Privacy Policy

Last updated: January 30, 2026

1. Information We Collect

1.1 Information You Provide Directly

When you contact us through our website forms or email, we may collect:

• Name and contact information (email address)
• Company name and role
• Project details and requirements you share with us
• Any other information you choose to provide in your communications

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• IP address (anonymized)
• Pages visited and time spent on pages
• Referring website addresses
• Device information

1.3 Cookies and Tracking Technologies

We use essential cookies to ensure our website functions properly. We do not use third-party advertising or tracking cookies without your explicit consent.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To respond to your inquiries and provide the services you request
• Communication: To send you project updates, technical documentation, and respond to your questions
• Website Improvement: To analyze how visitors use our website and improve user experience
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Security: To detect, prevent, and address technical issues and security threats

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent (e.g., submitting a contact form)
• Contract Performance: When processing is necessary to fulfill our contractual obligations
• Legitimate Interests: To operate and improve our business, provided your rights are not overridden
• Legal Obligation: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., hosting providers, email services), under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
• Protection of Rights: To protect our rights, property, safety, or that of our users or the public

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Contact Inquiries: 3 years from last contact
• Client Projects: Duration of engagement plus 7 years for legal and tax purposes
• Website Analytics: 26 months (anonymized data)

After the retention period, we securely delete or anonymize your data.

6. Your Rights (GDPR)

Under GDPR and applicable data protection laws, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, contact us at: info@3xa.es

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (SSL/TLS)
• Secure hosting infrastructure
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

8. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally compliant transfer mechanisms

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending email notification for significant changes (if we have your email address)

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Data Protection Officer

For data protection inquiries or to exercise your rights, you may contact our Data Protection Officer at: info@3xa.es