1. Data controller

Owner

Vicxelcode

Address

Calle Doctor Casares, portal 164
27400 Monforte de Lemos, Lugo (España)

Email

hi@vicxelcode.com

Phone

+34 611 542 014

For any matter relating to your personal data you can write to us at hi@vicxelcode.com.

2. What data we process and how we obtain it

We only process the data you provide to us or that is generated by your use of the Site:

• Contact form: name, email address, subject, message and the language you are browsing in.
• Blog comments: name, email address, comment text and publication date. If you tick the corresponding box, your name and email are also stored in your own browser so you do not have to type them again (see the Cookie policy).
• Direct communications: the data you provide when you email or phone us.
• Technical data: our servers automatically record the IP address, date and time, requested page and browser type in the access logs, for security and diagnostic purposes.
• Client data: if you contract our services, the identification, contact and billing data needed to perform the agreement.

3. Purposes and legal basis

We use your data solely for the following purposes, each with its legal basis under Article 6 of the GDPR:

• Handling your enquiries and quote requests sent through the contact form, by email or by phone. Basis: pre-contractual measures taken at your request (Art. 6(1)(b)) and, failing that, your consent when submitting the form (Art. 6(1)(a)).
• Publishing and managing your comments on the blog, including moderation. Basis: your consent when posting them (Art. 6(1)(a)).
• Providing and invoicing the contracted services and meeting the related tax and accounting obligations. Basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
• Keeping the Site secure, detecting abuse and resolving technical incidents. Basis: Vicxelcode’s legitimate interest in protecting its systems (Art. 6(1)(f)).

4. No profiling, no advertising

We do not use web analytics or advertising tools, we do not build profiles or make automated decisions with your data, and we will not send you commercial communications you have not requested.

5. Retention period

• Contact enquiries: for as long as needed to handle them and, afterwards, for a maximum of two years in case we need to evidence the communication, unless they turn into a contractual relationship.
• Blog comments: for as long as the article remains published or until you request their deletion.
• Client and billing data: for the duration of the contractual relationship and, afterwards, for the tax and commercial limitation periods set by law (generally six years).
• Server access logs: a maximum of twelve months.

6. Recipients and processors

We do not sell or share your data with third parties. Only the providers we need to operate the Site have access to it, acting as processors under the guarantees of Article 28 of the GDPR:

• Microsoft Ireland Operations Ltd. (Microsoft 365): sending and receiving the contact form emails and our correspondence.
• Arsys Internet, S.L.U. (Spain): hosting of the server that serves the Site.
• Google Ireland Ltd. (Google Maps): only if you visit the contact page, where an embedded map is loaded. Google may collect technical data from your browser in accordance with its privacy policy.

7. International transfers

Our servers are located in Spain. Microsoft and Google may process certain data outside the European Economic Area; in that case the transfers are covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

8. Data that is made public

When you comment on the blog, your name (as you type it), the comment text and the publication date are visible to any visitor of the Site. Your email address is never published. We recommend not including your own or other people’s personal data in comments.

9. Your rights

You may exercise the rights granted to you by the GDPR at any time:

• Access: to know which of your data we process.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data when it is no longer needed.
• Objection and restriction: to object to a processing activity or ask us to restrict it.
• Portability: to receive your data in a structured, commonly used format.
• Withdraw consent at any time, without affecting the lawfulness of the processing carried out beforehand.

10. How to exercise them and where to complain

Write to us at hi@vicxelcode.com stating the right you wish to exercise. To protect your privacy we may ask you to prove your identity. We will reply within one month of receiving your request.

If you believe we have not handled your rights correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

11. Security

We apply appropriate technical and organisational measures to protect your data: the Site is served exclusively over HTTPS, access to our systems is restricted to authorised staff and data is stored on servers under our control. No system is infallible, but we work to minimise any risk.

12. Minors

The Site is not aimed at children under 14. If you are under that age, please do not send us personal data. If we find that we have collected data from a minor without the required authorisation, we will delete it.

13. Changes to this policy

We may update this policy to adapt it to legal changes or changes to the Site. The current version will always be published on this page with its update date. If the change is significant and we have your contact details, we will let you know.