1. Data controller
- Controller: Xana Technologies SL (Tax ID B02903169)
- Registered office: C/ Bélgica 135, ground floor, 12006 Castellón, Spain
- Privacy contact: info@xanatechnologies.com
- Website: xanatechnologies.com
Xana Technologies SL processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD). We only process personal data when there is a valid legal basis to do so.
2. What data we process, why and on what basis
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Email address and message (required); name, phone, region and country (optional); language; IP address for anti-bot verification. | To answer your enquiry and, where relevant, route it to the appropriate brand (Xana System or Woman on Mars) or prepare a proposal. | Your consent (GDPR art. 6.1.a) and pre-contractual measures taken at your request (art. 6.1.b). | For as long as needed to handle the enquiry and, afterwards, for the period required to meet legal obligations or defend possible claims. |
| Commercial relationship | Identification and contact details of clients, partners and their representatives. | To manage the commercial and contractual relationship. | Performance of a contract (art. 6.1.b) and legitimate interest (art. 6.1.f). | For the duration of the relationship and the legal limitation periods thereafter. |
| Website analytics | Pseudonymous usage data collected through cookies (see the Cookies Policy). | To measure how the site is used and improve it. | Your consent, given through the cookie banner (art. 6.1.a). | See the cookie durations in the Cookies Policy. |
Providing the data marked as required in the contact form is necessary to handle your enquiry; without it we cannot reply. We do not use your data for automated decision-making or profiling.
3. Recipients
We do not sell your personal data. It may be processed by service providers acting on our behalf as data processors, under data processing agreements, in the following categories:
- Hosting and delivery of the website and contact form: Vercel Inc.
- Transactional email of the contact form: Brevo (Sendinblue SAS).
- Anti-bot verification of the contact form: Cloudflare, Inc. (Turnstile).
- Website analytics (only with your consent): Google Ireland Ltd. (Google Tag Manager, Google Analytics).
Data may also be disclosed to public authorities or other third parties when there is a legal obligation or another valid legal basis to do so.
4. International transfers
Some of the providers listed above may process data outside the European Economic Area (in particular in the United States). Where that happens, transfers are covered by the safeguards required by the GDPR: an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework, where the provider is certified) and/or the Standard Contractual Clauses approved by the Commission.
5. Retention
Data is kept only for as long as necessary for the purposes stated above and, afterwards, for the periods required to comply with legal obligations or to address possible liabilities, after which it is securely deleted.
6. Your rights
You may request, at any time:
- access to your personal data;
- rectification of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- objection to processing;
- withdrawal of consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to info@xanatechnologies.com or to our registered office, indicating the right you wish to exercise and enclosing a copy of a valid identity document. You may also lodge a complaint with the competent supervisory authority, the Spanish Data Protection Agency (AEPD, www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or loss, taking into account the state of the art and the risks of the processing.
8. Cookies
Information about the cookies and similar technologies used on this website is available in ourCookies Policy.
9. Data Deletion Policy (App Catalog Platform)
This account deletion policy applies to the App Catalog Platform application, developed by Xana Technologies and available on the Play Store.
Users may request deletion of their accounts by following these steps:
- Send an email to info@xanatechnologies.com with the subject line “Account Deletion.” You must include the email address used to register.
- Within 7–10 days, the company will contact you to confirm the deletion of your data from the system.
All account data will be deleted. No records will be retained.
Please note that this policy is subject to periodic changes and updates. Users are encouraged to review this policy regularly to stay informed of any modifications. For any questions or requests related to this policy, please do not hesitate to contact us.
10. Changes and contact
We may update this Privacy Policy when necessary. Any changes will be published on this page with an updated revision date. Privacy contact:info@xanatechnologies.com.