1. Controller and scope
Advixy, S.L., tax ID B05495445, with its main contact address at Av. Santa Cruz 76, 38500 Santa Cruz de Tenerife, is the controller for the processing described here. This policy applies specifically to os.advixy.com and its public, customer and back-office services. Privacy contact: info@advixy.com.
2. Data we process
We process identification and contact data, professional, business, tax, employment and operational information provided through assessments, requests, proposals, contracting, the customer area and document uploads. We also process technical evidence needed for authentication, security, consent, traceability, payments and service delivery. Public assessment forms do not ask for passwords or full payment-card data.
3. Purposes and legal bases
- Requests, assessments and proposals: to analyse the request, prepare or review an offer, assign it to the appropriate team and take requested pre-contractual steps.
- Professional and contractual relationship: to enter into, provide, administer and evidence the agreed services and payments.
- Legal compliance: to meet tax, accounting, employment, anti-money-laundering and other applicable duties.
- Security and service continuity: to prevent abuse, authenticate access, keep audit evidence and protect systems, on the basis of legal duties and legitimate interests.
- Marketing communications: only where separate, optional and withdrawable consent has been given.
4. Source and required fields
Data normally comes from the person concerned, the company or representative using the service, authorised staff and the providers involved in contracting or payment. Required fields are identified in each flow. If you provide data about another person, you must be authorised to do so and give them the relevant information.
5. Recipients and processors
Advixy does not sell personal data. Access may be given, under the corresponding safeguards, to providers of hosting, business email and communications, document storage, electronic signatures, payments, security, support, analytics and professional management. Data may also be disclosed to public authorities or professional collaborators when required by law or necessary to provide the requested service.
6. International transfers
If a provider processes data outside the European Economic Area, Advixy will use an adequacy decision, approved contractual clauses or another mechanism permitted by data-protection law, together with any supplementary safeguards required for the risk.
7. Retention
Company assessment drafts are kept for 30 days after the latest activity. Requests that do not become customers are generally kept for 12 months. Customer records are kept for the duration of the professional relationship and the subsequent legal limitation, accounting and defence periods. Security and consent evidence is retained only for the period needed to demonstrate or protect the relevant operation.
8. Rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw any consent without affecting prior lawful processing, by writing to info@advixy.com. You may also lodge a complaint with the Spanish Data Protection Agency.
9. Rules and human review
AdvixyOS may apply internal rules to organise requests, services, risks and work queues. These rules do not by themselves issue a professional diagnosis, approve a customer, conclude a contract or make a decision with legal or similarly significant effects. Relevant decisions require human review.
10. Security and minimisation
We use access controls, separation of environments, encrypted communications, traceability and minimisation measures appropriate to the risk. Do not enter passwords, recovery phrases, banking credentials, full card data or special-category data in free-text fields unless a specifically protected channel requests it.
11. Cookies and updates
The use of cookies and measurement technologies on this domain is explained in the AdvixyOS Cookie Policy. Material changes to this policy will be published here with the applicable version date.