Last updated: July 13, 2026

This privacy policy is intended to inform visitors and users of the website www.nais-paris.fr (hereinafter “the Site”), published by NAIS, about how their personal data is collected, processed, and protected, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and Law No. 78-17 of 6 January 1978 as amended (“Data Protection Act”).

In connection with the use of the Site, NAIS may collect the following categories of data.

Identification and professional data: last name, first name, job title, company, professional e-mail address, professional phone number — collected via the contact, demo request, quote, or newsletter subscription forms.

Comment-related data: when a visitor leaves a comment on the Site, the information entered in the form (name, e-mail address, website if applicable), as well as their IP address and browser user agent string, are collected to help detect spam comments.

Account data: for users with an account on the Site, the information entered in their profile is retained. Each account holder can view, edit, or delete their information at any time (except their username); Site administrators can also access it as part of managing the Site.

Connection and browsing data: IP address, browser type, operating system, pages visited, time spent, traffic source — collected automatically via cookies and trackers (see section 9).

Uploaded media: users who upload images to the Site are advised to avoid images that include EXIF geolocation data (GPS coordinates), as this data can be extracted by any visitor who downloads the image.

NAIS does not collect any “sensitive” data within the meaning of Article 9 of the GDPR.

Data is processed for the following purposes, each based on a specific legal basis.

Responding to contact, quote, or demo requests is based on the performance of pre-contractual measures taken at the request of the data subject (Article 6.1.b of the GDPR). Managing the customer relationship and performing contracts are based on the performance of the contract (Article 6.1.b of the GDPR).

Managing comments and combating spam, including their verification by an automated spam-detection service, are based on NAIS’s legitimate interest in ensuring the security and quality of the Site (Article 6.1.f of the GDPR). Managing user accounts is based on the performance of the Site’s terms of use (Article 6.1.b of the GDPR).

B2B commercial prospecting (emailing, newsletter) is based on NAIS’s legitimate interest (Article 6.1.f of the GDPR). In accordance with CNIL guidance, e-mail prospecting to professionals is permitted without prior consent as long as the message relates to the recipient’s professional role and a simple, free opt-out option is offered with each message.

Audience measurement and improvement of the Site are based on the user’s consent (Article 6.1.a of the GDPR) or, depending on the tool used and its configuration, on NAIS’s legitimate interest. Finally, compliance with legal and accounting obligations and the handling of requests to exercise rights are based on the legal obligations to which NAIS is subject (Article 6.1.c of the GDPR).

Data is retained for the following periods: data relating to prospects who did not follow up is retained for 3 years from their last contact. Customer data is retained for the duration of the contractual relationship, then for 5 years under the statute of limitations. Accounting and contractual documents are retained for 10 years in accordance with legal obligations.

Comments and their metadata are retained for as long as the comment remains published on the Site; this retention also allows subsequent comments from the same author to be automatically recognized and approved, bypassing the moderation queue. User account profile data is retained for as long as the account remains active.

Cookies and trackers are retained for a maximum of 13 months, and the data derived from them for a maximum of 25 months. Requests to exercise rights are retained for 5 years from the date of the request. At the end of these periods, data is deleted or irreversibly anonymized.

In accordance with Articles 15 to 22 of the GDPR, every individual has the following rights over their data: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object (in particular to commercial prospecting, at any time and without justification), and the right to define directives regarding the fate of their data after their death.

In particular, anyone with an account or who has left comments on the Site may request a file containing all the personal data NAIS holds about them, or request its deletion. Such deletion does not extend to data that NAIS is required to retain for administrative, legal, or security purposes.

These rights may be exercised by sending a request to: contact@nais-paris.fr or by mail to the registered office address: NAIS 8-10 rue de la Haie Coq CIFA 23, 93300 Aubervilliers. A response will be provided within one month, extendable by two months for complex requests. Proof of identity may be requested if there is reasonable doubt as to the identity of the requester.

In the event of difficulty, the data subject has the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

When browsing the Site, cookies and other trackers may be placed on the user’s device.

Strictly necessary cookies: essential for the Site to function (session management, security, consent preferences). They do not require consent. These include, among others, the following cookies related to the Site’s operation:

Convenience cookies: when leaving a comment, visitors are offered the option to save their name, e-mail address, and website in cookies, so they do not have to re-enter this information for a subsequent comment. These cookies, placed only with the visitor’s consent, expire after one year.

Pages on the Site may include embedded content from third-party sites (videos, images, articles, etc.). This content behaves exactly as if the visitor had visited the third-party site directly: that site may collect data, set cookies, embed its own tracking tools, and track the visitor’s interactions with the content, particularly if the visitor has an account logged in on that third-party site. NAIS invites users to review the privacy policies of these third-party sites.

NAIS implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of the data processed: encryption of communications (HTTPS/TLS), access control, staff awareness training, and contractual oversight of subcontractors. For security purposes, in the event of a password reset request, the requester’s IP address is included in the reset e-mail.

In the event of a data breach likely to result in a risk to the rights and freedoms of individuals, NAIS will notify the CNIL within 72 hours and, where applicable, the individuals concerned, in accordance with Articles 33 and 34 of the GDPR.

NAIS reserves the right to modify this policy at any time, in particular to reflect legal, regulatory, or technical developments. The version in effect is the one published on the Site, along with its update date. In the event of a substantial change, users will be informed by any appropriate means.

For any question regarding this policy or the processing of your data: contact@nais-paris.fr.