Privacy policy

This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.

This policy explains how we process the personal data you provide through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

• Identity: LYXUX Global S.L.
• CIF (Tax ID): B75265611
• Address: Calle de Nuestra Señora de la Luz, 28047 Madrid, España
• Data protection email: info@lyxux.com
• Data Protection Officer: [state whether a DPO has been appointed and their contact details]

2. Data we process

Through the contact and enquiry forms we collect: full name, email, phone (optional), company (optional), the division your enquiry is addressed to, the subject and the message content. We also record the date and time of consent.

We do not request special categories of data. Please do not include health data or other sensitive data in your message; if it becomes necessary for a wellness enquiry, we will inform you beforehand.

3. Purposes and legal basis

Purpose	Legal basis
Responding to your enquiry	Consent (Art. 6.1.a GDPR)
Sending you the information requested and maintaining related contact	Consent (Art. 6.1.a GDPR) and, where applicable, pre-contractual steps (Art. 6.1.b GDPR)
Site security and abuse prevention (e.g. submission limits)	Legitimate interest (Art. 6.1.f GDPR)

No automated decision-making or profiling takes place.

4. Retention

We keep data for as long as needed to respond to your enquiry and, afterwards, for the statutory limitation periods for potential liabilities. [Specify the period, e.g. one year from the last communication.]

5. Recipients

We do not share your data with third parties unless legally required. We use providers acting as data processors, with whom we have signed the agreements required by Art. 28 GDPR:

• Web hosting: [Vercel Inc.]
• Email delivery: [Resend]
• Submission rate limiting (if used): [Upstash]

Some of these providers may be located outside the European Economic Area. In that case, transfers rely on adequacy decisions (such as the EU-US Data Privacy Framework) or on the European Commission’s standard contractual clauses. [Verify with each provider.]

Within the group, your enquiry is only forwarded to the division it is addressed to.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@lyxux.com or to the postal address above, enclosing a copy of your ID where needed to verify your identity.

If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted communications (HTTPS).

8. Minors

This site is not intended for children under 14. We do not knowingly collect data from children under that age.

9. Changes to this policy

We may update this policy to reflect legal or site changes. The date of the last update appears at the top of the document.