Privacy Policy

Xsitelist participates in and complies with all Specifications and Policies of the IAB Europe Transparency & Consent Framework. It uses a cookie management model valid in Europe and internationally.

You can change your choices at any time by clicking the "Cookie Settings" panel at the bottom right of the site.

---

I – Objectives and scope

Capitalised terms used in this Personal Data Protection Policy (hereinafter the "Policy") are defined in Annex 1 "Definitions".

1. Objectives of the Policy

Xsitelist attaches the utmost importance to protecting privacy and Personal Data, and to complying with applicable legal provisions in this area.

This Privacy Policy (hereinafter the "Policy") aims to provide simple, clear and complete information to individuals ("you", "your") about the Processing of Personal Data concerning them, carried out by Xsitelist as Data Controller.

2. Scope of application

This Policy covers Processing carried out in connection with:

• Managing the xsitelist.com website and requests submitted via online forms on this site
• Sending the Xsitelist newsletter
• Managing clients, service providers and partners of Xsitelist

For all of these Processing activities, Xsitelist is the entity that determines the means and purposes and therefore acts as Data Controller within the meaning of applicable personal data protection regulations, in particular EU Regulation 2016/679 (GDPR).

In this Policy, "Xsitelist", "we", "our" and "us" refer to Xsitelist, represented by its webmaster, reachable at xsitelist@ultramail.fr.

---

II – General provisions applicable to all Processing

1. Data minimisation

Each form on the site limits the collection of Personal Data to the strict minimum necessary and indicates the purpose(s) of data collection and the Recipient(s) of the Data. Mandatory fields are marked with an asterisk.

2. Data sharing and international transfers

We never share your Personal Data with other companies for commercial prospecting purposes.

Xsitelist may also be required to disclose your Data to Third Parties when such disclosure is required by law, a regulatory provision or a court order, or when necessary to protect and defend our rights.

In the event of a transfer outside the EU, we guarantee that it is carried out:

• To a country providing an adequate level of protection;
• Under standard contractual clauses;
• Under binding corporate rules.

3. Data security

Xsitelist is committed to protecting your Personal Data against any loss, destruction, alteration, unauthorised access or disclosure, by implementing appropriate technical and organisational measures.

4. Data concerning minors

Xsitelist's services are not intended for minors. We do not knowingly collect or process Personal Data relating to minors. Should we become aware that Personal Data of a minor has been collected without prior parental consent, we will take appropriate steps to delete such data from our servers.

---

III – Processing carried out by Xsitelist

A. Website management and contact forms

When you browse the Xsitelist website, you may submit a contact or information request. In this context, and based on your Consent, Xsitelist processes and retains your Personal Data for the time necessary to respond to your request.

We also produce anonymous statistics on website traffic, which do not allow us to identify you personally.

B. Promotion of Xsitelist services

Xsitelist collects and uses identification data and professional contact details of prospects and clients to promote its services, based on its legitimate interest. You may opt out of receiving our newsletter at any time, without justification, by clicking the unsubscribe link included in each email.

C. Management of clients, service providers and partners

Xsitelist processes Personal Data when you make a contact request or when your company enters into a contract with Xsitelist. Data collected (identity, professional contact details, contractual data) is retained for the duration of the commercial relationship and up to 5 years after its end to protect Xsitelist's legal rights.

---

IV – Exercising your rights

In accordance with applicable regulations, you have the right to access, rectify, erase (right to be forgotten), object to, limit and obtain portability of your Personal Data, subject to compelling legitimate grounds that Xsitelist may invoke.

You may exercise these rights or ask any question about personal data management by contacting us at:

You also have the right to lodge a complaint with your national data protection authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

---

V – Cookie policy

Our website www.xsitelist.com uses cookies.

A "cookie" is a small text file stored on your device when you visit a website. It allows its issuer to identify and recognise your device during the cookie's validity period (maximum 13 months).

Our site uses 3 types of cookies:

• Essential cookies: necessary for the site to function properly. You cannot opt out of these.
• Analytics cookies: measure traffic anonymously. You can opt out via our cookie banner.
• Advertising cookies: placed by our social media partners. You can opt out via our cookie banner.

We do not use cookies for retargeting purposes.

Cookie table

Who places cookies on the site?

• Xsitelist and its technical subcontractors;
• Social networks: Facebook, LinkedIn;
• Commercial partners: Google.

How to manage cookies in your browser

• Internet Explorer: Tools → Internet Options → Privacy → Advanced. See guide
• Microsoft Edge: See guide
• Mozilla Firefox: Tools → Options → Privacy. See guide
• Safari: Preferences → Security → Accept cookies. See guide
• Google Chrome: Settings → Advanced → Privacy → Content settings. See guide

Links to third-party websites

The Xsitelist website may contain links to third-party platforms over which Xsitelist has no control. Xsitelist cannot be held responsible for how your Data will be stored or used on third-party servers. We invite you to read their privacy policies.

---

VI – Changes to this Policy

Xsitelist may update this Policy as necessary. You will be informed of any changes via a notice on our website or a personalised alert in our newsletter.

---

Annex 1 – Definitions

Consent

Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they accept the Processing of Personal Data concerning them.

Data Protection Officer (DPO)

Person designated by Xsitelist responsible for personal data protection and regulatory compliance.

Personal Data

Any information relating to an identified or identifiable natural person, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.

Sensitive Personal Data

Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sexual orientation, genetic and biometric data, or data relating to criminal convictions.

GDPR

EU Regulation 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Data Controller

The natural or legal person who determines the purposes and means of the Processing of Personal Data.

Processor

Any natural or legal person who processes Personal Data on behalf of the Data Controller and under its instructions.

Processing

Any operation applied to Personal Data: collection, access, recording, copying, transfer, storage, modification, making available, communication, destruction, etc.

Data Transfer

Any communication, copy or movement of Personal Data to a country outside the European Union or to an international organisation.