Privacy policy
Last updated: 2 October 2026.
This is a translation provided for convenience. In case of discrepancy, the Spanish version prevails.
This policy explains how Xatena Innovare S.L. (“Xain”) processes the personal data of people who visit xain.tech or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Xatena Innovare S.L.
- Tax ID (CIF): B75631366
- Address: Travesía de Paracuellos, 4, 28864 Ajalvir (Madrid), Spain
- Privacy contact: hola@xain.tech
Xain is not required to appoint a data protection officer and has not done so. Any privacy question can be sent to the address above.
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering contact or demo requests sent through a form or by email | Name, business email, company, job title (if provided) and the content of your message | Your request and pre-contractual steps (art. 6.1.b GDPR) | Until the request is resolved and then up to 12 months for follow-up, unless you object earlier |
| Managing the business relationship if you become a customer | Business contact and billing details | Performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c) | For the duration of the relationship and then the statutory periods (6 years under the Spanish Commercial Code and 4 years under tax law) |
| Measuring website use with Google Analytics 4, only if you accept | Browser identifiers, pages visited, interactions, device type and approximate location (country and city) | Your consent (art. 6.1.a GDPR and art. 22.2 LSSI-CE) | 14 months in Google Analytics |
| Keeping the website secure and working | IP address and technical connection data in server logs | Legitimate interest in protecting the website (art. 6.1.f) | Short periods set by the hosting provider, usually under 30 days |
We do not process special categories of data or make automated decisions with legal effects on you. This website is not aimed at children under 14.
Required form fields are marked. If you do not complete them, we will not be able to handle your request.
3. Recipients and processors
We do not sell or share your data with third parties, except where required by law. To provide the service we use providers that process data on Xain’s behalf, under a data processing agreement:
- Web3Forms: receives the website’s forms and forwards them to Xain’s email.
- Google Ireland Limited (Google Analytics 4): web analytics, only with your consent.
- Cloudflare, Inc.: website hosting and delivery.
- Xain’s email provider: receiving and managing messages.
4. International transfers
Some of these providers may process data outside the European Economic Area. In that case, the transfer relies on the safeguards provided by the GDPR: a European Commission adequacy decision (such as the EU-US Data Privacy Framework, under which Google LLC and Cloudflare, Inc. are certified) or standard contractual clauses approved by the European Commission.
5. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of prior processing.
To exercise them, email hola@xain.tech stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month, extendable in the cases provided for by the GDPR.
You can withdraw your consent to analytics at any time via the “Cookie settings” link in the footer.
If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration or unauthorised access. These include encrypted connections (HTTPS) across the whole website, collecting only the data we need, and restricted access to the messages we receive.
7. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version is the one published on this page, with its last-updated date.