Legal
Legal notice, privacy and use of artificial intelligence
This text extends the standard legal notice with what the new activity requires: what artificial intelligence does with the data, where it is hosted and who is responsible.
Contents
Website owner
In compliance with Spanish Law 34/2002 of 11 July on information society services and electronic commerce, the owner's identifying details are as follows:
Company name: XARXALIA NETWORK, S.L.U.
Tax ID: B67425892 · EU VAT number: ESB67425892
Registered address: Carrer Pablo Iglesias, 56, 08908 L'Hospitalet de Llobregat (Barcelona)
Place of business: Carrer de l'Era Esquerra, 18, 08242 Manresa (Barcelona)
Phone: +34 933 93 91 91 · Email: info@xarxalia.com
Registry details: Barcelona Companies Register, volume 46894, folio 16, sheet B-534495
Purpose and acceptance
This legal notice governs use of the xarxalia.com website and, where expressly stated, access to the HUB platform. Browsing confers user status and implies full acceptance of the published conditions. The conditions may be amended without prior notice; clients with a contract in force are notified of material changes before they take effect.
Conditions of access and use
Access to the website is free. Access to the HUB platform requires a contract and named credentials. Users undertake to use it lawfully and are responsible for the accuracy of the details they give us.
Interfering with the operation of the site or the platform is not permitted.
Users must not infringe third-party rights or introduce unlawful content.
Credentials are personal and non-transferable; clients must report any loss immediately.
Bulk data extraction and use of the platform to train third-party systems are prohibited.
Intellectual and industrial property
The website's content and the HUB platform's software, including source code, interface, agent configurations and documentation, are the property of XARXALIA NETWORK, S.L.U. or of third parties who have authorised their use. The service contract grants the client a non-exclusive right of use limited to its term; it does not transfer ownership.
The content and data the client brings to the platform remain theirs at all times.
Use of artificial intelligence
This section gives effect to the transparency obligations in article 50 of Regulation (EU) 2024/1689 on artificial intelligence, applicable from 2 August 2026.
Anyone interacting with an artificial intelligence system operated by Xarxalia is clearly told so at the first contact in each conversation.
Any published content that is artificially generated or manipulated is labelled as such.
No automated system is passed off as a natural person on any channel.
The client can always switch the automation off or reduce its autonomy level.
Xarxalia maintains an internal artificial intelligence literacy programme for its staff, in accordance with article 4 of the same regulation.
Xarxalia does not use systems classified as high-risk under the AI Act without a prior assessment and without informing the client in writing.
Automated decisions and human oversight
In accordance with article 22 of the General Data Protection Regulation, no decisions are taken based solely on automated processing that produce legal effects on individuals or similarly significantly affect them.
Each digital employee operates at an autonomy level configured and reviewable by the client.
Certain situations (complaints, legal or financial risks, an express request to speak to a person) always escalate to human intervention.
Every action is logged with a date, the responsible system and the outcome, and is auditable by the client.
Xarxalia as data processor
When Xarxalia runs the platform with the data of a contracting company's end customers, it acts as data processor and the contracting company is the controller. Under article 28 GDPR, this relationship is set out in a data processing agreement specifying the purposes, duration, security measures, authorised sub-processors and how the data is deleted or returned when the relationship ends.
In respect of data collected through this website, Xarxalia acts as data controller.
Purposes and legal basis
We process the personal data collected through this website for the following purposes and on the following legal bases:
Handling enquiries and MIA diagnostic requests, and project requests sent through the contact form, including sending any documents requested in it (data processing agreement, policies, service level agreement or sub-processor register): performance of pre-contractual measures at the data subject's request.
Providing and administering the contracted services: performance of the contract.
Sending commercial communications about our own services: consent or legitimate interest, with the option to unsubscribe at any time.
Meeting legal, accounting and tax obligations: compliance with a legal obligation.
Where the data is hosted
Data processed on the platform resides on infrastructure administered by Xarxalia and located in Barcelona, within the European Economic Area and under European jurisdiction.
No international data transfers are made outside the European Economic Area.
Should an ancillary service ever require a transfer, the client would be notified in advance and the transfer would rely on the appropriate safeguards in chapter V of the GDPR.
Clients may request the physical location of their data at any time.
Data retention
Data is kept while the relationship is active and, once it ends, for the statutory limitation periods applying to tax and contractual obligations. After that it is deleted or anonymised. A retention policy broken down by data type is available to clients.
Recipients and sub-processors
No data is disclosed to third parties except where legally required. Technology providers acting as sub-processors help deliver the service and are bound by contract and by the same confidentiality and security obligations.
An up-to-date sub-processor register, with each one's purpose and location, is available to any client on request at info@xarxalia.com.
Individual rights
To exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and the right not to be subject to automated individual decisions, write to info@xarxalia.com with proof of your identity.
If you believe the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es) or the Catalan Data Protection Authority.
Security
We apply technical and organisational measures appropriate to the risk: encryption in transit and at rest, role-based access control, two-factor authentication, logical separation per client, regular backups and an immutable action log.
Security incidents are graded by severity and notified to those affected and, where applicable, to the supervisory authority, within the statutory deadlines.
Exclusion of warranties and links
We do not guarantee uninterrupted availability of the website, nor do we accept responsibility for errors outside our control, for malicious software introduced by third parties or for negligent use by other users. Links to external sites are informational and imply no control over their content.
Availability and response-time commitments for the HUB platform are governed by the contract's service level agreement, not by this notice.
Applicable law
These conditions are governed by Spanish law and by European Union law. For any dispute arising from access to or use of the website, the parties submit to the courts of Barcelona, unless consumer legislation establishes another forum.
Last updated: 23 September 2026. We reserve the right to amend this text; material changes will be communicated to clients with a contract in force.