Privacy
What this website collects, and why
This is about the website. What EVIDENT does with the systems it analyses for a customer is a different question, answered on the security and architecture pages and in the contract that governs it.
Who is responsible
The controller is Ximplicity Software Solutions, S.L., of C/ Rafael Alberti, 28942 Fuenlabrada (Madrid), España, with NIF ES-B-21907332. The way to reach us about anything on this page is info@ximplicity.es, and a person answers it. It is the company's general address rather than a privacy desk, so put "data privacy" or "data request" in the subject and your message is handled as what it is rather than read as a sales enquiry.
Two purposes, and they are separate
The contact form is the only place this site collects anything about you, and it can be used for two different things. They are separate on purpose, and one of them is optional.
Answering you. You give us an email address or a telephone number, optionally a name and a message, and we use them to reply. Pressing send agrees to this and to nothing else.
Product news. A second, optional tick-box, unticked by default. Saying no to it and still getting an answer is the intended behaviour rather than a concession, and you can withdraw it at any time by replying to any message or writing to the address above.
The form used to bundle the two into one sentence under the button. That was wrong, it has been corrected, and this paragraph is here because deleting the history of a privacy correction is a worse habit than having needed one.
What the form collects
| Field | Why | Required |
|---|---|---|
| Email address | To reply to you | One of these two |
| Telephone number | To reply to you, by message if you asked for that | One of these two |
| Name | So a reply is addressed to somebody | No |
| Message | So the reply answers the actual question | No |
| The page you were on | So a reply has the context you were reading | Recorded automatically |
| Your language | So the reply is in it | Recorded automatically |
| Your IP address | To rate-limit the form and recognise a flood. Not used to identify you and not used for anything else | Recorded automatically |
| When you sent it, and when you ticked the optional box | Because consent is evidence, and evidence has a time on it | Recorded automatically |
What this site does not do
No analytics, no advertising or tracking pixels, no third-party embeds, no cookies set by these pages. The check that you are not a robot is a small arithmetic puzzle your own browser solves, chosen precisely so that no third party has to be asked about you.
Two things are stored in your browser and neither leaves it: the theme you chose, and — inside the application — the token that keeps you signed in.
This is a statement about these pages as they are served today. If that ever changes, this paragraph changes with it, before the change ships.
How long we keep it
We retain personal data only for as long as necessary for the purpose it was collected for, taking account of contractual, legal, security and operational requirements. Specific retention periods are applied where the corresponding automated lifecycle control has been verified. You may request deletion where applicable.
That is the criterion, and the table says what it comes to for each thing this site collects.
| What | How long |
|---|---|
| A demonstration session and its copy of the project | Twenty minutes, then removed. The sweeper deletes the project and everything under it when the session expires, and a test asserts it |
| An enquiry sent through this form | Twelve months from our last exchange, then deleted. Counted from the last time somebody dealt with it rather than from when it arrived, so a conversation still going is not deleted on its anniversary |
| The optional subscription | Until you withdraw it, after which we retain only the minimum record needed to honour and evidence that withdrawal. |
| Technical and security logs | As long as they are useful for running the service and investigating a problem |
You do not have to wait for any of that. Write to info@ximplicity.es with "data request" in the subject and your enquiry is deleted, without giving a reason, and we will tell you when it is done.
Retention inside a customer deployment — the evidence, the audit trail, anything derived from source code — is a different question with different answers, and it belongs to the contract rather than to this page. Ask and we will send you the detail.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawing consent at any time without it affecting what was lawful before you did. Write to info@ximplicity.es with "data request" in the subject; a person reads it.
You can also complain to a supervisory authority. In Spain that is the Agencia Española de Protección de Datos.