Xtampa is committed to protecting the personal data of users. This privacy policy is governed by Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and other applicable Spanish and European regulations.

1. Data Controller

Controller: Xtampa (owner: Ángel López Romero)
Tax ID (NIF): ES48430998J
Address: C/ Cerámica Galindo, 2, 30820 Alcantarilla, Murcia (Spain)
Email: contacto@xtampa.es
Phone: 868 103 781
Mobile/WhatsApp: 688 908 082

2. Data Protection Officer (DPO)

Xtampa has not appointed a DPO, since this is not mandatory for the processing activities carried out. You can contact the controller at contacto@xtampa.es for any privacy-related questions.

3. Personal data we collect

We collect only the data necessary to manage your requests across the Xtampa web ecosystem (legal.xtampa.com, comercial.xtampa.com, ofertas.xtampa.com and other subdomains):

Identifying and contact data: name, email, phone number and company.
Request data: product, quantity, message, budget details, order or incident information and any other information you include in contact, quote, order, incident, quick enquiry or offer configuration forms.
Browsing data: IP address, browser type, device and language, only through essential cookies and, if you consent, analytics cookies or similar technologies.

We do not process special categories of personal data (health, religion, political opinions, etc.).

4. Purpose and legal basis

Manage requests and budgets: The legal basis is the execution of pre-contractual measures at the request of the user (art. 6.1.b GDPR) and, where applicable, consent.
Respond to enquiries: The legal basis is the consent given by the user (art. 6.1.a GDPR) and the legitimate interest in responding to the enquiry.
Manage orders and invoicing: The legal basis is contract execution (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR).
Send commercial information: Only if you have expressly consented. The legal basis is consent (art. 6.1.a GDPR). You can withdraw consent at any time.
Website analytics: The legal basis is consent (art. 6.1.a GDPR) if you accept analytics cookies. You can change your consent at any time.

5. Recipients and transfers

Your personal data will not be sold, rented or transferred to third parties, except in the following cases:

Service providers (hosting, email, CRM, payment gateways) who act as processors and are contractually bound to confidentiality and security obligations.
When required by law or by a competent authority.
For analytics, if you consent, data may be processed by Google or similar providers, possibly involving international transfers with appropriate safeguards (e.g. Standard Contractual Clauses).

6. Retention period

Personal data will be kept for as long as necessary to manage the request and, subsequently, for the periods legally established for the prescription of possible liabilities (6 years for tax and commercial matters). If you request deletion, we will keep the data blocked for the required legal periods.

7. Your rights

You can exercise the following rights by writing to contacto@xtampa.es:

Right of access to your personal data.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to restriction of processing.
Right to object to processing.
Right to data portability.
Right to withdraw consent at any time.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing does not comply with the applicable regulations.

8. Security measures

Xtampa has implemented appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data. These measures include encryption in transit (SSL/TLS), access control and regular backups.

9. Changes to this policy

Xtampa may update this privacy policy to adapt it to legislative changes or improvements in our services. We recommend that you review it periodically. The date of the last update is indicated in the header of this page.