← AXO Group

Privacy Policy

Last updated: 30 April 2026

In compliance with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI), we detail below how we process your personal data and all relevant information regarding this processing.

Please read this policy before providing your personal data on our website. We also recommend reviewing it periodically, as it may be updated due to regulatory changes or self‑regulation.

1. DATA CONTROLLER

Website name: Axonovo
Corporate name of the website owner: AXONOVO DIGITAL, SOCIEDAD LIMITADA (hereinafter, the RESPONSIBLE)
Tax ID (CIF): B70944913
Commercial Registry: Commercial Registry of Cantabria, Volume 1315, Folio 58, Section 8, Sheet 37669, Entry 1
Registered address: C/ Honduras 6, bajo, 39005 Santander (Cantabria)
Contact email: hi@axo.group
Telephone number: +34 942 94 50 46

2. PRINCIPLES APPLICABLE TO DATA PROCESSING

In managing the User’s personal information, we follow the principles established by the GDPR:

  • Lawfulness, fairness, and transparency: we collect personal data only for specific, explicit, and legitimate purposes. We will always request your consent for one or more specific purposes, which will be communicated transparently and in advance.
  • Data minimisation: we collect only the data strictly necessary and relevant for the purposes for which they are processed.
  • Storage limitation: data will be kept only for the time necessary to fulfil the purposes of the processing. Depending on the purpose, we will inform you of the appropriate retention period.
  • Integrity and confidentiality: the information you provide will be processed in a way that ensures adequate security and confidentiality. We apply all necessary measures to prevent unauthorised access or misuse of users’ data by third parties.

3. COLLECTION AND PROCESSING OF PERSONAL DATA

Personal data collected on this website are processed in accordance with GDPR and Organic Law 3/2018 (LOPDGDD). The personal data processed by the RESPONSIBLE come directly from the data subject and are collected through the following means:

  • Contact form: when the user completes the forms available on the website, including the “¿Hablamos?” button, providing name, email, phone number, company, and any additional information voluntarily included in the message field, for the purpose of managing enquiries, information requests, collaboration proposals, meetings, or quotations.
  • Email: when the user contacts us directly through the email addresses provided on the website.
  • Telephone call: when the user calls the published phone numbers to request information or enquire about the services offered by the RESPONSIBLE.
  • Chat or integrated messaging system: when the user interacts with the chat system enabled on the website, providing data such as name, email, phone number, company, or any other information shared during the conversation.
  • Newsletter subscription: when the user provides their email or other contact details to receive communications, updates, resources, or information related to the RESPONSIBLE’s activity, provided consent has been given when required.
  • Talent or job application form: when the user submits a job application through the talent section, providing identification and contact details, as well as professional, academic, or employment information included in their CV or accompanying documents.
  • Social media: when the user interacts with the RESPONSIBLE’s profiles on platforms such as LinkedIn, Instagram, Facebook, or others, data derived from such interactions may be processed in accordance with this Privacy Policy and the privacy terms of each platform.

We commit to using personal data solely for the purposes described in this policy and in accordance with applicable law.

4. LEGAL BASIS FOR PROCESSING

According to applicable data protection regulations, the legal bases for processing data collected through this website are:

  • Consent of the data subject (Art. 6.1.a GDPR): for data voluntarily provided through contact forms, newsletter subscriptions, informational communications, talent forms, or job applications, when explicit consent is required. Consent may be withdrawn at any time.
  • Performance of pre‑contractual or contractual measures (Art. 6.1.b GDPR): when the user contacts us to request information, arrange a meeting, request a quotation, evaluate a commercial proposal, or formalise the contracting of services.
  • Compliance with legal obligations (Art. 6.1.c GDPR): when processing is necessary to comply with applicable legal requirements.
  • Legitimate interest of the RESPONSIBLE (Art. 6.1.f GDPR): for managing enquiries, communications, professional relationships, collaborations, social media interactions, website security, prevention of fraudulent or abusive use, and commercial follow‑up actions related to prior user requests, provided such interests do not override the rights and freedoms of the data subject.

To communicate through this website, acceptance of this Privacy Policy is required. If you do not accept these terms, we cannot proceed with the requested actions.

5. PURPOSES OF PROCESSING

Personal data collected through the website will be processed for the following legitimate purposes:

  • Managing enquiries submitted via contact form, email, telephone, or chat, to provide information about the RESPONSIBLE’s professional services in digital marketing, growth strategy, communication, customer acquisition, analytics, process automation, artificial intelligence applied to business environments, and digital solutions.
  • Managing contact requests submitted through the “¿Hablamos?” button or other forms, assessing user needs, and sending commercial information or personalised proposals when appropriate.
  • Managing job applications submitted through the talent section, including analysis of CVs, documentation, and professional data provided voluntarily by the candidate.
  • Sending commercial communications, newsletters, updates, resources, or information related to the RESPONSIBLE’s activity, only when the user has given explicit consent or when another lawful basis applies.
  • Complying with legal obligations in tax, accounting, administrative, or data protection matters.

Additional complementary purposes:

  • Ensuring compliance with website terms of use and applicable legal obligations.
  • Improving website quality, functionality, and security through analysis of browsing behaviour and technologies such as cookies (see Cookies Policy).
  • Managing the RESPONSIBLE’s presence on social media to inform followers about activities, content, updates, promotions, or services, and to facilitate user interaction. These profiles will not be used for unauthorised individualised commercial communications.

Data will always be adequate, relevant, and limited to what is necessary for the purposes described.

6. DATA RETENTION PERIOD

Data processed to handle enquiries will be retained for the time necessary to manage the request and, where applicable, for the legally required periods to address potential liabilities.

Data used for commercial communications will be retained until the user withdraws consent or requests deletion.

Data related to job applications will be retained for the time necessary to evaluate the application and, unless consent for extended retention is given, will be deleted once the selection process ends or after a reasonable period.

Data will be deleted using appropriate security measures to ensure anonymisation or complete destruction.

7. RECIPIENTS

Personal data will not be transferred to third parties unless required by law or necessary for the development and execution of the purposes of processing.

Certain external providers may access the data as data processors, such as:

  • Web hosting providers
  • Form tools
  • Chat or messaging systems
  • Email services
  • CRM systems
  • Automation tools
  • Newsletter platforms
  • Web analytics services
  • Social media management tools
  • Technical support
  • Administrative, tax, or accounting services
  • Other technological providers

All processors operate under confidentiality and data processing agreements in accordance with applicable regulations.

8. INTERNATIONAL DATA TRANSFERS

Personal data are not generally transferred outside the European Economic Area (EEA). However, the use of certain technological services—such as hosting, email, CRM, automation, technical support, or payment gateways—may involve international transfers.

Such providers will act as processors or sub‑processors and may only access data when adequate safeguards exist under Articles 44–49 GDPR, such as:

  • Adequacy decisions
  • Standard Contractual Clauses
  • Binding Corporate Rules

The RESPONSIBLE ensures that all such providers meet the required levels of protection, security, and confidentiality.

9. YOUR RIGHTS

Users have the following rights under data protection law:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object
  • Right to data portability
  • Right to withdraw consent at any time

You also have the right to confirm whether we are processing your personal data.

To exercise your rights, you may contact us at hi@axo.group, indicating the right you wish to exercise and providing proof of identity when necessary.

You may also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

10. DATA CATEGORIES

The categories of personal data processed through the website generally include:

  • Identification and contact data: name, surname, email, phone number, company, job title, or any other data voluntarily provided.
  • For job applications: academic, professional, employment, and CV‑related data.
  • Data derived from user interaction with the website, forms, chat, newsletter, or social media profiles.

Special categories of personal data (e.g., health, ideology, religion, sexual orientation, union membership) are not requested. If a user voluntarily includes such data, it will be deleted to the extent technically possible.

11. AUTOMATED DECISION‑MAKING AND PROFILING

The RESPONSIBLE does not make decisions based solely on automated processing that produce legal effects or significantly affect the user.

However, the website may use analytics, segmentation, or automation tools linked to browsing, forms, communications, or digital campaigns to improve user experience and adapt content.

When consent is required, it will be requested explicitly through the appropriate mechanisms.

12. ACCURACY AND TRUTHFULNESS OF DATA

Users are responsible for ensuring that the personal data provided are accurate, truthful, complete, and up to date. Users must notify any changes and refrain from impersonating others or providing third‑party data without consent.

The RESPONSIBLE is exempt from liability arising from inaccurate or false data provided by users.

13. USER CONSENT

The user acknowledges having been informed of the conditions regarding personal data protection and consents to the processing of their data in accordance with this Privacy Policy.

If the user is under fourteen years of age, parental or guardian consent is required. Minors must not register or provide personal data without such consent.

14. WITHDRAWAL OF CONSENT

Consent may be withdrawn at any time by contacting the RESPONSIBLE as indicated in this Policy. Withdrawal does not affect the lawfulness of prior processing.

15. COMMERCIAL EMAILS

In compliance with the LSSI, this website does not send unsolicited commercial emails (SPAM). Commercial communications will only be sent when expressly requested or authorised by the user.

Users may unsubscribe at any time through the mechanisms provided in each communication or by contacting the RESPONSIBLE.

16. DATA SECURITY AND CONFIDENTIALITY

This website is committed to ensuring the confidentiality and proper use of users’ personal data, applying all necessary measures to prevent alteration, loss, unauthorised access, or misuse, in accordance with GDPR.

Although we implement appropriate security measures, the RESPONSIBLE cannot guarantee absolute invulnerability of the Internet or prevent fraudulent access by third parties.

All persons authorised to process personal data (staff, collaborators, providers) are subject to confidentiality obligations.

In the event of a personal data breach that may pose a risk to users’ rights and freedoms, the RESPONSIBLE will take appropriate measures and notify the supervisory authority and/or affected users when required.

17. LEGAL INFORMATION AND FUTURE AMENDMENTS

This Policy complements, and does not replace, any other legal requirements applicable to data protection, which shall prevail in case of conflict.

This Policy is reviewed regularly, and the RESPONSIBLE reserves the right to modify it at any time. In case of changes, users will be notified and asked to review and accept the updated version.