Privacy

Current state: demonstration with no transmission

The contact panel is a demonstration fieldset outside an active form. Its button is disabled: the site does not transmit or persist the information entered. This covers the values entered in the panel; it denies neither any technical hosting logs nor emails sent to commercial@xiriluz.com, which are received and handled manually, including for exercising rights.

No external analytics tool or third-party tracker is used in this state; any interface animation or interaction remains local and ephemeral, with no personal data, no network and no storage. This does not make claims about browser configuration or any technical hosting logs, which remain to be checked.

Planned operation: data and purpose

If contact were activated, the planned data would be name, company, email and message, plus the necessary technical markers (date, origin, language), for the sole purpose of handling the enquiry. Email and message are required to reply; name and company are optional.

The agreed operation would store the enquiry in a database followed by an email notification to the commercial team, with a manual human reply; no automatic acknowledgement, no public panel and no public export.

News and commercial offers from Tualuce (Xirivella de Iluminación, S.L.) by email would require a separate, express and optional choice: “I would like to receive news and commercial offers from Tualuce (Xirivella de Iluminación, S.L.) by email.” Without that choice no commercial message would be sent; this demonstration transmits and stores no choice.

Recipients, access and private export

The planned recipients would be the commercial team and strictly necessary technical providers, with access restricted to authorised persons only.

No public disclosure is planned; any extraction would remain a private internal CSV export, handled securely, together with its copies and backups.

Controller, legal bases, retention and rights

The data controller is Xirivella de Iluminación, S.L. (details in the legal notice). The enquiry is handled in order to reply: pre-contractual measures at the request of the person who will be party to the contract, or legitimate interest for the professional exchange with a person representing a company. Commercial messages rely solely on express consent, withdrawable simply for the future.

For the planned operation, three operational retention criteria, chosen by the controller and not universal statutory deadlines: the planned intake copy will be purged 24 months from receipt, calculated as calendar months; enquiries without a contract will be kept 24 months after closure in the controller’s commercial system; the authorised commercial list will be kept 3 years after the last voluntary commercial interaction, with possible express renewal. Being on the commercial list does not justify keeping the full message beyond the enquiry need: only minimal proof of the choice (address, date, version, text) is kept with the list. Exporting a CSV transfers no controllership and neither deletes nor resets these periods; purging the intake database does not delete mailbox copies, exported CSVs or backups, which follow their own procedure with designated owners.

Rights of access, rectification, erasure, restriction, objection and portability where applicable: write to commercial@xiriluz.com. Reply within one month under Article 12 of the GDPR, with a reasoned extension where needed; proof of identity is requested only where there is reasonable doubt. Complaints go to the AEPD in Spain; people in France may also contact the CNIL.

Hosting, cookies and the Tualuce service

The current review version is hosted by Vercel Inc.; web and email launch is planned with Raiola Networks S.L. (see the legal notice). Hosting processes the IP address to provide and secure the service; where the controller operates its own systems, this processing relies on legitimate interest. Technical logs are kept under necessary diagnostic and security criteria, with no specific period stated here. Processing outside the EEA may occur; the applicable safeguards are those published by Vercel — privacy policy https://vercel.com/legal/privacy-policy and DPA https://vercel.com/legal/dpa — under its applicable terms. This demonstration uses self-hosted fonts and media, with no external analytics active. Any future audience measurement would be subject to the required consent choices.

The outbound Tualuce link leads to a separate service. Read its own policy for its data and privacy practices. This page requests no consent because this demonstration sets up no active collection.