Privacy statement

Who we are

The Insider Network is run by [Company name], [KvK number], [address]. We decide what happens with your data, so we are responsible for it. Questions or requests: contact@poweredbyinsiders.com.

What we collect

When you join the waitlist, we store:

• Your first and last name, to address you and to recognise you when you claim the deal.
• Your email address, to tell you whether you've been selected and to send you the deal.
• Your university or school, programme and year, to check you're a student in Amsterdam and to keep a good mix of students.
• Your student number, to check later that every student claims a deal only once.
• How often you go to the cinema, because this month's deal is a cinema experience.
• Your phone number, to add you to our invite-only WhatsApp group for updates and instructions on how to redeem your deal.
• Your referral code, and the code of the friend who invited you, if any, to count who brought how many friends.
• Your answers to the consent questions, with the date and time you gave them.
• Which link or poster brought you here (if the link said so), to know which channels work.
• A scrambled (hashed) version of your IP address, to stop people and bots from flooding the list. We never store the IP address itself.

Why, and on what basis

We use your data to run this waitlist, select this month's Insiders and contact you about it. You give us permission (consent) for that when you join. If you tick “Get more free deals in the future”, we also tell you about next months' deals by email or WhatsApp; that is a separate permission you can withdraw at any time.

The hashed IP address and the bot check are there to keep the sign-up safe. We do that on the basis of our legitimate interest in a list of real people.

The visitor counter on the homepage (visits so far, people here right now) works with a random number that exists only while the page is open. It isn't stored in your browser and can't be linked to you. We keep a hashed IP address with it for a day at most, to stop one computer from inflating the count.

To log in to your Insider account, you ask for a 6-digit code by email. We store only a scrambled (hashed) version of the code, with the email address you typed and a hashed IP address, so we can check the code and limit how many codes can be asked for; we delete it after a day at most. We keep a record of which emails we sent and when for six months, without your email address in readable form.

We never sell your data, and we don't give your personal details to brands. Brands see totals only, like how many students from each university joined.

Who helps us

A few services process data for us, under agreements that oblige them to protect it:

• Supabase stores the waitlist, on servers in Ireland (EU).
• Cloudflare hosts the website and runs the check that you're human (Turnstile).
• Resend sends our emails, such as your login code.

How long we keep it

Waitlist details are deleted three months after the deal month ends. If you become an Insider, we keep your details for the 30 days plus three months. If you said yes to future deals, we keep your name, email and phone number until you opt out. Your student number is deleted with your waitlist details.

Cookies and your browser

We don't use advertising or tracking cookies. The website remembers, in your browser tab only, that you've already seen the intro, so it doesn't play again. After you join, your browser also keeps your 8-character referral code, so the page can show how many friends joined with your link. Neither contains your name or contact details, and you can clear them with your browser's site data.

When you log in, we set one cookie that keeps you logged in for 30 days. It holds only a reference to your account, signed so nobody can change it, and it is deleted when you log out. Without it, logging in isn't possible.

Your rights

You can ask to see, correct or delete your data, withdraw your permission, or get a copy of your data, at any time. Email contact@poweredbyinsiders.com and we'll do it within 30 days. Not happy with how we handle your data? Let us know and we'll look into it right away. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).