Privacy

How the contact form works

The contact form is live. When you submit it, the data is sent to a service of our own, on the same hosting as this site, which stores it in a database on that hosting and sends an email notification to the commercial team. To limit abuse, the service temporarily stores hashed fingerprints of the IP address and of the email address, not their values. Emails sent to commercial@xiriluz.com are received and handled manually, including for exercising rights.

The site uses no cookies, external analytics tools or third-party trackers; any interface animation or interaction remains local and ephemeral, with no personal data, no network and no storage, without making claims about browser configuration or any technical hosting logs.

Data and purpose

When you submit the form, the data processed is name, company, email and message, plus the necessary technical markers (date, origin, language), for the sole purpose of handling the enquiry. Email and message are required to reply; name and company are optional.

The enquiry is stored in a database and an email notification goes to the commercial team, who reply personally; no automatic acknowledgement, no public panel and no public export.

News and commercial offers from Tualuce (Xirivella de Iluminación, S.L.) by email require a separate, express and optional choice: “I would like to receive news and commercial offers from Tualuce (Xirivella de Iluminación, S.L.) by email.” Without that choice no commercial message is sent. Your choice is stored with the enquiry and, if you tick the box, so are its date, the version and the exact wording of the box.

Recipients, access and private export

The recipients are the commercial team and strictly necessary technical providers, with access restricted to authorised persons only.

There is no public disclosure; any extraction remains a private internal CSV export, handled securely, together with its copies and backups.

Controller, legal bases, retention and rights

The data controller is Xirivella de Iluminación, S.L. (details in the legal notice). The enquiry is handled in order to reply: pre-contractual measures at the request of the person who will be party to the contract, or legitimate interest for the professional exchange with a person representing a company. Commercial messages rely solely on express consent, withdrawable simply for the future.

Three operational retention criteria apply, chosen by the controller and not universal statutory deadlines: the intake copy is purged automatically 24 months from receipt, calculated as calendar months; enquiries without a contract are kept 24 months after closure in the controller’s commercial system; the authorised commercial list is kept 3 years after the last voluntary commercial interaction, with possible express renewal. Being on the commercial list does not justify keeping the full message beyond the enquiry need: only minimal proof of the choice (address, date, version, text) is kept with the list. Exporting a CSV transfers no controllership and neither deletes nor resets these periods; purging the intake database does not delete mailbox copies, exported CSVs or backups, which follow their own procedure with designated owners.

Rights of access, rectification, erasure, restriction, objection and portability where applicable: write to commercial@xiriluz.com. Reply within one month under Article 12 of the GDPR, with a reasoned extension where needed; proof of identity is requested only where there is reasonable doubt. Complaints go to the AEPD in Spain; people in France may also contact the CNIL.

Hosting, cookies and the Tualuce service

This site, the enquiry database and the technical email used for notifications are hosted by Raiola Networks S.L. (see the legal notice). Hosting processes the IP address to provide and secure the service; where the controller operates its own systems, this processing relies on legitimate interest. Technical logs are kept under necessary diagnostic and security criteria, with no specific period stated here. Raiola publishes its privacy policy at https://raiolanetworks.com/politica-de-privacidad/ (external site). The site uses no cookies; it uses self-hosted fonts and media with no external analytics active. Any future audience measurement would be subject to the required consent choices.

The outbound link to Tualuce leads to a separate service: read its own policy for its data practices.