XORXIOS, S.L., as Data Controller, informs you that, in accordance with the provisions of Regulation (EU) 2016/679, of 27 April, (RGPD) and O.L. 3/2018, of 5 December, on data protection and guarantee of digital rights (LOPDGDD), we will treat your data as we reflect in this Privacy Policy.

In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, who we share it with, how we protect it and your choices regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you agree to the measures in this Policy, you consent to our processing of your personal data as defined in this Policy.

Company name: XORXIOS, S.L.
TAX IDENTIFICATION NUMBER: B36342426
Registered Address: BAJADA A PLAYA CAMPOSANCOS S/N 36780 - A GUARDA (PONTEVEDRA)
Telephone: 629198613
E-mail for communication purposes: comunicacion@xorxios.com
All the notifications and communications between the users and XORXIOS, S.L. will be considered effective, to all the effects, when they are made through postal mail or any other means of those detailed above.

We have always been committed to delivering our services to the highest standards, which includes treating your data securely and transparently. Our principles are:

• Lawfulness: We will only collect your Personal Data for specified, explicit and legitimate purposes.
• Data minimisation: We limit the collection of Personal Data to what is strictly relevant and necessary for the purposes for which it was collected.
• Purpose limitation: We will only collect your personal data for the stated purposes and only in accordance with your wishes.
• Accuracy: We will keep your personal data accurate and up to date.
• Data Security: We implement appropriate technical and organisational measures proportionate to the risks to ensure that your data is not harmed, such as unauthorised disclosure or access, accidental or unlawful destruction or accidental loss or alteration and any other form of unlawful processing.
• Access and rectification: We have the means for you to access or rectify your data when you consider it appropriate.
• Retention: We retain your personal data in a lawful and appropriate manner and only for as long as is necessary for the purposes for which it was collected.
• International transfers: Where your data is to be transferred outside the EU/EEA it will be adequately protected.
• Third parties: Access and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.
• Direct Marketing and Cookies: We comply with applicable advertising and cookie legislation.

The types of data that may be requested and processed are:

• Identifying data.

We also automatically collect data about your visit to our website as described in the cookie policy.
Whenever we request your Personal Data, we will make it clear to you what Personal Data we collect and for what purpose. In general, we collect and process your Personal Data for the purpose of:

• Providing information, services, products, relevant information and industry news.
  
• Sending communications.

In accordance with the applicable data protection regulations, your personal data may be processed provided that:

• You have given us your consent for the purposes of processing. You may of course withdraw your consent at any time.
• If legally required to do so.
• If there is a legitimate interest that is not undermined by your privacy rights, such as sending commercial information either by subscribing to our newsletter or by your status as a customer.
• Because it is necessary for the provision of any of our services through a contractual relationship between you and us.

The data can be communicated to companies related to XORXIOS, S.L. for the provision of the different services as Data Processors. The company will not make any transfer, except by legal obligation.

In relation to the collection and processing of your personal data, you may contact us at any time to:

• Access your personal data and any other information indicated in Article 15.1 of the GDPR.
• Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the GDPR.
• Delete your personal data in accordance with Article 17 of the GDPR.
• Restrict the processing of your personal data in accordance with Article 18 of the GDPR.
• Request the portability of your data in accordance with Article 20 of the GDPR.
• Object to the processing of your personal data in accordance with Article 21 of the GDPR.

If you have given your consent for any specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal rrhh.

You may exercise these rights by sending a reasoned and accredited communication to comunicacion@xorxios.com

You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force.

The requirements of this Policy supplement, and do not replace, any other requirements existing under applicable data protection law, which shall prevail in any event.

This Policy is subject to periodic review and may be amended by the Company at any time. When this happens, we will notify you of any changes and ask you to re-read the most recent version of our Policy and confirm your acceptance.