges: it only receives the requests the assistant sends to our content.

6. Transfers of data outside the European Union

Some of our providers process data outside the European Union, in particular in the United States: OpenAI for Quid, Stripe for online payment, Google for application notifications and, if you have accepted it, the audience measurement of our websites.

These transfers are covered by the safeguards provided for in Articles 44 et seq. of the GDPR: the European Commission's adequacy decision of 10 July 2023 (Data Privacy Framework) for providers certified under it, or failing that standard contractual clauses adopted by the European Commission. You can obtain a copy from the DPO.

7. Data protection

Your data is hosted on servers dedicated to News Tank, at our host Mediactive Network, in France. Processing entrusted to providers located outside the European Union is described above.

Our websites and applications encrypt exchanges (HTTPS protocol). Your password is only stored as a hash, our teams' access to data is limited to what their duties require, and use of the service is logged in order to detect unauthorised access.

8. What are your rights?

Your rights

You have the following rights over the data concerning you:

• access: obtain confirmation that we process your data and receive a copy of it;
• rectification: have your data corrected, completed or updated;
• erasure: have your data deleted, except where keeping it is necessary to comply with a legal obligation or to defend our rights;
• restriction: have processing temporarily suspended, for example while information you dispute is checked;
• objection: object to processing based on our legitimate interest, on grounds relating to your particular situation, and, without having to give a reason, to direct marketing and to the audience measurement of our emails;
• withdrawal of consent: withdraw any consent given at any time, without affecting the processing carried out before;
• portability: receive, in a structured and commonly used format, the data you have provided to us, where its processing is based on your consent or on a contract;
• post-mortem instructions: decide what happens to your data after your death.

Exercising your rights

You can exercise your rights with News Tank's Data Protection Officer through the DPO contact page of each of our websites, by email at dpd@newstank.fr or by post: News Tank, DPO, 48 rue de la Bienfaisance, 75008 Paris, France.

We will reply within one month of receiving your request; this period may be extended by two months if the request is complex, in which case we will let you know. To answer it, we may need to verify your identity or ask you for further details.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL): www.cnil.fr/fr/plaintes . You may also contact it directly.

Right to object to commercial messages

All the commercial messages News Tank sends you by email include an unsubscribe link, which lets you stop receiving them in one click. Messages needed for your access to work, such as sending a login code or resetting your login details, do not include one: you can nevertheless change your delivery settings at any time from your subscriber area, or write to us using the contact form on each of our websites.

Your choice about the audience measurement of our emails

Each of our emails includes, in its footer, a link to the page where you can accept or refuse the audience measurement of our emails, or change your choice. Accepting and refusing each take a single click, and your choice applies to all the News Tank group's publications.

If you withdraw your consent, measurement stops immediately, including for emails already received, and the individual measurements already collected are removed from our tools, then deleted. If you change your mind later, measurement resumes for future emails; the data removed is not restored.

If you were informed of this arrangement by our 2026 email and did not object, measurement continues: you may object at any time, in the same way.

Right to accept and manage cookies

Audience measurement and video embedding cookies are only placed after you agree, in the banner displayed on your first visit. Refusing is as easy as accepting, and continuing to browse without answering does not count as consent. You can change your choice at any time from the cookie management page.

The cookies necessary for the service to work, described in the cookie box (section 4), do not require your agreement. Disabling them in your browser may prevent all or part of the service from working, for example access to your subscriber area or automatic login.

9. Changes to our Privacy and Data Protection Policy

We may need to amend this policy, in particular to reflect changes in our services or in the regulations. The version in force is published on each of our websites, with its last-updated date. Any substantial change, for example a new processing operation or a new recipient, will be notified to you by email or by a message on our websites, and your agreement will be obtained where the law requires it.

Last updated: 1er November 2026.