1. Data controller
Xperiencia Virtual, contact email info@xperienciavirtual.es, is the controller of the personal data collected on this site.
2. Data we collect
- Contact form: name, email, phone number, area of interest and message.
- Technical data: anonymised IP address, browser type and pages visited, through analytics cookies (only if you have accepted them).
3. Purpose and lawful basis
- To deal with your enquiry and reply to your message — basis: pre-contractual steps and consent (art. 6.1.b and 6.1.a GDPR).
- Anonymous statistical analysis of site usage — lawful basis: consent (art. 6.1.a GDPR).
- To meet legal obligations — basis: art. 6.1.c GDPR.
4. Retention period
We keep your data for as long as needed to deal with your enquiry and, after that, for the periods required by law. Analytics data is kept in aggregate form for a maximum of 26 months.
5. Recipients
We do not pass your data to third parties except where legally required. We may use processors (hosting providers, transactional email, form services) that comply with the GDPR and with whom we hold the corresponding contract.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to us at info@xperienciavirtual.es. You may also lodge a complaint with the the Spanish Data Protection Agency.
7. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration or loss.
8. Changes to this policy
We may update this policy to reflect changes in the law. Any change will be published on this page.
Last updated: 8 May 2026.