Legal
Privacy policy
How personal data is processed under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
This English version is provided for convenience. XSELA is a Spanish company and the Spanish text is the legally binding one.
1. Data controller
| Controller | [PENDING: registered company name] (XSELA) |
|---|---|
| CIF / VAT | B93832160 |
| Address | Calle Alcalde Clemente García, 19, 5.º — 30169 Murcia, Spain |
| Contact | contacto@xsela.es · +34 601 576 077 |
2. What we collect and why
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Answering enquiries sent through the contact form | Name, company, country, email, category of interest and the message itself | Consent (art. 6.1.a GDPR) and, where the enquiry leads to negotiation, pre-contractual measures (art. 6.1.b) | Up to 12 months from last contact, unless a commercial relationship begins, in which case for its duration plus applicable limitation periods |
| Keeping the site running and secure | IP address and technical browser data recorded by the server | Legitimate interest in service security (art. 6.1.f) | Per the hosting provider's log retention policy |
We do not profile, we make no automated decisions, and we do not use contact-form data to send unsolicited marketing.
3. Recipients
We do not share personal data with third parties except where legally required. Hosting and email providers may access it as processors, under a contract meeting article 28 GDPR.
[PENDING: name the hosting and email providers, and state whether any international transfer occurs and under what safeguard.]
4. Your rights
You may request access, rectification or erasure, restriction of or objection to processing, and portability. You may withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to contacto@xsela.es stating which right you wish to exercise. If you believe your request was not handled properly, you may complain to the Spanish Data Protection Agency (aepd.es).
5. Security
We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or alteration. The site is served over an encrypted connection.
6. Changes
If this policy changes, the updated version will be published on this page. Last revised: [PENDING: publication date].