Basic information
- Party responsible for the website xoa.dev and the ruas service (ruas.xoa.dev): XOA Desarrollo, S.L.
- Contact: hello@xoa.dev
- Purposes of processing: to answer the enquiries received by email, and to answer the queries made to the ruas service.
- Data collected: the data you provide to us by email, the IP address that the website's hosting receives when you visit it and, in ruas, what it is asked (see "The ruas service").
Data controller
- Controller: XOA Desarrollo, S.L.
- Tax identification number (NIF): B70581236
- Email: hello@xoa.dev
- Registered office: Calle José Pascual López Cortón 4 6ºA, 15008 A Coruña (Spain)
- Legal representative, also for GDPR purposes: Javier Freire Riobó
Cookie policy
This website does not use cookies or analytics tools.
Use of the website
This is a corporate website. By browsing it, the user undertakes to use the contents of the website diligently, correctly and lawfully.
We are not responsible for any misuse that may be made of our website and its contents. We use our best efforts to keep our website up to date and to apply the necessary security measures.
Privacy policy
At XOA Desarrollo we process the data of our clients and contacts in strict compliance with the law. The law requires us to inform you of what we are going to do with the data, and to do so in a clear and transparent way.
We comply with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
We apply the necessary security measures to prevent the alteration, loss, processing of or unauthorised access to personal data, taking into account at all times the state of the art. Nevertheless, the user must be aware that security measures on the Internet are not impregnable. In any case, we respect the wishes of our contacts in the processing of their information.
The user is responsible for the accuracy of the information they provide to us and for keeping it up to date. Likewise, they will be responsible for any damage or harm that may arise as a result of the data provided being false, inaccurate or out of date.
Purpose
This website has no forms. The only contact channel is the email address hello@xoa.dev, and the data you provide to us through it will be used only to answer the corresponding enquiry.
With regard to our clients, the data will only be used to provide our services and to inform them of news and other content related to our field that may be of interest to our clients, as provided in article 21.2 of the LSSI (Spanish Law 34/2002 on Information Society Services and Electronic Commerce).
Legal basis
The data you provide to us by email is processed on the basis of the consent you give us by writing to us, and we will not use it for any other purpose.
The processing of the data of our clients and suppliers is based on the performance of the contractual relationship between us.
Retention periods
We will keep the data of the enquiries and contacts we receive through the website for a maximum of six months, since we will only use it to answer the enquiry.
If we receive a CV, we will treat it with care and keep it for a maximum of one year.
And for our clients and suppliers, we will keep the data for as long as the business relationship lasts and, afterwards, for the time strictly necessary to comply with our legal obligations.
Recipients
We will not disclose personal data to third parties, except to comply with the legal obligations linked to our provision of services (administrative, fiscal and tax, judicial obligations, etc.), the recipients therefore being the public administrations, courts and official bodies to which we must disclose your data in compliance with those obligations, as well as the financial institutions for the payment of suppliers and collaborators.
Apart from those cases, we will not transfer personal data to third parties.
This website is hosted on Firebase Hosting, a Google service which, as data processor, receives the IP address of whoever visits it in order to serve them the pages. We do not use it for any other purpose.
The ruas service
ruas (ruas.xoa.dev) is a geocoding service: it receives an address or coordinates and answers where they are. It can be asked from its test page or from a client's application, with its key.
- Data: the address or coordinates queried, which may be a person's; the IP address the query comes from; and, if there is one, the client's key.
- Purpose: to answer the query, and to limit how many are made per IP address and per key so that the service cannot be overloaded.
- Legal basis: our legitimate interest in providing the service and protecting it from abuse and, for clients with a key, the contractual relationship between us.
- Retention: the service stores neither the queries nor the IP addresses. The IP address is held in memory only for the minute the query limit lasts, and the hosting's request log, which would include what was queried, is turned off. Each query leaves only a line with the client, the result and how long it took, without the address queried or the IP address, kept for 30 days to measure usage and detect failures. The hosting is Google Cloud Run, in Madrid, as data processor.
- Where ruas is queried through a company's application, that company decides which addresses it sends us: in that case we act as that company's data processor.
- The map on the test page is served by Spain's National Geographic Institute (IGN): the browser asks it for the images directly, so the IGN receives the IP address of whoever views it, under its own privacy policy.
Users' rights and contact for any matter related to their personal data
The user may exercise their rights of access, rectification and erasure of their data by email at hello@xoa.dev, and may also exercise their rights to object, to restriction and to portability.
Complaints
The law requires us to inform you of the rights you have as a citizen if we do not comply with the law. The Spanish Data Protection Agency (Agencia Española de Protección de Datos) accepts complaints from people who consider that their data protection rights have been infringed. You can find more information at www.aepd.es.
Nevertheless, we are scrupulous about complying with the law and any incident can be resolved. Get in touch with us at hello@xoa.dev.