Privacy policy

This policy explains which personal data xi-varas.com processes, why, and which rights you have. It is short because we process little data.

Controller

XI Varas, a company in formation. Contact for any privacy matter: hallo@xi-varas.com.

What we store

Only what you type into the contact form: name, company (if you give one), e-mail address, the contact type you choose (producer, company, individual or other), your message, the date sent and the page you sent it from. We do not ask for a phone number or postal address.

To block automated submissions we keep, temporarily and at our infrastructure provider, a counter per IP address that is deleted after one hour. It is not linked to your message.

Why

To reply to you and, if you ask for it, to continue the commercial conversation. The legal basis is your consent when sending the form and, afterwards, our legitimate interest in handling the request. We do not use your data for advertising and do not pass it to third parties.

Who helps us process it

Data is stored on Cloudflare infrastructure (European Union as primary region). The internal notification for each message is sent through Resend. Both act as processors under contract.

For how long

We keep contact-form messages for 24 months from sending. They are then deleted, unless the conversation led to a commercial relationship, in which case they are kept for as long as that relationship and the law require.

Your rights

Under the General Data Protection Regulation (GDPR; in the Netherlands, AVG) you may access your data, correct it, ask us to delete it, restrict or object to its processing, and ask for its portability. Write to hallo@xi-varas.com and we answer within one month. If you believe we got it wrong, you may complain to the Spanish Data Protection Agency or to the Autoriteit Persoonsgegevens.