Privacy policy

Generic template pending legal review. Fill in the bracketed fields with the company's real details and have an adviser review it before the site goes live.

1. Data controller

Controller: [Owner pending: X3A Tech has not been incorporated yet. Before publishing the site, add the name of the person or company responsible here]
Tax ID: [Tax ID pending]
Address: [Address pending]
Contact: the contact form on this website

2. What data do we process?

Through the free analysis form we collect: first and last name, email, company, phone and website (optional), industry, company size, revenue range, role, what you'd like to improve and any message you add. We also measure visits anonymously (see section 9).

3. Why do we process your data?

Solely to handle your free analysis request, prepare the meeting and contact you by email or phone with a proposal tailored to your business. We do not use it for any other purpose or send you advertising without asking first.

4. Legal basis

Your explicit consent, given by ticking the acceptance box on the form (Art. 6(1)(a) GDPR). You can withdraw it at any time.

5. How long do we keep your data?

While we handle your request and, if no business relationship begins, for at most 12 months from our last contact. If you become a client, for the duration of the relationship and the legally required periods afterwards. [Proposed period, pending legal review]

6. Who will your data be shared with?

We do not share your data with third parties unless legally required. The providers that help us run the site (hosting, email delivery) only process it on our behalf and under contract. [Pending: list them once contracted]

7. What are your rights?

You can access, rectify and erase your data, restrict or object to its processing, request portability and withdraw your consent by writing to us through the contact form on this website. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Security

The site is served over HTTPS, access to requests is restricted to the team with two-step verification, and backups are made regularly.

9. Visit measurement without cookies

We measure visits with our own tool that uses no cookies and does not store your IP address. Each visit gets an anonymous identifier generated with a key that changes and is destroyed every day, so you cannot be identified or tracked across days. We only see aggregated data (pages visited, where visitors come from, device type).