Controller
J.MIGUEL RESINA SERVICIOS JURÍDICOS S.L.P., Spanish tax ID B19784925, Calle Ausiàs March 141, 2nd floor, door 4, 08013 Barcelona, Spain. Privacy and rights contact: info@xenosimr.com.
Data and source
This policy applies to browsing and initial contact by form or email. We process your name, email, enquiry category, message and, if provided, organisation and service of interest. Technical connection data is also processed to deliver and protect the website and, where consent is given, aggregate usage and performance data through Cloudflare Web Analytics.
Please do not send passports, detailed tax records, special-category data or sensitive information about third parties in an initial email.
If an engagement is accepted, the information relevant to that professional relationship will be provided before matter-specific information is processed.
Purposes and legal bases
- Handling requests concerning a possible engagement: steps requested before entering into a contract. For other professional enquiries, legitimate interests in responding to the requested communication; contact does not subscribe you to advertising.
- Maintaining security, preventing misuse and protecting infrastructure: legitimate interests in service security.
- Understanding aggregate website use and performance in order to maintain and improve it through Cloudflare Web Analytics: the user's consent. The beacon loads only after acceptance and provides metrics such as visits, viewed pages, referrers, country, device type and loading performance without creating commercial profiles.
Recipients and providers
Data is not disclosed for commercial purposes. OpenAI Sites and Cloudflare are used for hosting, delivery, security and aggregate usage and performance measurement, and Google Workspace for email. Resend (Plus Five Five, Inc.) is used to deliver contact-form messages. Authorities or other recipients may also receive data where required by law.
OpenAI Sites and Cloudflare process connection data needed to deliver and protect the website. According to the provider's documentation, the Cloudflare Web Analytics beacon collects navigation and performance metrics without using cookies, localStorage or fingerprinting techniques for analytics. Google Workspace processes messages sent by email. Resend processes the form content and contact details to send the enquiry to the Xenos team; its primary operations take place in the United States and its data processing addendum provides for Standard Contractual Clauses. These services operate globally and involve international transfers. Outside the European Economic Area, transfers rely on adequacy decisions or the European Commission’s Standard Contractual Clauses. Information or a copy of the applicable safeguards may be requested at info@xenosimr.com.
ChatGPT Sites Data Processing Addendum · Cloudflare Web Analytics privacy · Cloudflare cookies and security · Resend Data Processing Addendum · Google Workspace data processing terms
Retention
Initial-contact messages are kept while the enquiry is handled. If no engagement is entered into, they are deleted when no longer needed, unless they must remain restricted to evidence the communication or address liabilities during the applicable statutory periods.
Technical security logs and aggregate metrics are kept for the periods set by the infrastructure and analytics providers. Cloudflare makes the previous six months of Web Analytics available in its dashboard; this access period is not presented as a contractual deletion period. The consent preference is stored for six months and can be changed or withdrawn at any time.
Documents relating to an accepted engagement are subject to separate information and retention criteria.
Whether data is required
Contacting us is voluntary. Required form fields are marked; the organisation field is optional. Without an email and a brief description, we may be unable to handle your enquiry. Attachments are not requested.
Your rights
Where applicable, you may request access, rectification, erasure, objection, restriction or portability by writing to info@xenosimr.com and identifying your request. You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es.
No automated decisions or commercial profiling are carried out based on browsing this website.