Privacy policy

At Oksigenia SL we take the privacy of your data very seriously. In compliance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE), we inform you about how we process your personal data.

1. Who is the data controller?

• Identity: Oksigenia SL
• Tax ID (CIF): B24911489
• D-U-N-S® Number: 473104228
• Postal address: c/o Lafuente Asesores – Calle Heraclio Sánchez 17 – 38204 – La Laguna – S/C de Tenerife, Spain
• Registry: Mercantile Registry of Santa Cruz de Tenerife, Sheet TF-76081
• Contact & privacy email: privacidad@oksigenia.com
• Website: https://xpresiva.com

The postal address corresponds to Lafuente Asesores, an external firm authorised by Oksigenia S.L. to receive communications; it is not part of Oksigenia S.L. The registered office at the Mercantile Registry is kept in accordance with its deed of incorporation.

2. For what purpose do we process your data?

This website is informational and commercial regarding the Xpresiva product. It does not collect personal data through automated forms. When an interested party contacts us (for example, by email) or purchases the product, we process their data for the following purposes:

• Commercial and administrative management: managing the contractual or pre-contractual relationship, providing the requested service or licence, and handling invoicing and accounting/tax matters.
• Communications: keeping in touch regarding matters arising from our professional relationship or the purchased licence.
• Handling enquiries: resolving questions raised through our contact channels.

Important: Oksigenia SL does not use your data to send mass marketing newsletters, nor does it transfer data to third parties for commercial purposes. Our communications are occasional and related to our activity.

3. How long do we keep your data?

• For as long as the commercial or professional relationship is maintained.
• For the years required to comply with legal obligations (for example, 4 years for tax rules or 6 years for commercial records).
• Until the interested party requests its deletion (provided there is no legal obligation to retain it).

4. What is the legal basis for processing?

• Performance of a contract: to provide the contracted service or licence.
• Legal obligation: to comply with tax, commercial and administrative rules.
• Legitimate interest: to manage professional contacts and respond to enquiries.
• Consent: where you voluntarily provide us with your data for a specific enquiry.

5. To whom will your data be disclosed?

We do not sell or share your data with third parties for commercial or advertising purposes. To run this website and our activity we rely on providers acting as Data Processors, under contract and confidentiality: our web infrastructure and security provider (Cloudflare, Inc.) and, for administrative matters, banks and financial institutions and our accounting/advisory firms. Public authorities may also access your data where legally required.

International transfers: some of these providers may process data outside the European Economic Area (for example, Cloudflare, based in the USA). In such cases, these transfers are covered by the appropriate safeguards under the GDPR (Standard Contractual Clauses or other valid mechanisms). As we enable payment and email features, we will update this policy to reflect the relevant providers.

6. What are your rights?

Anyone has the right to obtain confirmation as to whether Oksigenia SL is processing personal data concerning them. Interested parties have the right to:

• Access their personal data.
• Request the rectification of inaccurate data.
• Request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Request the restriction of processing.
• Object to the processing of their data.
• Request data portability.

To exercise these rights, you can email privacidad@oksigenia.com or write to our postal address, enclosing a copy of your ID. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with current regulations.

7. Data security

Oksigenia SL has adopted the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, or unauthorised processing or access, given the state of technology, the nature of the data stored and the risks to which it is exposed.