1. Controller and scope
Advixy, S.L., tax ID B05495445, with its main contact address at Av. Santa Cruz 76, 38500 Santa Cruz de Tenerife, is the controller for the processing described here. This policy applies specifically to os.advixy.com and its public, customer and back-office services. Privacy contact: info@advixy.com.
2. Data we process
We process identification and contact data, professional, business, tax, employment and operational information provided through assessments, requests, proposals, contracting, the customer area and document uploads. Before contact details are requested, the self-employed assessment keeps a random session identifier and reduced answers: free text is replaced with an indication that it was supplied, dates are reduced to the month, and the diagnostic record does not store the IP address or browser details. We also process technical evidence needed for authentication, security, consent, traceability, payments and service delivery. Public assessment forms do not ask for passwords or full payment-card data.
3. Purposes and legal bases
- Requests, assessments and proposals: to analyse the request, prepare or review an offer, assign it to the appropriate team and take requested pre-contractual steps.
- Assessment-funnel measurement: to understand abandonment, completion, recommendation, review and purchase conversion and improve the public assessment, using minimised pseudonymous data on the basis of Advixy's legitimate interest. Diagnostic answers are not sent to third-party advertising services. Optional advertising conversion measurement is described separately below.
- Professional and contractual relationship: to enter into, provide, administer and evidence the agreed services and payments.
- Legal compliance: to meet tax, accounting, employment, anti-money-laundering and other applicable duties.
- Security and service continuity: to prevent abuse, authenticate access, keep audit evidence and protect systems, on the basis of legal duties and legitimate interests.
- Operational reminders and marketing: only where the corresponding separate, optional and withdrawable choice has been made.
4. Source and required fields
Data normally comes from the person concerned, the company or representative using the service, authorised staff and the providers involved in contracting or payment. Required fields are identified in each flow. If you provide data about another person, you must be authorised to do so and give them the relevant information.
5. Recipients and processors
Advixy does not sell personal data. Access may be given, under the corresponding safeguards, to providers of hosting, business email and communications, document storage, electronic signatures, payments, security, support, analytics and professional management. Data may also be disclosed to public authorities or professional collaborators when required by law or necessary to provide the requested service.
6. International transfers
If a provider processes data outside the European Economic Area, Advixy will use an adequacy decision, approved contractual clauses or another mechanism permitted by data-protection law, together with any supplementary safeguards required for the risk.
7. Retention
Minimised self-employed assessment sessions are kept for up to 180 days after the latest activity. The temporary technical link used to record a review, purchase or checkout expiry is removed once that outcome is final. Company assessment drafts are kept for 30 days after the latest activity. Requests that do not become customers are generally kept for 12 months. Customer records are kept for the duration of the professional relationship and the subsequent legal limitation, accounting and defence periods. Security and consent evidence is retained only for the period needed to demonstrate or protect the relevant operation.
8. Rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw any consent without affecting prior lawful processing, by writing to info@advixy.com. You may also lodge a complaint with the Spanish Data Protection Agency.
9. Rules and human review
AdvixyOS may apply internal rules to organise requests, services, risks and work queues. These rules do not by themselves issue a professional diagnosis, approve a customer, conclude a contract or make a decision with legal or similarly significant effects. Relevant decisions require human review.
10. Security and minimisation
We use access controls, separation of environments, encrypted communications, traceability and minimisation measures appropriate to the risk. Do not enter passwords, recovery phrases, banking credentials, full card data or special-category data in free-text fields unless a specifically protected channel requests it.
11. Cookies and updates
The use of cookies and measurement technologies on this domain is explained in the AdvixyOS Cookie Policy. Material changes to this policy will be published here with the applicable version date.
Meta advertising measurement
Only with your Marketing consent, AdvixyOS sends Meta public-page visits, form starts and completions, proposal creation and confirmed payments. This is used to measure and improve advertising campaigns. This choice is separate from consent to receive marketing communications.
Shared data includes event type and time, a public address without private parameters, measurement identifiers, IP address and technical browser details. Meta click identifiers are included when available; purchases include the amount actually paid and currency. Form answers, names, emails, tax, bank or card data and private access links are not shared.
The optional __Host-advixy_meta cookie keeps a random measurement identifier on os.advixy.com for up to 180 days. The __Host-advixy_meta_consent_v1 cookie records your specific Marketing choice for Meta for the same period. Withdrawing Marketing disables measurement and revokes the associated attribution; pending events stop being sent. Expired or revoked attribution identifiers are removed from the sending process. Withdrawal does not automatically delete events already sent or already in transit to Meta.
LinkedIn Insight Tag
If enabled, the LinkedIn Insight Tag loads only with your Marketing consent on expressly allowed public pages. It measures campaign-attributed visits; it is not installed on private forms, proposals, sign-in, payments or other private or tokenised pages.
LinkedIn may receive the public address visited and, where allowed, limited campaign UTM parameters and the li_fat_id click identifier, together with technical browser data. AdvixyOS does not send answers, names, emails, tax information, payments, tokens or private URLs.
The optional __Host-advixy_linkedin_consent_v1 marker records the specific LinkedIn choice on os.advixy.com for up to 180 days. Withdrawing Marketing clears the marker and, if the tag had loaded, reloads the page to stop it. Withdrawal cannot retrieve information already transmitted to LinkedIn.