Who is responsible
MAILOGA TRADE, S.L.U., Spanish tax identification number B70532080, Avenida dos Bosques 18, local 2, 15142 Arteixo (A Coruña), Spain. Privacy and rights: lopd@mailoga.com. General enquiries: info@mailoga.com or +34 881 963 297.
What this information covers
This policy covers the XAOIN.COM information portal, the PrestaShop account and sign-in functions, the contact form, calculator and local proposal assistant. The portal operates in catalogue mode, without new purchases, reservations or charges. External pages you visit through a link have their own policies.
Account, sign-in and recovery
When you register or manage your account, you provide the identification and contact details specified in the form, credentials and any information you choose to add to your profile. We use them to create and maintain the account you request, provide access and handle password recovery. The legal basis is providing that requested service under GDPR Article 6(1)(b). Security checks rely on the legitimate interest in protecting accounts and preventing unauthorised access under Article 6(1)(f).
Required fields are marked in each form. Without them, it may not be possible to create the account or handle the request; you can still browse public information. Creating an account does not submit a proposal or join a campaign.
Enquiries and communications
When you use the contact form or write to us, we receive your contact address, message and any documents you choose to attach. We process them to answer and manage your enquiry. If you request steps towards a possible contract, the basis is GDPR Article 6(1)(b); for general enquiries, it is our legitimate interest in responding under Article 6(1)(f). Applicable legal obligations are addressed under Article 6(1)(c).
Do not include passwords, card details, sensitive information or unnecessary data about other people. Registering or making an enquiry is not a request for advertising. Necessary messages about your account or enquiry are distinct from marketing communications.
Calculator and local proposal
Calculator and assistant values are processed in your browser. Preparing, calculating, saving or downloading does not send the proposal to MAILOGA through these tools. The assistant does not need your name, email or telephone number: avoid personal data in free-text fields. The calculator performs operations on the entered values; it does not decide your eligibility for services or accept transactions for you.
If you select save on this device, a copy is kept in browser local storage under xaoin.proposal.v1, solely so that you can retrieve it. A new proposal is not saved until you request it. You can remove it using the assistant’s delete option or by clearing the site’s data in your browser. It remains until removed, unless the browser deletes it sooner.
The draft belongs to that browser, not to your user account. Other people using the same browser profile may access it. A downloaded file stays in your chosen folder until you delete it; deleting the browser draft does not remove that file. If you later send us a file through another channel, that submission is treated as a received communication.
Browsing and security
When you access the portal, the server receives technical data such as your IP address, date and time, requested page, browser information and connection outcome. These are used to serve pages, diagnose faults and protect the service against incidents and abuse. The basis is the legitimate interest in maintaining an available and secure portal, applied proportionately and with regard to your rights.
Technical cookies and storage
The first-party cookie whose name begins with PrestaShop- maintains identification, language and requested technical functions. Its configured lifetime is up to 480 hours after creation or renewal; your browser shows the expiry date of the specific copy. This persistent cookie should not be confused with a cookie deleted when the browser closes. Session and security mechanisms may also use temporary identifiers that end with the corresponding session. Technical shopping-cart elements do not enable orders or payments.
The local draft storage described above serves a different purpose: retrieving a proposal you asked to save. The assistant does not use it for advertising tracking. Technologies strictly necessary to provide a requested function do not need prior consent for that purpose; this does not authorise their use for additional purposes.
You can inspect, block and delete cookies and other site data in your browser settings. Blocking technical cookies may prevent account access or preferences from working. Deleting cookies does not always clear local storage: also check the site-data settings. If optional technologies requiring consent are introduced, they will be identified and a choice offered before use; declining those options will not determine access to basic functions.
Who can access data
Authorised MAILOGA personnel and, as necessary, providers of hosting, technical maintenance and email services can access data. Hosting uses Contabo infrastructure. Providers processing data on MAILOGA’s behalf must follow the applicable instructions and data protection arrangements. Authorities may also receive data where a legal obligation requires this.
Server location, backups and support access depend on the contracted service. Access that constitutes a transfer outside the European Economic Area must be covered by an adequacy decision or other applicable safeguards under the GDPR. You can request information about recipients, locations and transfer safeguards at lopd@mailoga.com.
Privacy requests and records of notices
We handle rights requests and keep the necessary record of their handling and of notices displayed when an account is created. This supports data protection obligations and accountability under GDPR Article 6(1)(c). Accepting the terms of use and acknowledging the privacy information does not authorise advertising.
Retention
Account data are kept while the account service is provided and, after closure, only as necessary to meet obligations or address liability. Enquiries are retained during handling and any necessary follow-up. Technical logs are kept as needed to diagnose faults, protect the service and investigate particular incidents.
Periods are determined by the purpose, the length of the relationship, legal obligations and the periods during which liability may arise. Where required, data are blocked or access is restricted for those purposes. Local drafts and downloads follow the device-deletion rules explained above.
Your rights
You may request access, rectification, erasure, restriction, portability and objection where applicable by writing to lopd@mailoga.com or MAILOGA’s postal address. State your request and provide the information needed to locate your data; additional identification will be requested only where needed to verify identity.
You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Requests are handled within the GDPR time limits, normally one month; any justified extension will be explained. You may complain to the Spanish Data Protection Agency or the competent supervisory authority.
Updated on 23 October 2026.