Legal
Privacy policy
Last updated: 8 November 2026
This is a translation provided for information. The legally binding text is the Spanish version, which prevails in case of any discrepancy. Read the Spanish version
This policy explains which personal data are processed through this website, for what purposes, and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
Data controller
- Controller: Ximplicity Software Solutions, S.L.
- Tax ID (NIF): B21907332
- Registered office in: Fuenlabrada - Madrid (Spain)
- Data protection contact: info@ximplicity.es
Which data are processed
This site requires no registration and uses no analytics, advertising or tracking tools. Personal data are processed in these cases:
- Contact form. The data you enter: name, email address, subject and message. In addition, when the form is submitted, the IP address it is sent from, the browser identifier (User-Agent), a device summary derived from it, and the date and time of submission are recorded automatically.
- Email. If you write directly to a Ximplicity address, your email address and the content of your message.
- Browsing. Like any web server, the hosting provider's server technically logs the requests it receives (IP address, date and time, page requested and browser). Ximplicity does not use these logs to identify visitors or to build profiles.
Please do not include special categories of data (for example, health data) or other people's data without their authorisation in your message.
Purposes and legal basis
- Answering your enquiry and, where applicable, maintaining the professional communication that follows from it. Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR), and, where the enquiry concerns engaging Ximplicity's services, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Understanding the technical context of each submission and protecting the form and the site against abuse, spam and attacks, using the technical data of the submission (IP address, browser and device) and the server logs. Legal basis: Ximplicity's legitimate interest in the security of its systems (Art. 6(1)(f) GDPR).
No automated decisions are made and no profiles are built, and the data are not used to send you commercial communications you have not requested.
Retention period
Data from the form and from emails are kept for as long as needed to answer your enquiry and, afterwards, for one year, unless the enquiry leads to a contractual relationship; in that case they are kept for as long as the relationship lasts and, afterwards, for the periods required by law or for as long as liabilities may arise. You may ask at any time for them to be erased earlier. The server's technical logs are kept for the limited period set by the hosting provider.
Recipients and processors
The data are not disclosed to third parties, except where required by law. These providers take part in delivering the service:
- Hostinger International Ltd., as processor: hosting of the website, of the server that receives the form and its database, and of Ximplicity's email. The servers used are located in the European Union.
International transfers
Form data are stored on servers located in the European Union and are not transferred outside the European Economic Area.
Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before its withdrawal. To do so, write to info@ximplicity.es stating "Data protection" in the subject line and the right you wish to exercise. If there is reasonable doubt about your identity, you may be asked for the additional information needed to confirm it. You will receive a reply within one month, which may be extended in the cases provided for in the GDPR.
Complaints to the supervisory authority
If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain, www.aepd.es. Beforehand, if you prefer, you can contact Ximplicity to try to resolve it.
Security
Communications with the site and with the form are encrypted using HTTPS, and the form includes measures against automated submissions.
Changes to this policy
This policy may be updated to reflect changes to the site or to the law. The date of the last update is shown at the top of this page. See also the legal notice and the cookies policy.