Privacy Policy
Information about how we process your personal data and your rights under the GDPR.
This English version is provided for information purposes only. In the event of any discrepancy, the Spanish version shall prevail.
1. Data Controller
The controller of the personal data collected through this website and the SaaS application is:
- Identity
- PLANIXIA SOFTWARE S.L.
- Tax ID (NIF/CIF)
- B88774179
- Postal Address
- Calle Lugarico Viejo, NAVE G4, POLIGONO, REAL (EL). 04628, Antas (Almería). Spain
- Contact
- legal@planixia.io
2. What Personal Data Do We Collect?
Depending on how you interact with us (promotional website or within the SaaS), we may process the following categories of data:
- Contact and identification data: First name, last name, company name, email address and phone number (collected through contact or registration forms).
- Billing data: Billing address, bank or credit card details (processed securely through our payment gateway).
- Browsing data: IP address, device type, browser used and behaviour on the website (collected through cookies).
- SaaS usage data: Activity logs within the platform to ensure the security and proper operation of the service.
Important: As the SaaS provider, we act as Data Processor for the data that you (as a customer) enter about your own users or clients on the platform. That data is governed by the Data Processing Agreement (DPA).
3. Purpose and Legal Basis for Processing
We process your personal data on the basis of the following GDPR legal grounds:
| Purpose of Processing | Legal Basis |
|---|---|
| Managing your registration as a SaaS user and giving you access to the platform. | Performance of a contract (Terms of Service). |
| Providing, maintaining and improving the software's features, as well as providing technical support. | Performance of a contract and legitimate interest in improving the product. |
| Managing billing, collecting subscription payments and complying with tax obligations. | Legal obligation and performance of a contract. |
| Responding to enquiries received through the website's contact forms. | Consent of the data subject when submitting the form. |
| Sending newsletters or commercial communications about updates or news regarding our SaaS. | Express consent (or legitimate interest if you are already a customer, always allowing you to unsubscribe). |
4. Data Retention Period
Personal data will be kept only for as long as necessary to fulfil the purposes for which it was collected:
- SaaS user account data will be kept for as long as the contractual relationship remains in force and the user does not request its deletion.
- Billing and accounting data will be kept for the periods required by Spanish tax regulations.
- Website enquiry data will be kept until the user's request has been resolved.
5. Recipients and International Transfers
We do not sell or transfer your data to third parties. However, in order to provide the SaaS service, we use tools from external providers that act as sub-processors.
We make sure that all of them comply with the GDPR. Some of our main providers are:
- Hosting Provider: Laravel Cloud. Servers located within the European Union with the highest security measures.
- Payment Gateway: Stripe. Certified payment processors to handle payments securely.
- Email and Notifications: Mailgun (Sinch), used to send transactional emails and platform notifications. Data is processed on its servers located within the European Union (Frankfurt, Germany).
6. Your Rights
The GDPR gives you full control over your data. You can exercise the following rights by sending an email to legal@planixia.io, attaching a copy of a document proving your identity if necessary:
- Access: Know what data we hold about you and how we process it.
- Rectification: Correct any data that is inaccurate or incomplete.
- Erasure: Request the deletion of your data when it is no longer necessary (right to be forgotten).
- Objection: Object to the processing of your data for specific purposes (such as advertising).
- Restriction: Request that we temporarily suspend the processing of your data in the cases provided for by law.
- Portability: Receive your data in a structured, electronic format so you can transfer it to another provider.
If you believe we have not properly handled your rights, you are entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Security Measures
We implement appropriate technical and organisational security measures to prevent the loss, misuse, alteration or unauthorised access to your data. These include the use of SSL/TLS encryption protocols, restricted access control, multi-factor authentication and regular automated backups.