Privacy statement X-Skills B.V.
X-Skills B.V. (“X-Skills”, “we”, “us”) respects the privacy of its users and processes personal data with care and in accordance with the General Data Protection Regulation (GDPR).
This privacy statement explains which data we process, why, for how long, and which rights you have.
1. Who are we?
- X-Skills B.V.
- Spaarne 64
- 2011 CK Haarlem
- The Netherlands
- Chamber of Commerce (KvK): 91287227
- E-mail: info@x-skills.com
- Website: www.x-skills.com
2. Roles under the GDPR
The role of X-Skills differs from situation to situation:
a. Player data via clubs and organisations
- Club / Organisation → controller
- X-Skills → processor
X-Skills processes this data solely on the instructions of the Club, in accordance with the Data Processing Agreement.
b. Our own data of customers and website visitors
For:
- contact requests;
- quotations;
- invoicing;
- the newsletter;
- website use;
X-Skills is itself the controller.
3. Which data do we process?
a. Anonymous data (prior to an account)
During training sessions and events we may process anonymous performance and interaction data, such as:
- Tag IDs;
- scores and measurement values;
- times and exercise types.
This data cannot be traced back to an individual.
b. Personal data (after an account and linking)
Only once a user voluntarily:
- creates an account; and
- links an X-Skills SkillTag, may data be linked to:
- name or nickname;
- e-mail address (optional);
- age category or date of birth;
- team or club;
- training results and scores;
- account and login details.
c. Data of customers and contacts
- name and contact details;
- company and invoicing details;
- communication history;
- contract and license details.
4. Minors
- The X-Skills App is intended for users aged 16 and over.
- Users under the age of 16 may participate only through a Club or Organisation.
- The Club is responsible for obtaining parental consent.
- X-Skills does not independently verify this consent.
5. Purposes of processing
We process personal data solely for:
- the functioning of the App and the hardware;
- facilitating training sessions, events and leaderboards;
- insight into personal performance (for users);
- support and customer service;
- the administration of licenses and agreements;
- the improvement and development of our products (exclusively in anonymised form);
- compliance with statutory obligations.
6. Leaderboards and visibility
- By default, results are displayed anonymously or under a nickname.
- If a user creates an account and links a SkillTag, results may become visible under the linked name.
- The organiser of the event (Club/Organisation) is responsible for:
- the settings chosen;
- communication towards players and parents.
7. Retention periods
- Anonymous data: retained without limitation for analysis and product development.
- Personal data: no longer than necessary.
- Following the termination of an account or license, personal data is deleted or anonymised within 30 days, unless a statutory retention obligation applies.
- Administrative data is retained for a maximum of 7 years (tax obligation).
8. Security
X-Skills takes appropriate technical and organisational measures, including:
- encrypted communication (HTTPS / TLS);
- encrypted storage;
- role-based access rights;
- logging and monitoring;
- back-ups;
- a duty of confidentiality for employees.
For hosting and authentication we make use of:
- Google Firebase (EU);
- Amazon Web Services (EU).
These parties comply with international security standards such as ISO 27001.
9. Sharing of data
We share personal data solely with:
- hosting and cloud providers;
- payment processors;
- logistics partners (in the case of hardware delivery);
- government authorities where this is legally required.
Data processing agreements have been concluded with all processors.
10. Cookies
Our website uses:
- functional cookies (necessary);
- analytical cookies (anonymised);
- marketing cookies only after consent.
Cookie settings can be adjusted via the browser.
11. Your rights
You have the right to:
- access;
- rectification;
- erasure;
- restriction of processing;
- data portability;
- object;
- withdraw consent.
Requests can be submitted via info@x-skills.com.
We respond within 30 days.
You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl
12. Amendments
X-Skills may amend this privacy statement.
The most up-to-date version is always available on the website.
13. Contact
- X-Skills B.V.
- Spaarne 64
- 2011 CK Haarlem
- info@x-skills.com
- www.x-skills.com