At XENIX SOLUTIONS we take the privacy of those who use our website and our SaaS products very seriously. This policy clearly explains what data we collect, what we use it for, how long we keep it and what your rights are.
1. Data controller
| Identity | XENIX SOLUTIONS, S.L. |
|---|---|
| Tax ID (NIF) | B-09810946 |
| Postal address | Madrid (Spain) |
| info@xenix.es | |
| Data Protection Officer | Not applicable under Article 37 GDPR (any change will be notified) |
| Commercial Registry | Madrid Commercial Registry, Volume 43172, Folio 22, Sheet M-762848 |
2. Data we process
We process the following categories of personal data depending on the context:
2.1 Contact data (forms, email, demos)
- Name and surname
- Business email
- Company and role
- Phone (optional)
- Message or inquiry
2.2 Usage data from SaaS products (LoadTrace, FinOps Pilot)
- User identifier and Microsoft account (Entra ID)
- Operational data generated by product usage (load sessions, cost snapshots, configurations)
- Technical access logs (IP, browser, timestamps) for security purposes
2.3 Website navigation data
- Technical and analytical cookies (see Cookies Policy)
- Device and browser information
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Respond to information requests and commercial contact | Consent (Art. 6.1.a) |
| Provide the contracted SaaS services | Contract performance (Art. 6.1.b) |
| Comply with legal obligations (billing, tax, retention) | Legal obligation (Art. 6.1.c) |
| Improve and maintain the security of our services | Legitimate interest (Art. 6.1.f) |
| Send commercial communications about our services | Consent or legitimate interest (existing customers) |
4. Data retention
- Commercial contact data: until you request deletion or for 2 years from last contact if no contract is signed.
- Customer data: throughout the contractual relationship and 5 additional years under the Spanish Commercial Code.
- Tax and accounting data: 6 years under the Spanish General Tax Law.
- Technical logs: 12 months for security and audit purposes.
5. Recipients and processors
Your data may be shared with the following recipients or processors:
- Microsoft Ireland Operations Ltd. (Microsoft Azure and Microsoft 365) — cloud infrastructure provider. Data hosted in EU regions (West Europe / North Europe).
- Tax and accounting consultants for compliance with legal obligations.
- Competent authorities when there is a legal obligation to inform.
We do not carry out international transfers outside the European Economic Area without adequate safeguards (European Commission Standard Contractual Clauses).
6. Your rights
As the data subject, you have the right to:
- Access: obtain confirmation of whether we process your data and access it.
- Rectification: request correction of inaccurate data.
- Erasure ("right to be forgotten"): request deletion when data is no longer necessary.
- Restriction of processing: in certain cases provided by GDPR.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing on grounds relating to your particular situation.
- Not to be subject to automated decisions with significant legal effects.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, send an email to info@xenix.es clearly indicating the right you are exercising and attaching a copy of your ID or equivalent document.
7. Complaints
If you believe that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), although we encourage you to contact us first at info@xenix.es to try to resolve the matter directly.
8. Security
XENIX SOLUTIONS applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption in transit (TLS 1.2+) and at rest, role-based access controls, log auditing and incident management policies.
9. Changes to this policy
This Privacy Policy may be updated to reflect legal changes or changes in our services. The current version will always be published at this URL with its last update date.