What GDPR means for a video platform
In practice, four points come up most often when evaluating a video tool.
- The player shouldn't set cookies or trackers without the viewer's prior consent
- Sub-processors (hosting provider, translation vendor, etc.) must be identified and contracted under Article 28 of the GDPR
- Any data transfer outside the EU must rely on a recognized safeguard (standard contractual clauses, an adequacy decision)
- The client organization must be able to sign a data processing agreement with its provider
GDPR at Videas
Video storage and transcoding take place in France, with Videas SAS in colocation. Videas acts as a processor under Article 28 of the GDPR and publishes an up-to-date list of its sub-processors, with each one's role and where the data sits; any addition or replacement is brought to the client's attention, who has a reasonable period to object. Two optional features rely on a sub-processor established in the United States, under appropriate safeguards (Chapter V of the GDPR): automatic subtitle translation and AI-generated metadata. The data transmitted is not used to train that provider's models, and these features remain optional if you'd rather this content never leave the European Union. The player itself sets no cookies or trackers.
Frequently asked questions
What does GDPR mean?+
GDPR stands for General Data Protection Regulation: the European law that has governed the collection, processing, and storage of personal data since 2018.
Does the Videas player set cookies?+
No. The Videas player sets no cookies or trackers, which means no consent banner is needed for the video itself.
Can I sign a data processing agreement with Videas?+
Yes. Videas acts as a processor under Article 28 of the GDPR, and publishes an up-to-date list of its sub-processors, with each one's role and where the data sits. Any addition or replacement is notified to you, and you have a reasonable period to object.
Where are my videos stored?+
In France, with Videas SAS, in colocation.
Does my data leave the European Union?+
Storage and transcoding stay in France. Two optional features — automatic subtitle translation and AI-generated metadata — rely on a sub-processor established in the United States, under GDPR safeguards, and can be left off if you'd rather this content never leave the EU.
What role does Stripe play in data processing?+
Stripe processes payments and verifies seller identity, from Ireland (EU), with framed transfers to the United States.
Does GDPR ban all data transfers outside the EU?+
No. It governs those transfers through recognized safeguards — standard contractual clauses or an adequacy decision — rather than banning them outright.