PRIVACY POLICY

Last updated: 17 July 2026

At Lenixas, we take the protection of personal data and the privacy of people who visit the Lenixas.com website, contact us or use our services very seriously.

This Privacy Policy clearly explains how we collect, use, store and protect personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, hereinafter the GDPR, Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, hereinafter the LOPDGDD, and all other applicable legislation.

1. Data controller

The controller responsible for the personal data collected through this website is:

Lenixas C/ Baleares 4 38670 Costa Adeje Santa Cruz de Tenerife Spain Email: info@lenixas.com Website: Lenixas.com

2. What personal data we process

Depending on how the user interacts with us, we may process the following categories of personal data:

• Identification data: first name, surname and, where necessary, identification document details.
• Contact details: email address, telephone number, postal address and information provided through forms, email, telephone or messaging applications.
• Professional or business data: company name, professional activity, position, website address and other information related to the requested project or service.
• Billing data: name or company name, tax address, NIF, NIE or CIF and any other information required to issue invoices and comply with legal and tax obligations.
• Project-related data: information, texts, files, images, access credentials and materials supplied by the client for the design, development, maintenance, optimisation, positioning or management of their website.
• Communication data: the content of messages, requests, enquiries and conversations held with us.
• Technical data: IP address, browser type, operating system, device used, language, date and time of access, pages visited and other technical data related to browsing.
• Preference data: information about services of interest, communication preferences and consent to receive commercial communications.

Lenixas Group does not intentionally request special categories of personal data, such as information concerning health, ideology, religion, racial or ethnic origin, sexual orientation or biometric data. Users should refrain from providing this type of information unless it is strictly necessary and there is a valid legal basis for processing it.

3. How we obtain personal data

We may obtain personal data through the following channels:

• Forms available on the website.
• Communications sent by email.
• Telephone conversations or messaging applications.
• Requests for quotations or information.
• The contracting and provision of our services.
• Information provided directly by clients, collaborators or suppliers.
• Cookies and similar technologies, where the user has given consent in cases where consent is required.

The data provided must be truthful, accurate, complete and up to date. The user is responsible for notifying us of any changes to their data and for not providing third-party data without the corresponding authorisation or legal basis.

4. Purposes of processing

Personal data may be processed for the following purposes:

• Handling enquiries and requests: responding to messages, questions, requests for information and quotation requests.
• Preparing quotations: analysing the user’s needs and preparing a commercial proposal relating to the requested services.
• Managing contracts: formalising, administering and carrying out the contractual relationship with clients.
• Providing our services: carrying out web design and development, maintenance, technical support, optimisation, SEO, content management, consultancy and other contracted digital services.
• Managing projects: organising tasks, communications, materials, access credentials, reviews and deliveries related to each project.
• Billing and accounting: issuing invoices, managing collections and payments and complying with tax, accounting and administrative obligations.
• Customer service: responding to incidents, support requests, modifications, complaints and post-contract enquiries.
• Website security: preventing unauthorised access, attacks, fraudulent use, spam and other activities that may compromise the security of the website or our systems.
• Analysis and improvement: obtaining statistical information about how the website is used, identifying errors and improving its operation, content, performance and user experience.
• Commercial communications: sending information about services, news, content or promotions only where consent or another valid legal basis exists.
• Legal compliance: complying with legal obligations, requests from public authorities and possible legal liabilities.

5. Legal basis for processing

The legal bases that legitimise the processing of personal data are as follows:

• Consent of the data subject: Article 6(1)(a) GDPR, where the user voluntarily submits a form, authorises the use of non-essential cookies, subscribes to commercial communications or gives consent for a specific purpose.
• Taking pre-contractual steps and performance of a contract: Article 6(1)(b) GDPR, where processing is necessary to prepare a quotation, manage a contract or provide the requested services.
• Compliance with legal obligations: Article 6(1)(c) GDPR, particularly in relation to tax, accounting, commercial and administrative matters.
• Legitimate interests: Article 6(1)(f) GDPR, to protect our systems, prevent fraud, manage complaints, maintain website security and improve our services, provided that the rights and freedoms of the data subject do not override those interests.

Where processing is based on consent, the user may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

6. Mandatory nature of data

Fields marked as mandatory in forms must be completed so that we can deal with the corresponding request. If the user does not provide the required data, we may be unable to respond to the enquiry, prepare a quotation, formalise a contract or provide the requested service.

7. Data retention

Personal data will be retained only for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by applicable legislation.

• Enquiries and requests for information: for the time necessary to respond and carry out the corresponding follow-up.
• Unaccepted quotations: for a reasonable period to handle possible subsequent enquiries, unless the data subject requests erasure earlier.
• Contractual relationships: for as long as the commercial relationship continues and for the applicable legal periods afterwards.
• Accounting and tax data: for the periods established by tax, accounting and commercial legislation.
• Commercial communications: until the user withdraws consent or objects to the processing.
• Technical and security data: for the time necessary to ensure security, investigate incidents and prevent misuse.

When the data is no longer required, it will be securely deleted or blocked and will remain available only for the purpose of addressing possible legal liabilities during the corresponding limitation periods.

8. Recipients of the data

Lenixas Group does not sell, rent or trade users’ personal data.

The data may be disclosed or made accessible to:

• Web hosting, server, email, backup and technology infrastructure providers.
• Software, management tool, technical support, security and maintenance providers.
• Web analytics providers, where their use has been properly configured and authorised.
• Tax, accounting and legal advisers and other professionals subject to confidentiality obligations.
• Banks and payment service providers where necessary to manage collections or payments.
• Public authorities, courts, tribunals, law enforcement agencies and other authorities where there is a legal obligation.
• Collaborators or suppliers involved in the performance of the contracted service where their participation is necessary.

Where a provider processes personal data on behalf of Lenixas Group, it will act as a data processor and will be subject to the corresponding contractual obligations regarding confidentiality, security and data protection.

9. International data transfers

Some technology providers used for the operation of the website, management of communications, storage of information or analysis of browsing activity may be located outside the European Economic Area or use servers located in third countries.

Where international data transfers take place, Lenixas Group will endeavour to ensure that they are carried out in accordance with the GDPR by using European Commission adequacy decisions, standard contractual clauses, the EU–US Data Privacy Framework where applicable or other legally recognised safeguards.

10. Commercial communications

Lenixas Group may send commercial communications about its services, news, content or promotions where the user has given consent or where another legal basis permits such communication.

The user may stop receiving these communications at any time by using the unsubscribe mechanism included in each message or by writing to info@lenixas.com.

11. Cookies and similar technologies

The website may use first-party and third-party cookies to ensure its operation, remember preferences, obtain browsing statistics and, where appropriate, provide content or communications tailored to users’ interests.

Necessary technical cookies may be installed without consent where they are essential for the operation of the website. Analytical, advertising or other cookies that require authorisation will be used only after the user has given valid consent through the cookie settings system.

The user may accept, reject or configure cookies through the panel provided on the website. More detailed information about the cookies used, their duration, purpose and providers can be found in the corresponding Cookie Policy.

12. Third-party links and services

This website may contain links to external pages, social networks, communication platforms or other services managed by third parties. When accessing such services, the user will be subject to their own terms and privacy policies.

Lenixas Group does not control the processing of data carried out by external websites and will not be responsible for their content, security measures or privacy practices. We recommend reviewing the privacy policy of each service before providing personal data.

13. Social media

Lenixas Group may maintain corporate profiles on social networks and digital platforms. The user’s interaction with these profiles will be subject both to this Privacy Policy and to the terms and policies established by the relevant platform.

Data made publicly available through comments, messages, reactions or other interactions may be processed to respond to the user, manage communications and maintain the professional or commercial relationship.

14. Data security

Lenixas Group adopts reasonable and appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access, disclosure or misuse.

Among other measures, the website uses encrypted connections through an SSL certificate, access controls, protection systems and procedures intended to preserve the confidentiality and integrity of the information.

However, no system connected to the Internet can guarantee absolute security. Users should also adopt appropriate measures to protect their devices, accounts, passwords and communications.

15. Rights of data subjects

Users may exercise the following rights free of charge:

• Right of access: to know whether we are processing their personal data and to obtain information about such processing.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure: to request the deletion of their data where it is no longer necessary or another legal ground applies.
• Right to object: to object to the processing of their data in certain circumstances.
• Right to restriction of processing: to request that processing be restricted in the cases provided for by law.
• Right to data portability: to receive the data provided in a structured, commonly used and machine-readable format, where applicable.
• Right to withdraw consent: to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.
• Right not to be subject to automated decisions: not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects the user.

To exercise any of these rights, the data subject may send a request to:

Lenixas C/ Baleares 4 38670 Costa Adeje Santa Cruz de Tenerife Spain

Or by email to: info@lenixas.com

The request must specify the right the user wishes to exercise and contain sufficient information to verify the identity of the applicant. Where there are reasonable doubts about identity, we may request additional information solely to confirm that the request comes from the data subject.

16. Complaints to the supervisory authority

If the user considers that the processing of their personal data infringes applicable legislation or that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency through the channels available on its electronic platform.

17. Children’s data

The services offered by Lenixas Group are primarily intended for adults, professionals, self-employed individuals and companies.

We do not knowingly collect personal data from children under the age of 14 without the authorisation of their parents or legal representatives. If we discover that data relating to a child has been received without the corresponding authorisation, we will take the necessary steps to delete it.

18. Automated decision-making and profiling

Lenixas Group does not make decisions that produce legal effects or significantly affect the user based solely on automated processing of their personal data. If this situation changes, the data subject will be informed in advance in accordance with applicable legislation.

19. Confidentiality

Lenixas Group undertakes to process personal data confidentially and to ensure that all persons, collaborators and suppliers who have access to it are subject to the corresponding obligations of confidentiality, security and data protection.

20. Amendments to the Privacy Policy

Lenixas Group may update this Privacy Policy where necessary to adapt it to legislative changes, supervisory authority criteria, technical modifications, new services or changes in the way we process personal data.

The current version will be available on this website and will state the date on which it was last updated. We recommend reviewing this page periodically to become aware of any changes.

21. Contact

For any questions relating to this Privacy Policy or the processing of personal data, you can contact us at:

Lenixas C/ Baleares 4 38670 Costa Adeje Santa Cruz de Tenerife Spain Email: info@lenixas.com