Legal

Privacy Policy

Last updated: 27 October 2026

1. Who we are

This website is operated by ExperioX, S.L.U. ("ExperioX", "we", "us"), tax ID (NIF) B88935853, which is the data controller for the personal data described in this policy. Our full company details are in the Legal Notice. You can contact us about privacy at contact@experiox.com.

2. What this policy covers

This policy explains how we handle personal data of people who visit our website, request a demo or contact us, sign in to the ExperioX back office, or work with us as hotel clients, partners or suppliers.

Hotel guests. When hotels use ExperioX to offer services to their guests, we process guest data on behalf of the hotel, as a data processor, under a data processing agreement. In that case the hotel is the data controller and its own privacy policy applies. Guests who want to exercise their rights should contact the hotel, and we will help the hotel respond.

3. Personal data we collect

  • Contact and demo requests: name, role, work email, hotel or company, number of properties and anything you choose to tell us.
  • Business relationship data: contact details and correspondence with people at our clients, partners and suppliers.
  • Back-office accounts: name, work email, role and sign-in records of authorized users.
  • Technical data: IP address, browser and device type, and pages visited, collected through strictly necessary cookies and, only with your consent, analytics cookies. See our Cookie Policy.

4. Why we use it and our legal basis

PurposeLegal basis (GDPR)
Responding to demo requests and inquiriesSteps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in replying to business inquiries (Art. 6(1)(f))
Providing the back office and our services to clientsPerformance of a contract (Art. 6(1)(b))
Sending relevant business communications about ExperioXLegitimate interest (Art. 6(1)(f)), or your consent where the law requires it (Art. 6(1)(a)). You can opt out at any time.
Website analyticsYour consent (Art. 6(1)(a)), which you can withdraw at any time in Cookie Settings
Security, fraud prevention and compliance with legal obligationsLegal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f))

5. Who we share it with

We do not sell personal data. We share it only with service providers that process it on our behalf and under our instructions, including:

  • cloud hosting and infrastructure providers;
  • payment service providers, for payments made on the ExperioX platform;
  • providers of email, communication, customer relationship management and analytics tools.

We may also disclose data to public authorities when the law requires it.

6. International transfers

Where a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep personal data only for as long as we need it for the purposes above: inquiries for up to 24 months after our last contact, client and account data for the duration of the contract and then for the periods required by law, and analytics data as described in the Cookie Policy.

8. Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise these rights, write to contact@experiox.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

9. Security

We use technical and organizational measures to protect personal data, including secure cloud hosting, encrypted connections and access limited to authorized people.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.