The purpose of this policy is to inform data subjects about the various processing operations carried out by this organization through the website that affect their personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.
1. Identification and contact details of the person responsible
XIROU XIAO, domiciled at C/ VIRGEN DE LLUC Nº 85 1º IZDA. (28027 MADRID) MADRID, with NIF Y2799053J, contact telephone number and email address xiaoxirou17@gmail.com
2. Purposes of the processing of your personal data
USERS/BROWSERS OF THE CONTROLLER'S WEBSITE.
We will process the personal data provided for:
- Respond to requests, complaints, and incidents submitted through our contact channels on the website.
- Understanding web browser behavior in order to detect potential cyberattacks on our website.
- Comply with the legal obligations that are directly applicable to us and regulate our activity.
- Protect and exercise our rights or respond to claims of any kind.
- If applicable, we may send commercial communications regarding the goods or services that comprise our activity and/or news or newsletters related to our sector. Your refusal to provide this authorization will prevent the entity from sending you information.
- If applicable, to manage your participation in contests and promotions held by the entity. Your refusal to provide us with authorization will result in your inability to participate.
- If applicable, send satisfaction and/or quality surveys. Your refusal to provide this authorization will make it impossible to evaluate the service provided.
3. Legal basis for processing
USERS/BROWSERS ON THE CONTROLLER'S WEBSITE.
- In the consent you have given us to process your data for the purposes indicated. Failure to provide your personal data will make it impossible for us to process your data for the purposes mentioned.
- To comply with our legal obligations. In this case, the data subject may not object to the processing of personal data.
- In our legitimate interest to protect our image, business, and history by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may, where appropriate, exercise the rights recognized in the "Rights" section of this policy.
4. Data retention periods or criteria
The personal data provided will be retained for the time necessary to fulfill the purposes for which it was initially collected.
Once the data is no longer necessary for the processing in question, it will be duly blocked and, where appropriate, made available to the competent Public Administrations and Organizations, Judges and Courts, or the Public Prosecutor's Office, during the statute of limitations for any actions that may arise from the relationship with the client and/or the retention periods provided for by law.
5. Automated decisions and profiling
The website does not make automated decisions or create profiles.
6. Recipients
During the period in which your personal data is processed, the organization may transfer your data to the following recipients:
- Judges and Courts.
- State Security Forces and Corps.
- Other competent authorities or public bodies, when the controller has a legal obligation to provide the personal data.
7. International data transfers
The organization does not carry out any international data transfers. If international data transfers subsequently become necessary, the level of protection in the destination country will be verified, and the safeguards required by law will be adopted.
8. Social Networks
In order to keep you informed about our activities and keep you up to date with our latest news, we inform you that Xirou Xiao has created a social media profile.
All users have the opportunity to join our social networks or groups. However, please note that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding Social Network. Therefore, we recommend that you carefully read their terms of use and privacy policies, and ensure that you configure your preferences regarding data processing.
Below, we provide links to the privacy policies for the various social networks we operate on, so you can access their privacy policies at any time and configure your profile to ensure your privacy:
9. Rights
Interested parties may request more information about the processing of their personal data and exercise their rights of access, rectification, and deletion at any time and free of charge. They may also request that the processing of their personal data be restricted, object to it, request its portability (whenever technically possible), or withdraw their consent and, where appropriate, not be subject to a decision based solely on automated processing, including profiling.
To do so, you may use the forms provided by the organization or send a letter to the postal address or email address provided in the header. For these purposes, we inform you that you may be asked for your ID or any other similar document to prove your identity, provided that this cannot be done through other, less intrusive means.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Control Authority (Spanish Data Protection Agency), through its website. www.aepd.es
In compliance with the provisions of article 21 of Law 34/2002 on information society services and electronic commerce, if you do not wish to receive further information about our services, you can unsubscribe by sending an email to the address xiaoxirou17@gmail.com, with the subject ““LOWS”.
10. Veracity of the data
The interested party guarantees that the information provided is true, accurate, complete, and up-to-date. The interested party undertakes to report any changes to the information provided through the channels provided for this purpose and indicated in point one of this policy. The interested party shall be liable for any direct or indirect damages or losses that may result from failure to comply with this obligation.
If the user provides data about third parties, they declare that they have the consent of the interested parties and undertake to provide them with the information contained in this clause, exempting the organization from any liability arising from failure to comply with this obligation.
11. Modifications/Updates
This Privacy Policy may be modified or updated based on established legal requirements or to adapt it to instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we advise users to periodically review our Privacy Policy.
If you have any questions about this policy, you can contact XIROU XIAO through the forms provided by the organization, or send a letter to the postal address or email address referenced in the heading.
Last revised September 18, 2025