Privacy Policy

1. Data controller

The data controller for the processing described in this policy is:

2. Personal data we collect

When you use the contact form, we may collect the following categories of data:

• Identity and contact data: name, email address, company name (if provided).
• Message content: the information you choose to include in your enquiry.
• Technical and security data: IP address, browser user agent, browser language, and limited device information such as timezone and screen/viewport size (when available).
• Language preference: English (EN), Spanish (ES), or Portuguese (PT), when sent by the website.

We do not intentionally collect special categories of personal data (Art. 9 GDPR). Please do not submit sensitive data via the form.

3. Purposes of processing

We process your personal data for the following purposes:

• Responding to enquiries and providing requested information.
• Security and abuse prevention, including rate limiting and maintaining an audit trail of contact attempts.
• Service reliability, including troubleshooting delivery issues when required.

4. Legal basis

• Consent (Art. 6(1)(a) GDPR) for processing contact form data in order to respond to your enquiry.
• Legitimate interests (Art. 6(1)(f) GDPR) for security measures such as rate limiting, fraud prevention, and maintaining server logs to protect the service.
• Consent (Art. 6(1)(a) GDPR), if you separately opt in to receive marketing communications (optional checkbox).

5. Recipients and data sharing

Access to personal data is restricted to authorized personnel who need it to handle enquiries and maintain the website. We do not sell personal data.

Email delivery: contact form submissions are transmitted to our designated email inbox. The email service may be hosted on separate infrastructure. Data is not shared with third parties for their own purposes.

6. Storage location

Website server infrastructure is located in the European Union. For the contact form, server-side processing and log storage occur on servers located in Nuremberg, Germany.

7. Retention period

We retain personal data submitted via the contact form for a maximum period of six (6) months from the date of submission.

This retention period allows us to respond to enquiries, manage follow-up communication if necessary, and maintain an audit trail for security, abuse prevention, and delivery verification purposes.

After the expiration of this period, personal data is securely deleted or anonymized, unless a longer retention period is required by applicable law.

8. Security measures

We implement technical and organizational measures to protect personal data, including:

• Transport security using HTTPS.
• Server-side validation and sanitization of submitted data.
• Rate limiting and anti-automation controls to prevent flooding and spam.
• Restricted access to server logs and contact attempt records.

9. Your rights under the GDPR

Subject to applicable law, you have the right to request:

• Access to your personal data (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure of your data (Art. 17).
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time, where processing is based on consent (Art. 7(3)).

To exercise your rights, contact us at privacy@aixinto.com.

10. Complaints

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our processing activities. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Contact

For privacy-related enquiries, please contact: