1. Introduction

At Xora Technologies S.L. (“Xora”, “we”, “our”, or “us”), we value your privacy and are committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website, interact with us, or communicate through any of our channels.

We believe that trust is built on transparency. Therefore, we are dedicated to providing clear information about how your data is handled — always lawfully, fairly, and securely, in full compliance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and the Spanish Organic Law 3/2018 on Data Protection and Digital Rights (“LOPDGDD”).

2. Scope of this Policy

This Policy applies to all users and visitors of https://xora.es.
It governs the processing of personal data collected through the website, including contact forms, cookies, and communications with our team.
It does not cover information processed by third-party websites that may be linked from ours.

3. What Information We Collect

We may collect different types of information depending on how you interact with our website:

3.1. Information You Provide Voluntarily

When you contact us via forms, email, or other means, you may provide:

• Full name and contact details (email, phone number, organization);

• Company or professional role;

• Subject and content of your message;

• Any additional information you choose to include.

3.2. Automatically Collected Information

When you browse our site, certain technical data may be collected automatically for analytical and operational purposes:

• IP address, browser type, operating system, and device model;

• Pages visited, duration of visit, and navigation patterns;

• Referring URLs or links clicked before entering our website.

This data helps us understand how our visitors interact with the website, so we can enhance performance, design, and content.

4. How We Use Your Data

We process your personal data only for legitimate and clearly defined purposes, including:

• Responding to your inquiries and business requests;

• Providing information about our products and services;

• Improving website functionality, usability, and security;

• Conducting statistical and analytical research to understand user behavior;

• Maintaining communication with clients, partners, and suppliers;

• Complying with legal obligations or responding to official requests from authorities.

We never sell, rent, or exchange your personal data with third parties for marketing or commercial gain.

5. Legal Basis for Processing

All data processing activities carried out by Xora are grounded in one or more of the following lawful bases under the GDPR:

• Consent: when you voluntarily provide information via forms or subscribe to communications;

• Legitimate interest: to maintain business relationships, improve services, and ensure cybersecurity;

• Legal obligation: to comply with accounting, tax, or regulatory requirements;

• Contractual necessity: when communication is required to establish or perform a business agreement.

You can withdraw your consent at any time by contacting us at info@xora.es.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described above, or as required by law.
Once the retention period expires, the data will be securely deleted or anonymized.
In general:

• Contact and inquiry data: retained up to 24 months after last communication;

• Analytical and technical data: retained up to 12 months for performance monitoring;

• Legal and administrative records: retained according to statutory obligations.

7. Data Security

We take data protection seriously.
Xora employs technical and organizational security measures to prevent unauthorized access, loss, alteration, or disclosure of personal data.
These include encryption, firewalls, secure servers, restricted access, and internal policies aligned with ISO 27001 principles.
Despite our best efforts, no online transmission or storage system can be guaranteed 100% secure; however, we continuously monitor and enhance our defenses.

8. Sharing and International Transfers

We do not share personal data with third parties unless it is strictly necessary to fulfill the purposes outlined above or required by law.
In limited cases, service providers (such as hosting, analytics, or email services) may process data on our behalf under confidentiality agreements and data protection clauses.
All data processing occurs within the European Economic Area (EEA) whenever possible.
If data must be transferred outside the EEA, Xora ensures equivalent protection standards in accordance with Chapter V of the GDPR.

9. Your Rights

As a data subject, you have the following rights under GDPR and LOPDGDD:

• Right of access: to know what data we hold about you and how it is used.

• Right to rectification: to correct inaccurate or incomplete information.

• Right to erasure (“right to be forgotten”): to request deletion of your data when legally applicable.

• Right to restriction of processing: to limit how your data is used.

• Right to data portability: to receive your data in a structured, machine-readable format.

• Right to object: to stop processing your data for certain purposes.

• Right to withdraw consent: at any time, without affecting prior lawful processing.

To exercise any of these rights, please send a written request to info@xora.es, clearly stating your full name, contact information, and the right you wish to exercise.
We may request proof of identity to verify your request.

10. External Links and Third-Party Content

This website may include links to external websites or embedded content from third-party providers.
Xora has no control over these external platforms and is not responsible for their content, accuracy, or privacy practices.
We recommend reviewing the privacy policies of any external sites you visit.

11. Updates to this Policy

We may revise this Privacy Policy from time to time to reflect legal, technical, or operational changes.
Whenever we make updates, we will publish the new version on this page and update the “Last updated” date above.
We encourage visitors to review this Policy periodically to stay informed about how we protect their personal data.

12. Contact Information

If you have any questions, comments, or requests regarding this Privacy Policy or how we process your personal data, please contact us at:

📩 info@xora.es
📍 Xora Technologies S.L., Valencia, Spain