Privacy

Who handles your data

The controller is X-Datik Technologies S.L., tax id (CIF) B27537000, Carrer Cardenal Gomà 31, 17178 Vall d'en Bas (Girona), Spain.

For anything about your data: lluc@xdatik.com · WhatsApp 640 263 394.

What data we have

If you buy: your name, your email, your mobile number if you give it, the development and the flat, what you chose, the level and the amount, and, if you type them, the first names of the people who will live in the flat. As proof that you accepted these terms we keep the date, the version you accepted, and the IP address and browser you paid from.

Payment is handled by Stripe: X-Datik never sees or stores your card details.

If you write to us from the form for people without a code: your name, your email, your mobile number if you give it and your message.

What we use it for

To prepare and deliver your order, invoice you and write to you about it (basis: the contract you make when you buy). To keep invoices and orders for as long as the law requires (basis: legal obligation). To answer you if you write to us without a code (basis: your request).

If you bought without a developer's code (also if you used an interior designer's, architect's or brand's code), three days after we deliver your flat we send you a single email in case you want to upgrade it to a higher level (basis: our legitimate interest in offering a customer a service similar to the one they bought, art. 21.2 of the Spanish LSSI). We tell you so when we ask for your email, where you can tick «I don't want the upgrade email.», and that email itself has a link to object free of charge; you can also object by writing to us. If you object, we do not send it.

Apart from that email, we do not use your data for advertising and we do not sell it.

What the developer sees

The developer that gave you the code sees your order in its dashboard without your name: the development and the flat, the date, the level, the status, who will live in the flat (for example, «Couple») and the finishes you chose with their extras. Once the order is delivered, it can also download the choices sheet, which is what it needs to order the building work.

It only sees your name, email, mobile number and first names if you ticked «I agree that the developer can see my name, email and mobile» when paying. If you did not tick it, they do not reach the developer.

If you want it to stop seeing them, write to us and we will change it; whatever the developer has already kept is its own responsibility.

Who else handles it

Stripe, for payment and the invoice. Resend, to send you the emails. Cloudflare, to store and serve the images, video and visit of your delivery. And the provider that hosts the website and the database. All of them handle the data only on X-Datik's behalf.

Some of these providers are based in the United States. Transfers are made with the safeguards of the GDPR: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long

Orders and invoices, for as long as tax and commercial law requires (currently up to six years). Your personal link and your delivery, for as long as the service exists, so you can come back to it. Messages without a code, for as long as needed to answer you.

Your rights

You can ask us to see your data, correct it, delete it, take it with you in a file, object to or restrict a use, and withdraw your permission to share it with the developer. Write to lluc@xdatik.com; we answer within one month at most. What the law requires us to keep (invoices) we cannot delete early.

If you think we have not handled it properly, you can complain to the Spanish Data Protection Agency (aepd.es).

If you have no code: your floor plan and photos

If you come without a code, we keep the floor plan and the photos you upload (of your flat and of the furniture you want to keep) and your answers to the questions. We use them only to model your flat and prepare your order.

They are stored in a private Cloudflare R2 store in the European Union, never public: only the X-Datik studio sees them.

We keep them for as long as the order and the round of changes last, and one year after that. If you ask us, we delete them sooner.

Before you pay, the pl_sid cookie also links your files to your browser, so only you can see and remove them. Your browser also keeps your answers (local storage) so you can carry on another day; they are deleted if you clear this site's data.

Shopping links

When you tap a link in your shopping list we note which product, when, from which page, your order if you come from it and your browser's anonymous cookie (pl_sid). It lets us count clicks per product and per brand and collect the affiliate commission.

The shop only receives the click identifier, never your name, email or phone number.

We keep it for as long as the affiliate programme account lasts, and 24 months at most.

If you share your flat

Once we deliver your flat you can create a link to show it to your family or anyone you like. That link only exists if you create it yourself from your personal link.

Whoever opens it sees the images and the video we delivered to you and the furniture list, if your order has one. They never see your name, email, phone number, address, what you paid, your floor plan or your photos.

You can stop sharing whenever you want: from that moment the link no longer opens, and the page and its preview stop working. What someone has already seen or copied may remain: the images and the video stay stored on our image server, so anyone who already has the address of an image or of the video can still open it, and messaging apps (WhatsApp and others) keep their own copy of the preview in the chat.

To count how many people reach X-Datik from a shared link we keep a fingerprint of the link (a code from which the link cannot be rebuilt), not who opened it.

If you give a flat or are given one

If you give a flat, you give us the name and email of the recipient and, if you like, a message for them. We use them only to send the gift on the day you choose (basis: the contract you make when buying it) and we do not write to them for anything else. We keep only a fingerprint of the code, never the code itself.

We delete the recipient's name, email and message 30 days after they redeem it, after it expires or after it is refunded, and 7 days after it was started if the gift is never paid. If the recipient redeems it, from then on they are a buyer like any other and their data follows the rest of this page.

Cookies

We only use two first-party cookies, both technical, and no third-party analytics or advertising. That is why we do not ask for your permission, but here they are:

pl_sid: a random number, with no data about you, to count only once each visit that enters with a code, previews its flat or opens a shared flat. It lasts one year.

pl_session: only for developers and X-Datik staff who sign in to their dashboard; it keeps the session open for 30 days.

While you choose, your browser keeps your progress in that tab (session storage) so it is not lost when you switch language; it is deleted when you close the tab.