Privacy Policy

‍1. Data Controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the controller of your personal data is:

2. Data We Collect and Purpose of Processing

2.1. Business relationships (customers and potential customers)

We process the personal data of our business relationships to deliver our products and services appropriately and effectively. Specifically, to:

• Manage the contracting and provision of Vixiees SaaS services.

• Billing and payment management.

• Customer service and technical support.

• Sending communications about service status, updates, and product news.

• Compliance with legal obligations.

Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

2.2. Website visitors

When you visit our website (https://www.vixiees.com), we automatically collect certain non-identifiable technical information for the management and optimization of the site:

• IP address (anonymized).

• Data about the browser and device used.

• Pages visited and browsing time.

• Referrer source data.

Legal basis: legitimate interest (Art. 6.1.f GDPR) and consent for non-essential cookies (Art. 6.1.a GDPR). Please consult our Cookie Policy for more details.

2.3. Contact forms and Strategic Meeting requests

If you provide us with your data through forms on the web or associated landing pages (name, email, phone, company), we process them to:

• Address your inquiry or request.

• Manage the Strategic Meeting schedule.

• Send you information about our services if you have given your consent.

Legal basis: consent (Art. 6.1.a GDPR) and pre-contractual legitimate interest (Art. 6.1.b GDPR).

2.4. Newsletter and commercial communications

If you subscribe to our communications, we process your email address and name to:

• Send you information about our products, services, promotions, and valuable content.

Legal basis: consent (Art. 6.1.a GDPR). You can withdraw your consent at any time via the unsubscribe link included in each communication or by writing to info@vixiees.com.

2.5. Use of the Vixiees platform (data of our customers' customers)

In the context of providing the SaaS service, Vixiees acts as the Data Processor of the data that CUSTOMERS (Data Controllers) input into the platform. This processing is regulated by the Data Processing Agreement (DPA) included as Annex 2 in the Terms and Conditions.

3. Artificial Intelligence and Automated Processing

The Vixiees platform incorporates Artificial Intelligence (AI) features for lead qualification, call transcription, sentiment analysis, and summary generation.

• Vixiees does not use CUSTOMERS' data, recordings, transcriptions, or content to train AI models, whether proprietary or third-party.

• AI functionalities are provided in compliance with Regulation (EU) 2024/1689 (Artificial Intelligence Act).

• AI processing is carried out through providers located in the European Union (see section 7 regarding sub-processors).

4. Data Retention Periods

5. Your Rights

Under the GDPR, you can exercise the following rights:

• Access: know what personal data we process about you.

• Rectification: correct inaccurate or incomplete data.

• Erasure ("right to be forgotten"): request the deletion of your data when they are no longer necessary.

• Object: object to the processing of your data for specific purposes.

• Restriction of processing: request the restriction of processing in certain circumstances.

• Portability: receive your data in a structured, commonly used format.

• Not to be subject to individualized automated decisions with significant legal effects.

How to exercise your rights: by written request to dpo@vixiees.com, or by post to C/ Lepant 270, 08013 Barcelona (Spain), accompanied by a copy of your identity document.

We will respond to your request within a maximum period of 1 month (extendable to 3 months in complex cases, with prior notification).

If you believe your rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

6. International Data Transfers

Your data will not be transmitted to recipients in countries outside the European Economic Area (EEA), unless it is necessary for the provision of the service and appropriate safeguards are adopted in accordance with the GDPR.

All servers used by Vixiees for data processing are located within the territory of the European Union.

7. Sub-processors and Data Recipients

Vixiees may share your data with the following providers acting as sub-processors, all of whom are located in the EU and subject to equivalent contractual obligations:

We may also provide your data to competent public authorities when required by applicable regulations.

The use and transfer of information received through Google APIs will comply with the Google User Data Policy, including the Limited Use requirements.

8. Security Measures

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or accidental disclosure, in accordance with Article 32 of the GDPR.

Among others, we use:

• Encryption in transit (TLS/HTTPS) and at rest.

• Role-based access control and multi-factor authentication.

• Regular security audits and CASA Tier 2 certification (required by Google).

• Automatic backups every 24 hours.

• Security breach notification procedures to the AEPD (within a maximum of 72 hours from when we become aware of them).

9. Cookies

We use first-party and third-party cookies on our website. For detailed information, please consult our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. Vixiees is not responsible for the privacy practices of such third parties. We recommend that you consult their privacy policies before providing your personal data.

11. Amendments to the Privacy Policy

Vixiees reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential, or business practice changes. Any significant modification will be notified through our website or by email.

The "last updated" date indicates when the most recent revision took place.

12. Contact

For any inquiries related to the processing of your personal data:

• General Email: info@vixiees.com

• Data Protection Officer: dpo@vixiees.com

• Postal Address: Vixiees Tech-Hub, S.L., C/ Lepant 270, 08013 Barcelona (Spain)

© 2026 Vixiees Tech-Hub, S.L. All rights reserved.