Privacy Policy

Sosyo Plus Bilgi Bilişim Tekn. Dan. Hiz. Tic. A.Ş., along with our affiliates and group companies, (collectively, “Insider One”) knows how important privacy is and wish to ensure you are informed about the manner in which we collect, use and share your personal data. The protection of your privacy is of the utmost importance to us, so it goes without saying that we comply with the legal stipulations on data protection.

In this notice, “Insider One,” “our”, “we” or “us” refers to the organization of the member firms of Insider One, each of which is a separate legal entity, or refers to one or more of those group companies. The controller of your personal data is the Insider One group entity established in your country or region (from the list below) that determines the purposes and means of processing your personal data. 

The Insider One group companies are listed here:

• Insider PTE LTD (Singapore)
• Sosyo Plus Bilgi Bil. Tekn. Dan. Hiz. Tic. A.Ş.
• Insider Digital Sdn Bhd (Malaysia)
• Insider AU PTY LTD (Australia)
• Insider Polska sp z o.o (Poland)
• Insider Korea Branch
• Insider Japan 株式会社
• Insider Services UK Limited (The United Kingdom)
• Insider Benelux B.V. (The Netherlands)
• Insider HK LTD (Hong Kong)
• Insider France Branch
• Insider Spain Branch
• Insider Services US LLC
• Insider Brasil Licenciamento e Servicos de Software LTDA
• Insider (Thailand) Co., Ltd.
• Insider MENA FZCO
• Insider Cross-Channel Marketing Technologies GmbH
• Insider Chile SpA
• Insider Vietnam Company Ltd.
• Insider Services Colombia S.A.S
• Insider Taiwan
• Insider Digital, S.A. DE C.V. 
• PT Insider Digital Indonesia

Scope of this Privacy Notice

This document is a privacy notice (transparency notice) provided for informational purposes only. It is not a contract, does not form part of any customer-facing terms of service, and does not create or modify any contractual rights or obligations. 

Its sole purpose is to explain how Insider One collects, uses, stores and shares personal data for which Insider One itself acts as a data controller. The Privacy Notice sets out our policy for processing your personal data such as through our website at https://www.insiderone.com (“Website”).

This Privacy Notice applies to the processing of personal data relating to: (i) visitors to our Website; (ii) recipients of our marketing and newsletter communications; (iii) our business contacts and prospects; and (iv) job applicants. It describes the personal data we collect in these contexts, the purposes for which we process it, the legal bases we rely on, and the rights available to you as a data subject.

This Privacy Notice does not apply to, and does not govern, any personal data that Insider One processes on behalf of its customers in its capacity as a data processor. Where a business customer uses Insider One’s services and Insider One processes personal data on that customer’s instructions (including end-user or end-customer data), such processing is governed exclusively by the data processing agreement entered into between Insider One and the relevant customer. 

Customer end-user data processed on a customer’s instructions is entirely out of scope of this Privacy Notice, and nothing in this document should be read as applying to such data.

Name and Contact Details of the Responsible Party (Data Controller)

(i) For data subjects in Türkiye: Sosyo Plus Bilgi Bilişim Tekn. Dan. Hiz. Tic. A.Ş., represented by Hande Çilingir, Sultan Selim Mah. Libadiye Sk. No:3/1 Kağıthane İstanbul.

(ii) For data subjects in the EU/EEA: Insider Benelux B.V., Eerste Weteringplantsoen 8, 1017SK Amsterdam, the Netherlands

(iii) For data subjects in other regions: Insider One group entity established in your country or region, as listed above.

You can contact us in relation to your personal data at [email protected].

Data Protection Officer

Should you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our data protection officer as follows:

External Data Protection Officer

ePrivacy GmbH

Represented by Prof. Dr. Christoph Bauer 

Große Bleichen 21, 20354 Hamburg

If you have any questions or concerns regarding your information, please contact [email protected].

Data Protection Officer of Insider Brasil Licenciamento e Servicos de Software LTDA

Name and Surname: Moritz Nikolaus Wolff

Contact Information: [email protected]; [email protected]. 

Type of Information We Collect

We process personal data for a variety of purposes which are stated below. Personal data is all information about an identified or identifiable person. This includes the following categories of personal data that we process:

• Your contact details (such as first and last name, address, e-mail address, phone number)
• Your correspondence with us
• Log files with information about your visit to our Website
• Online identifiers (such as cookie IDs, IP addresses, unique device identifier advertising IDs)
• Individuals who visit our social media sites, social media plugins and tools
• Usage, viewing, technical, and device data when you visit our sites, use our tools, or open emails we send, or connect with our wireless Internet access services and other similar technologies.

Please note that we ask you not to send us or disclose any special category of personal data on or through our Website or otherwise to us.

If you apply for a job or position with us, the processing of your personal data as a job applicant is not covered by this Privacy Policy but is described separately in our Job Application Information Notice, available at https://insiderone.com/job-application-information-notice/ .

For Which Purpose We Process Your Data

We process your data for the following purposes:

• To respond to your inquiries, questions and comments and fulfil your requests.
• To send administrative information to you, such as for example information regarding the Website, changes to our terms and conditions, and changes to this Privacy Notice.
• Data analytics pertaining to your activity on the Websites
• Provide you with the experiences, products, and services you request, view, engage with, or purchase
• Send you offers and promotions for our products and services
• For advertising purposes such as the dispatch of our newsletter
• On quality assurance and statistics
• In order to provide our service
• For your participation in our competitions
• For your participation in our events
• For your participation in our surveys,
• Operate, understand, optimize, develop, or improve our Website
• Detect, investigate and prevent activities that may violate our policies, be fraudulent or illegal
• Notify you of product recalls or safety issues.
• In order to improve our service
• To communicate with you, and contact you (such as a phone call or SMS)

We will ensure that your consent is freely given, specific, informed and unambiguous and the processing of your information, whether based on consent or any other legal ground, satisfies the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Where personal information is collected and further processed based on consent, you may withdraw your consent at any time. However, the withdrawal of consent won’t affect the lawfulness of such processing before your withdrawal.

You may exercise your right to be forgotten where your personal information is no longer necessary, your consent has been effectively withdrawn, you have objected to the processing, or your personal information has been unlawfully processed, has to be erased under a legal obligation or it relates a child being offered information society services. Where the processing is based on your consent or for the performance of a contract you may exercise your right to data portability in respect of data you have provided to us.

Our systems may associate your personal information with your activities in the course of providing you more enhanced services such as behavioural targeting and personalization (from pages you view, links you click on or items you search for).

Legal Basis of Data Processing

We base the processing of your data on the following legal bases:

• Your consent, if you have given us such consent,
• The initiation or execution of a contract with you,
• The implementation of our legitimate interests,
• The improvement of our offer
• Protection of our systems against misuse
• On the production of statistics
• For the storage of our correspondence with you
• Compliance with a legal obligation to which we are subject,

Insider One Marketing Subscription

Insider One sends periodic emails to our newsletter and blog subscribers, but we won’t send emails every single day. You can unsubscribe from any of our subscription emails anytime by getting in touch, or simply clicking the “unsubscribe” link at the bottom of all our marketing emails. We take data matters very seriously, and will only contact our subscribers with their clear and voluntary consent. See below how we view and deal with data. More information can also be found in our Terms of Use (https://insiderone.com/terms-of-use/).

Cookies

Our Website uses cookies and similar technologies (such as pixels and local storage) to operate the Website, to remember your preferences, to analyse how the Website is used, and — where you consent — for advertising. Cookies are small files placed on your device; they may be set by us (first-party) or by third parties (third-party), and may be session cookies (deleted when you close your browser) or persistent cookies (which remain until they expire or you delete them).

We use four categories of cookies: (i) strictly necessary cookies, required for the Website to function; (ii) performance and analytics cookies, which help us measure and improve the Website (including Google Analytics); (iii) functional cookies, which remember your settings; and (iv) targeting and advertising cookies, set by partners such as Google and Meta to show you relevant ads.

Strictly necessary cookies do not require your consent. All other (non-essential) cookies are set only after you have given your prior, explicit consent through our cookie banner or consent management tool. You can withdraw or change your consent at any time with future effect via the cookie settings on our Website, or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Some third-party cookie providers are located outside the EEA or Türkiye. Where data is transferred to such countries, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) or an adequacy decision, as described in the “Transfer to Third Countries” section of this Privacy Policy. We use cookies to identify your browser, track your journey on our Website, track the point of entry to a registration form – such as a blog or newsletter subscription, or a mailing campaign – to understand and measure the success of a certain marketing campaign, for instance. Insider One uses Google Analytics to track the performance of specific marketing campaigns and in some of our products. This is to allow third-party service providers to create tailored advertisements on our behalf across different touchpoints. Such service providers may collect your IP address and non-personally identifiable information, which does not include your personal information, contact details, etc. These cookies also provide statistical information on how our Website is being used and its performance. 

Storage Period

The Privacy Policy is to retain personal data only for as long as it is needed for the purposes described in the section “For Which Purpose We Process Your Data.” Please note that retention periods vary in different jurisdictions and are set in accordance with local regulatory and professional retention requirements.

In order to meet our professional and legal requirements, to establish, exercise or defend our legal rights, and for archiving and historical purposes we need to retain information for significant periods of time.

We store your data,

• if you have consented to the processing, at most until you revoke your consent;
• if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
• if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh the data;
• insofar as statutory storage obligations exist, until the end of the storage periods.

We keep your personal data only for as long as necessary to achieve the purposes for which it was collected, and we delete, destroy or anonymise it once it is no longer needed for those purposes. In line with the principles of data minimisation and storage limitation, we do not retain personal data for longer than is necessary.

In determining how long to keep your personal data, we take into account: (i) whether the purpose for which the data was collected is still ongoing; (ii) where processing is based on your consent, whether you have withdrawn that consent; (iii) any mandatory statutory or regulatory retention obligation to which we are subject; and (iv) whether retention is necessary to establish, exercise or defend legal claims, in which case we retain the data until the expiry of the applicable limitation period.

Where a mandatory statutory retention period applies – for example tax, accounting or employment record-keeping obligations – we retain the relevant data until the end of that period and then delete it. Because we operate globally, the applicable statutory retention period may differ from country to country; where local law requires a longer retention period for data processed in a particular country, that longer period applies to that data.

The following table sets out our indicative maximum retention periods:

Once the applicable retention period expires, we delete, destroy or anonymise the relevant personal data through our periodic data destruction process.

Data Transfer

We operate globally and may transfer your personal information to group companies of Insider One or third parties in locations around the world for the purposes described in the Privacy Policy. Wherever your personal data is transferred, stored or processed by us, we will take below-mentioned reasonable steps to safeguard the privacy of your personal information.

Insider One discloses your personal data (i) where this is appropriate for the purposes described in the section “For Which Purpose We Process Your Data,” including within the Insider One Group Companies itself, (ii)if required, by applicable law, (iii) in connection with a reorganization or combination of Insider One, (iv) if we believe that such disclosure is appropriate to enforce or apply terms of engagement, and other agreements, (v) in order to comply with a judicial proceeding, court order, regulatory inquiry or other legal obligation and (vi) with your explicit consent. Third-party recipients of personal data include:

• Facebook Custom Audience
• Facebook Lookalike Audience
• Google Ads
• Google AdSense
• The courts, police and law enforcement agencies (if requested)
• Government departments and agencies (if requested)

When processing your data, we work together with the following service providers who have access to your data:

• Provider of web analysis tools
• Web hosting and web development providers
• Service provider for IT development services
• Marketing and advertising agencies
• E-mail and newsletter provider
• Service provider for editing and translations
• CRM system service provider
• Cloud services
• Conference and Webinar Software
• Service provider for online surveys
• Service provider for chat software
• Social media platforms
• Professional advisors, such as law firms, tax advisors or auditors
• Insurers
• Audit regulators

We generally do not share any personally-identifiable information (such as name, country, and email) with third party service providers and external websites. But we might share anonymized behavioural data.

Transfer to Third Countries

Data is being transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data by means of contractual agreements or other suitable guarantees, such as certifications or proven compliance with international security standards.

• Turkey: Data transferred to Turkey is protected by the EU Standard Contractual Clauses (SCCs) supplemented by appropriate technical measures, including encryption. 
• United States: Data transferred to the United States is protected by the EU Standard Contractual Clauses (SCCs) supplemented by appropriate technical measures, including encryption. 

Where the EU Commission has issued an adequacy decision for a recipient country, transfers to that country rely on that adequacy decision.

A copy of the relevant safeguards relied upon for international transfers can be obtained by contacting [email protected].

For transfers of personal data out of the EEA, we rely on the EU Standard Contractual Clauses adopted by the European Commission (or, where applicable, an EU Commission adequacy decision for the recipient country). For transfers of personal data out of Türkiye, we rely on a KVKK adequacy decision or appropriate safeguards, including KVKK Standard Contractual Clauses, which are notified to the Turkish Data Protection Authority (KVKK) within five (5) business days of signing.

Your Rights

As Insider One is a B2B company we will only accept requests on conditions where we are responsible for data. As a data subject, you have the following rights:

• To request information about the processing of your data, as well as to receive a copy of your personal data. You may request information on, among other things, the purposes of the processing, the categories of personal data processed, the recipients of the data (if a transfer is made), the duration of the storage or the criteria for determining the duration;
• To receive personal data relating to you in a structured, common and machine-readable format or to transfer it to another person in charge
• To correct your data. If your personal data is incomplete, you have the right to complete the data, considering the purposes of the processing;
• To have your data deleted or blocked.
• To have the processing restricted;
• To object to the processing of your data;
• To revoke your consent to the processing of your data for the future and
• To lodge a complaint with the competent data protection supervisory authority about unlawful data processing.

Information Notice under Turkish Data Protection Law (Law No. 6698 on the Protection of Personal Data – “KVKK”)

Data Controller: For data subjects in Türkiye, the data controller is Sosyo Plus Bilgi Bilişim Tekn. Dan. Hiz. Tic. A.Ş., Sultan Selim Mah. Libadiye Sk. No:3/1 Kağıthane İstanbul.

Purposes: Your personal data is processed for the purposes set out in the section “For Which Purpose We Process Your Data” above.

Method and Legal Grounds of Collection: Personal data is collected through our Website, online forms, cookies and your correspondence with us, and is processed on the legal grounds set out in Articles 5 and 6 of the KVKK (including where processing is necessary for the performance of a contract, compliance with a legal obligation, or the legitimate interests of the data controller, and otherwise on the basis of your explicit consent).

Transfers: Personal data may be shared with third parties and transferred abroad in accordance with Articles 8 and 9 of the KVKK, relying on a KVK Board adequacy decision or, in its absence, appropriate safeguards (KVKK Standard Contractual Clauses notified to the Board within five business days, Binding Corporate Rules, or a written undertaking approved by the Board), and only exceptionally on the basis of explicit consent.

Rights under Article 11 of the KVKK: As a data subject in Türkiye, you have the following rights:

• to learn whether your personal data is processed;
• to request information if it has been processed;
• to learn the purpose of processing and whether the data is used in accordance with that purpose;
• to know the third parties to whom data is transferred in Türkiye or abroad;
• to request rectification of incomplete or inaccurate data;
• to request erasure or destruction of data under the conditions of Article 7 of the KVKK;
• to request that rectification, erasure or destruction be notified to third parties to whom the data has been transferred;
• to object to any adverse result arising from the analysis of your data exclusively by automated means; and
• to claim compensation for damage suffered due to unlawful processing.

How to Exercise Your Rights: You may submit your requests to the data controller in accordance with the Communique on the Procedures and Principles of Application to the Data Controller, in writing or by the relevant methods set out therein, at https://insiderone.com/legal/request-forms. 

Changes to this Privacy Policy

Sosyo Plus Bilgi Bilişim Tekn. Dan. Hiz. Tic. A.Ş. drafted this Privacy Policy to inform you. Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes and updates on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).

Last Update Date: 03/06/2026