This policy describes the personal data processing carried out by Make IT Safe on the website www.makeitsafe.fr. It does not cover the Make IT Safe platform (app.makeitsafe.fr), whose processing is governed by the platform’s terms of use and by the data processing agreement signed with each customer.
Make IT Safe processes your personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act no. 78-17 of 6 January 1978, as amended.
Any information collected on this website that identifies you, directly or indirectly, is personal data and is processed under this policy.
Reminder: only the French version is legally binding.
Data controller
The controller of the data collected on this website is MAKE IT SAFE SAS, whose registered office is at 1 boulevard Jean Monnet, 44400 Rezé, France, registered with the Nantes Trade and Companies Register under number 979 150 943.
Purposes, legal bases and retention periods
| Purpose | Legal basis | Data processed | Retention period |
|---|---|---|---|
| Demo and contact requests | Legitimate interest (answering requests) | Last name, first name, email address, phone number, company, job title, message | Customers: 3 years from the end of the business relationship. Prospects: 3 years from collection or from the last contact initiated by the prospect |
| Downloadable resources (checklists, guides, brochure) | Legitimate interest (allowing documents to be downloaded) | Last name, first name, email address, phone number, company, job title | 3 years from collection |
| CISO / DPO assessment (sending the full results) | Legitimate interest (delivering the requested report) | Last name, first name, email address, phone number, company, job title, assessment results (scores per area and breaking points) | 3 years from collection |
| Event registrations (webinars, conferences, trade shows, meetups) | Legitimate interest (managing events) | Last name, first name, email address, phone number, company, job title, message | Customers: 3 years from the end of the business relationship. Prospects: 3 years from collection or from the last contact initiated by the prospect |
| Job applications | Pre-contractual measures and legitimate interest (meeting recruitment needs) | Last name, first name, email address, phone number, message, CV | 2 years from the last contact, unless you object |
| Sales prospecting | Legitimate interest (developing the company’s business) | Last name, first name, email address, company, job title | 3 years from the last contact |
| Audience and campaign measurement | Consent | Browsing information | Your choice is kept for 6 months, then asked again |
Forms also record the page the request was sent from and the language of the site. Mandatory fields are marked with an asterisk: without them, the request cannot be handled.
Cookies and trackers
No non-essential cookie is set without your consent. It is collected through the banner shown on your first visit, and you can change it at any time: Manage cookies.
| Category | Purpose | Tools | Consent |
|---|---|---|---|
| Strictly necessary | Remembering your cookie choice, light or dark theme preference | No third-party tool | Not required |
| Audience measurement | Visit statistics, site improvement | Matomo (self-hosted in France), Google Analytics | Yes |
| Advertising and conversions | Measuring the effectiveness of advertising campaigns | Google Ads | Yes |
Recipients
The data is intended for the Make IT Safe teams concerned by your request (sales, marketing, human resources).
It may be passed on to the processors Make IT Safe uses to carry out this processing: website hosting (O2switch), contact management and emailing (Brevo), customer relationship management (Pipedrive), audience and campaign measurement (Google, subject to your consent).
Where a processor handles data outside the European Union, the transfer is covered by a European Commission adequacy decision or by its standard contractual clauses.
Your rights
Under the GDPR, you have the following rights:
- right of access: obtain confirmation of whether your data is processed, and a copy of it;
- right to rectification: have inaccurate data corrected or incomplete data completed;
- right to erasure: have your data deleted where possible;
- right to object: object at any time to processing based on our legitimate interest, and without giving a reason to sales prospecting;
- right to restriction: ask for the processing of your data to be frozen for a given period;
- right to data portability: receive the data you provided in a structured, machine-readable format and pass it on to a third party;
- right to withdraw consent: at any time and without justification, where processing is based on your consent.
Exercising your rights
To exercise your rights or ask a question about the processing of your data, write to rgpd@makeitsafe.fr.
If, after contacting us, you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr/fr/plaintes.
Updates
This privacy policy was published on 1 October 2026.