Privacy Policy

1. Data Controller & Accountability

The entity responsible for your personal data is:

• Company Name: XCG Technical Solutions
• Registered Address: C Dr Fleming 33, Lleida, 2-2, 25001, Spain
• Contact Email: xavicarreragimbert@gmail.com

2. Personal Data We Collect

We only collect data that you voluntarily provide to us. This typically includes:

• Identity Data: Name, job title, and company name.
• Contact Data: Professional email address and phone number.
• Inquiry Data: Details regarding your project requirements, budget, and timeline.

3. Legal Basis and Purpose of Use

We process your data to respond to inquiries and offer our professional services.

• EU (GDPR): We rely on Legitimate Interests (Art. 6(1)(f)) to respond to business inquiries and Contractual Necessity to fulfill service agreements.
• Canada (PIPEDA): By submitting a contact form, you provide implied consent for us to use that information to respond to your specific request.
• USA: Use is limited to the business purpose of providing requested software services.

4. Data Retention

We retain your data only for as long as necessary:

• Inquiries: If no business relationship is established, data is deleted or anonymized within 24 months.
• Clients: Data is retained for the duration of the contract plus statutory periods for tax/legal compliance (typically 5–10 years).

5. International Data Transfers

As we use global service providers (like Vercel for hosting), your data may be transferred to and stored in the United States.

• For EU Residents: We use Standard Contractual Clauses (SCCs) to ensure data protection.
• For Canadian/US Residents: By using our services, you acknowledge that your personal information may be processed in the EU or the US, where privacy laws may differ from your jurisdiction.

6. Your Rights

Depending on your location, you have specific rights:

European Union (GDPR)

• Rights of Access, Rectification, Erasure, and Portability.
• Right to Object to processing and right to withdraw consent.

Canada (PIPEDA)

• Right to access the personal information we hold about you and challenge its accuracy.

United States (CCPA/State Laws)

• Right to Know: What personal information we collect and how it is used.
• Right to Delete: Request deletion of your data.
• Right to Opt-Out: We do not "sell" or "share" personal information for cross-contextual behavioral advertising as defined by the CCPA.

To exercise any rights, contact xavicarreragimbert@gmail.com.

7. Children's Privacy

Our services are not directed to individuals under the age of 16 (EU) or 13 (US/Canada). We do not knowingly collect personal data from children.

8. Data Security

We implement SSL encryption and strict access controls to protect your data from unauthorized access or disclosure.

9. Regulatory Complaints

• EU/Spain: You may lodge a complaint with the AEPD (Agencia Española de Protección de Datos).
• Canada: You may contact the Office of the Privacy Commissioner of Canada.

10. Contact Us

• XCG Technical Solutions
• C Dr Fleming 33, Lleida, 2-2, 25001, Spain
• Email: xavicarreragimbert@gmail.com