Last updated: March 2026
1. Data controller
The controller of the personal data collected on this site is:
36 BLUE SARL, 25 rue Tronchet, 75008 Paris, France. Contact: contact@exoskeletonworld.com
2. Data collected and purposes
2.1 Contact form
Data collected: first name, last name, email address, free-text message.
Purpose: to respond to user enquiries.
Legal basis: legitimate interest (Art. 6.1.f GDPR), processing necessary to manage the relationship with a user who initiated contact.
Retention: 3 years from the last contact.
2.2 Recommendation tool
Data collected: usage preferences (user type, intended use, body area, budget), first name, last name, email, and for professionals: company name, phone (optional), postal code and sector of activity.
Purpose: to generate a personalised selection of exoskeleton models and send the results to the user by email.
Legal basis: consent (Art. 6.1.a GDPR); the user voluntarily triggers the recommendation by submitting the form.
Retention: 12 months from collection.
Responses about use cases (rehabilitation, mobility, professional context) are processed solely for recommendation purposes and do not constitute the collection of medical data within the meaning of Art. 9 GDPR. They are not shared with third parties without separate, explicit consent.
2.3 Sharing with partners (professionals only)
Within the professional funnel, and only with the user’s consent, profile information may be shared with partner manufacturers or distributors so they can make contact for a personalised quote.
Legal basis: explicit, specific consent (Art. 6.1.a GDPR); an un-pre-ticked box, distinct from the recommendation consent, which can be refused without blocking access to the service.
No partnership is active to date, so no data is shared with third parties. This section will be updated once a first partnership is concluded.
2.4 Cookies and browsing data
The site uses the following tools, which may set cookies:
- NitroPack: a performance optimisation tool; technical cookies necessary for the site to function, hosted in Europe.
- Google Analytics: an audience-analytics tool operated by Google LLC (United States). It collects anonymised browsing data (page views, session duration, country of origin). See section 4 for transfers outside the EU.
- Semrush: an SEO tool used in the back office by the editorial team. It does not set cookies on visitor pages.
You can configure your browser to block non-essential cookies. Refusing these cookies does not affect access to the site’s content.
3. Data recipients
The data collected is intended solely for 36 BLUE SARL. It is not sold, rented or shared with third parties for commercial purposes.
Technical subprocessors have access to the data strictly within the scope of their tasks (hosting provider, Google Analytics), under processing agreements compliant with Art. 28 GDPR.
4. Transfers outside the European Union
Google Analytics is operated by Google LLC, a US company. Browsing data collected via this tool may be transferred to servers located in the United States. This transfer is governed by the standard contractual clauses approved by the European Commission (implementing decision 2021/914), in accordance with Art. 46 GDPR.
To limit this transfer, IP-address anonymisation is enabled. No other tool used on the site transfers personal data outside the European Union.
To opt out of Google Analytics tracking, you can install the official opt-out extension: https://tools.google.com/dlpage/gaoptout
5. Your rights
In accordance with the GDPR, every user has the following rights over their data:
- Right of access: to obtain confirmation that data concerning you is being processed and to receive a copy of it.
- Right to rectification: to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”): to request deletion of data in the cases provided for by law.
- Right to restriction of processing: to request the suspension of a processing operation.
- Right to object: to object to processing based on legitimate interest.
- Right to portability: to receive your data in a structured format.
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, contact: contact@exoskeletonworld.com
We respond within a maximum of one month from receipt of the request (Art. 12 GDPR).
6. Right to lodge a complaint
If you believe that the processing of your personal data does not comply with the regulations, you have the right to lodge a complaint with the French Data Protection Authority (CNIL):
CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07. www.cnil.fr
7. Data security
36 BLUE SARL implements appropriate technical and organisational measures to ensure the security, integrity and confidentiality of the personal data collected, in accordance with Art. 32 GDPR.
8. Changes to this privacy policy
This privacy policy may be amended at any time. The update date appears at the top of the document. In the event of a substantial change affecting users’ rights, they will be informed by any appropriate means.
This privacy policy supersedes and cancels all previous versions.