fren

Privacy Policy

This privacy policy, drawn up in line with the recommendations of the French Data Protection Authority (CNIL), informs users of https://www.xmakers.io of the commitments and measures taken by X-Makers to protect their personal data.

It is established in accordance with the French Data Protection Act of 6 January 1978 as amended, and with the General Data Protection Regulation (GDPR, Regulation EU 2016/679). The terms "Personal Data", "Processing" and "Controller" have the meaning given to them in Article 4 of the GDPR.

Controller: X-Makers SAS, 11 avenue Maurice Chevalier, 06150 Cannes La Bocca, France, represented by Mr. Julien MASSON, who can be reached at julien@xmakers.io.

1. Data we collect

X-Makers collects and processes only the data strictly necessary for the purposes described below. Should a new service requiring the collection of other data be offered, users would be informed beforehand and their consent obtained where required.

The data collected is as follows:

  • Through the application / contact form: first name, last name, business email address, phone number (optional), company name, and the content of your request where applicable.
  • Data relating to the origin of your visit, attached to your request when you submit the form: campaign parameters (source, medium, campaign), technical advertising click identifiers, and the page visited. This data is used solely to measure the effectiveness of our communication activities.
  • Browsing data (audience statistics), subject to your consent. See the Cookies section below.
  • Technical security data: the form is protected by Cloudflare Turnstile, an anti-bot system that analyzes technical characteristics of the browser in order to distinguish human visitors from automated programs. This processing is based on X-Makers' legitimate interest in preventing fraud and spam.

2. Purposes and legal bases

Purpose Data Legal basis
Processing your application to the program and contacting you back Identity, contact details, company Pre-contractual measures (Art. 6.1.b GDPR)
Measuring the effectiveness of our communication activities Visit origin, campaign identifiers Legitimate interest (Art. 6.1.f GDPR)
Site audience statistics Browsing data Consent (Art. 6.1.a GDPR)
Preventing fraud and spam Technical browser data Legitimate interest (Art. 6.1.f GDPR)

3. Recipients and processors

The data collected is intended exclusively for authorized X-Makers staff. It is neither sold nor transferred to third parties.

For the strict needs of the purposes described above, X-Makers uses the following processors, all of which provide the guarantees required by the GDPR:

  • Vercel Inc. (United States): website hosting;
  • Cloudflare Inc. (United States): anti-bot protection of the form (Turnstile);
  • Make (make.com) (European Union): automated routing of requests;
  • Google LLC (United States): internal work tools (processing of requests, notifications) and audience measurement (Google Analytics 4), subject to consent.

4. Transfers outside the European Union

Some of the processors listed above are located in the United States. The corresponding transfers are governed by appropriate safeguards within the meaning of Chapter V of the GDPR: certification under the EU-US Data Privacy Framework and/or the standard contractual clauses adopted by the European Commission.

5. Data security and incident notification

X-Makers takes all necessary precautions, in line with the state of the art, to protect data in a secure environment and to prevent any destruction, loss, alteration, disclosure or unauthorized access (encryption of exchanges, access control, least privilege).

Since no method of transmission over the internet or of electronic storage is completely secure, absolute security cannot be guaranteed. In the event of a data breach likely to result in a risk to the rights and freedoms of the persons concerned, X-Makers will follow the notification procedures provided for by the GDPR and French law, and will inform the users concerned so that they can take appropriate measures.

6. Retention periods

  • Applications and contact requests: three (3) years from your last contact;
  • Audience measurement data: fourteen (14) months at most;
  • Trackers (cookies and similar technologies): thirteen (13) months at most from the time they are set.

7. Your rights

In accordance with the French Data Protection Act and the GDPR, you have the following rights:

  • right of access (Art. 15 GDPR) and rectification (Art. 16 GDPR);
  • right to erasure of your data (Art. 17 GDPR);
  • right to withdraw your consent at any time (Art. 7 GDPR);
  • right to restriction of processing (Art. 18 GDPR);
  • right to object to processing (Art. 21 GDPR);
  • right to portability of the data you have provided (Art. 20 GDPR);
  • right to define directives regarding the fate of your data after your death.

These rights may be exercised at any time by email at: admin@xmakers.io. Requests are handled within one (1) month at most, unless particular complexity justifies an extension under the conditions set out in Article 12 of the GDPR.

8. Complaints to the CNIL

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): https://www.cnil.fr.

9. Minimum age

In accordance with Article 8 of the GDPR, X-Makers does not knowingly collect personal data relating to persons under sixteen (16) years of age. Users under sixteen are invited to obtain the consent of their legal representative before providing any data. X-Makers reserves the right to request proof of such consent; it cannot be held liable if a user provides data relating to a minor.

10. Cookies and trackers

A cookie is a small file placed on the user's device (computer, tablet or mobile) when visiting the site. It links the device to usage preferences and cannot damage the device in any way.

Consent

On your first visit, a consent management module lets you accept or refuse non-essential trackers, category by category. No tracker subject to consent is set before you make your choice. You can change your choice at any time through the cookie icon available on the site.

Trackers in use

  • Essential trackers: required for the site to function and to remember your consent choices; they cannot be disabled.
  • Audience measurement: Google Analytics 4, set only with your consent, for traffic statistics and site improvement.
  • Marketing: trackers related to the measurement of our advertising campaigns, set only with your consent.

Browser settings

You can also configure your browser to accept or refuse cookies on a case-by-case basis, or to delete them from your device (Chrome, Firefox, Safari, Edge). Refusing certain trackers may limit access to some features of the site, without X-Makers incurring any liability in this respect.

11. Changes to this policy

The version published on the site is the version in force. X-Makers reserves the right to amend it at any time in order to comply with applicable legal obligations. Users are invited to review it regularly.

12. Governing law

These terms of use and this privacy policy are governed by French law and, in the event of a dispute, are subject to the jurisdiction of the courts of Paris, unless a specific legal or regulatory provision provides otherwise.

Last updated: August 2026.

Back to the site

I would like to participate in the next cohort.