RIGHT TO INFORMATION

For the purposes of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD), users are informed of the existence of an automated personal data processing system created by XORXIOS, S.L. and under its responsibility, with the personal data that you may provide us with while browsing our Website, either when you register or when you send an email.

DATA CONTROLLER

Company name: XORXIOS, S.L.

Tax ID number: B36342426

Registered office: BAJADA A PLAYA CAMPOSANCOS S/N 36780 – A GUARDA (PONTEVEDRA)

Telephone: 629198613

Email address for communication purposes: comunicacion@xorxios.com

PURPOSE OF PROCESSING

The purpose of the processing is described in each of the forms on the website where you provide us with your data.

LEGITIMACY

Article 6.1.a) of the GDPR. The data subject gave their consent to the processing of their personal data for one or more specific purposes.

DATA RETENTION AND PROCESSING

Your data will be retained for the time necessary to respond to your request, unless you indicate otherwise by exercising your right of erasure, or for the time necessary to comply with legal obligations and meet any possible liabilities that may arise from the fulfilment of the purpose for which the data was collected. If necessary, XORXIOS, S.L. will cancel or rectify the data when it is inaccurate, incomplete or no longer necessary for its purpose, in accordance with the provisions of current legislation on the Protection of Personal Data.

Unless you inform us otherwise, we will understand that your data has not been modified, that you agree to notify us of any changes and that we have your consent to use it in order to maintain the relationship between the parties.

The data provided will not be transferred to third parties except in cases where there is a legal obligation to do so.

XORXIOS, S.L. will not create any type of ‘profile’ based on the information provided. No automated decisions will be made based on profiles.

In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, in its article 21, we will request your consent to send you advertising communications that we consider may be of interest to you, by email or any other equivalent electronic means of communication.

You have the right to object and/or withdraw your consent to the processing of the above-mentioned data, where applicable, at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal, by notifying the data controller at the address(es) indicated.

TECHNICAL AND ORGANISATIONAL MEASURES

XORXIOS, S.L. adopts reasonably reliable and effective technical measures, controls and procedures of a physical, organisational and technological nature, aimed at preserving the integrity and security of your data and guaranteeing your privacy. However, it does not assume any responsibility for damages resulting from alterations that third parties may cause to the user’s computer systems, electronic documents or files.

In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of personal data.

In the case of contracts we enter into with our suppliers, we include clauses requiring them to maintain confidentiality with regard to the personal data to which they have had access by virtue of the assignment carried out, as well as to implement the necessary technical and organisational security measures to guarantee the ongoing confidentiality, integrity, availability and resilience of the personal data processing systems and services.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable. Therefore, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take the appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected so that they can take the appropriate measures.

RIGHTS

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, data portability and not to be subject to automated individual decision-making in relation to the data being processed by contacting the data controller at the above address or by email at comunicacion@xorxios.com, attaching a copy of their ID card or equivalent document. If you are not satisfied with the exercise of your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority, which is the Spanish Data Protection Agency, whose contact details are available at You also have the right to lodge a complaint with the competent Supervisory Authority (https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf.