Privacy policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and with Spanish Organic Act 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), Lexdatum informs users about the processing of their personal data as follows.

1. Data controller

The entity responsible for processing the personal data collected through this website is being finalised. For any data protection matter, please write to hello@lexdatum.com.

2. Purposes of processing

We process the personal data collected through the contact form and other channels for the following purposes:

• Handling enquiries and requests for information received.
• Maintaining professional and commercial relationships with clients and prospects.
• Sending commercial or informational communications, always with prior consent.
• Complying with applicable legal and contractual obligations.

3. Legal basis

The legal bases for processing are: the data subject's consent (for commercial communications and sending information), performance of a contract or pre-contractual measures (for managing contracted services), and compliance with legal obligations applicable to the controller.

4. Recipients and disclosures

Personal data will not be disclosed to third parties, except in the cases provided for by law or where necessary to perform the contracted service and after informing the data subject. Data may be processed by processors (hosting, email and operational tool providers) that offer sufficient guarantees and act on our instructions.

5. International transfers

Where international transfers of data outside the European Economic Area are necessary, we ensure that adequate safeguards are in place under the GDPR (adequacy decisions, standard contractual clauses or other recognised measures). You may request further information about these safeguards by writing to hello@lexdatum.com.

6. Retention periods

Personal data is retained for as long as the contractual relationship lasts or until the user requests its erasure. Once that relationship ends, the data is blocked for the period legally required to address any liabilities that may arise, after which it is deleted.

7. Your rights

You may exercise the following rights at any time:

• Access — find out what personal data we process.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data.
• Objection — object to processing on grounds relating to your particular situation.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, commonly used format.
• Not to be subject to automated decisions producing legal effects.

8. How to exercise your rights

To exercise these rights, write a request to hello@lexdatum.com, enclosing a copy of an identity document. The request will be answered within a maximum of one month from receipt.

9. Complaint to the supervisory authority

If you consider that the processing of your personal data infringes applicable law, you may lodge a complaint with the competent supervisory authority. In Spain, the Spanish Data Protection Agency (AEPD) — www.aepd.es.

10. Security measures

Lexdatum applies appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, and against any other unlawful form of processing. These measures are reviewed and updated periodically in line with the state of the art and the risks identified.