Privacy policy

  • 1. Information to the user

    Xulamask S.L. As responsible for treatment, it informs you that, according to the provisions of Regulation (EU) 2016/679, of April 27, (RGPD) and in L.O. 3/2018, December 5, Data Protection and Digital Rights Guarantee (LOPD GDD), we will discuss your data as reflected in this Privacy Policy.
    In this privacy policy we describe how we collect your personal data and why we collect them, what we do with them, with whom we share them, how we protect them and their options regarding the treatment of their personal data.
    This policy applies to the treatment of your personal data collected by the company for the provision of its services. If you accept the measures of this policy, you agree that we treat your personal data as defined in this policy.
    2. Contact
    Social denomination: Xulamask S.L.
    Trade Name: XULA
    CIF: B01947001.
    Address: Balanço I Botter 22, Atico 08302 (Mataró) Barcelona

    3. Key principles
    We have always been committed to providing our services with the highest quality grade, which includes treating your data safely and transparency. Our principles are:
  • Legality: We will only collect your personal data for specific, explicit and legitimate purposes.
  • Minimization of data: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which they have been collected.
  • Limitation of the purpose: We will only collect your personal data for the declared purposes and only according to your wishes.
  • Accuracy: We will maintain your personal data exact and updated.
  • Data security: We apply appropriate technical and organizational measures and proportional to risks to ensure that your data does not suffer damage, such as disclosure or unauthorized access, accidental or illicit destruction or accidental loss or alteration and any other form of Illicit treatment.
  • Access and rectification: We have means for accessing or rectifying your data when you consider it opportune.
  • Conservation: We keep your personal data in a legal and appropriate manner and only while it is necessary for the purposes for which they have collected.
  • International transfers: when the case is given that your data will be transferred outside the EU / EEE will be properly protected.
  • Third Parties: Access and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and adequate contractual guarantees.
  • Direct Marketing and Cookies: We comply with the applicable legislation on advertising and cookies.
  • 4. Collection and treatment of your personal data
    The types of data that can be requested and treated are:
  • Identifying data.
  • We also automatically collect data on your visit to our website as described in the cookies policy.
    Whenever we request your personal data, we will tell you clearly what personal data we collect and for what purpose. In general, we collect and treat your personal data for the purpose of:
  • Provide information, services, products, relevant information and news in the sector.
  • Sending communications
  • 5. Legitimacy
    In accordance with the applicable data protection regulations, your personal data may be treated as long as:
  • He has given us his consent to the effects of treatment. Of course you can withdraw your consent at any time.
  • By legal requirement.
  • Because there is a legitimate interest that is not undermined by its privacy rights, such as the sending of commercial information well by subscription to our Newsletter or its customer status.
  • Because it is necessary for the provision of one of our services through contractual relationship between you and us.
  • 6. Personal data communication
    The data can be communicated to Companies related to Xulamask S.L. For the provision of the various services as a treatment managers. The company will not make any assignment, except for legal obligation.
    7. Your rights
    In relation to the collection and treatment of your personal data, you can contact us at any time for:
  • Access your personal data and any other information indicated in article 15.1 of the RGPD.
  • Rectify your personal data that is inaccurate or are incomplete in accordance with Article 16 of the RGPD.
  • Delete your personal data in accordance with article 17 of the RGPD.
  • Limit the treatment of your personal data in accordance with article 18 of the RGPD.
  • Request the portability of your data in accordance with article 20 of the RGPD.
  • Oppose the treatment of your personal data in accordance with article 21 of the RGPD.
  • If you have granted your consent for some specific purpose, you have the right to withdraw the consent granted at any time, without affecting the legality of treatment based on the consent prior to its withdrawal.
    You can exercise these rights by sending communication, motivated and accredited, at
    You also have the right to file a claim before the competent control authority If you consider that the treatment does not conform to the current regulations.
    8. Legal information
    The requirements of this policy complement, and do not replace, any other existing requirement under the applicable data protection law, which will prevail in any case.
    This policy is subject to periodic reviews and the company can modify it at any time. When this happens, we will notify you of any change and ask you to reread the most recent version of our policy and to confirm your acceptance.