Privacy Policy

Xesgalicia, in accordance with current legislation on the Protection of Personal Data, informs the users of the website (hereinafter, the Page) of the Privacy and Protection Policy. Data that will be applied in the processing of personal data that the User voluntarily provides when accessing its website.

The User, by providing Xesgalicia with their personal data through the electronic forms on the Website, contact section, presentation of projects and Suggestions and complaints and, where appropriate, by marking the corresponding acceptance box/send box, expressly consents that Xesgalicia may process these data in the terms of this Privacy and Data Protection Policy clause and for the purposes expressed here.

Xesgalicia informs the users of the Page that their personal data may only be obtained for processing when they are adequate, relevant and not excessive in relation to the scope and the specific, explicit and legitimate purposes for which they were obtained. They will be deleted when they are no longer necessary or relevant for the aforementioned purpose or when the owner requests it in the exercise of their right to deletion.

Xesgalicia expresses its commitment to comply with the legislation in force at all times regarding data protection.

The personal data provided will be processed by Xesgalicia and will be used in accordance with the following information.

What personal data do we collect and what do we use it for?

Data collected directly: name, surname and email address.

Data collected indirectly through the use of cookies: for statistics, to analyze the use of our Page and provide value-added services such as a map of the location of our offices.

In the table below you will find more detailed information about the processing of your personal data, including the following sections:

Main purposes: It identifies the purpose for which we need to collect your data, that is, why we process your information.

Legitimation: The reason that enables us to process your data is detailed.

Conservation periods: The specific conservation period or the criteria that determine said period are identified.

Recipients: We identify, if applicable, with whom we will legitimately share your data.

Right of interested parties: We inform you about the rights that assist you as an interested party in the processing of your personal data.



Responsible for the treatment

XesGalicia Sociedad Gestora de Entidades de Inversión de Tipo Cerrado, S.A.U.

NIF: A15674203

Address: Rúa Ourense, 6, 15701 - Santiago de Compostela

Contact DPD:


§ Contact Form and we serve you: respond to the request for information requested through the contact form.

§ Submit your Project Form: respond to requests submitted in the investment proposal form.

§ Suggestions and complaints form: address your initiatives, suggestions or complaints in relation to XesGalicia services.

§ Cookies: maintain the user's cookie settings preferences; statistics and marketing: to analyze the use made of our Page and use anti-spam systems (captcha).

 Legitimation and conservation

The basis for data processing is the consent given by the user when completing the form/checking the acceptance box/s/”send”.

The contact form fields marked with an asterisk (*) are considered fields necessary to manage its object. If you do not provide them, it will not be possible to respond to your request.

Consult our Cookies Policy for information about the cookies necessary for the website to function.

§ The data will be kept for the time necessary to respond to your query and as long as its deletion is not requested or consent to the processing of your personal data is withdrawn.

§ Consult our Cookies Policy to identify the validity of each cookie.

Recipients of international assignments and transfers

§ To manage suggestions or complaints, the communication of your data to regional or local control bodies and authorities (OMIC and similar) is planned.

§ Likewise, in the event that we have to comply with our legal obligations, your data may be communicated to the competent Public Authorities.

§ Responsible for web analytics services: the Page has enabled Google Analytics services provided by Google LLC, an entity located in the US and adhered to the Commission's Adequacy Decision of July 10, 2023, EU-USA Data Privacy Framework , which enables the flow of data from European citizens to the US. Interaction with users through the use of said tool implies the use of analytical and technical data in relation to the Page, provided that you have accepted their enablement through the configuration panel.

Right of interested parties

You can exercise your rights of access, rectification, deletion, portability and limitation or opposition by writing to the addresses indicated above.

Interested parties have the right to withdraw the consent given. The withdrawal of consent will not affect the legitimacy of the treatments carried out prior to its withdrawal.

Interested parties have the right to complain to the Control Authority (Spanish Data Protection Agency:


The necessary technical and organizational measures are adopted to guarantee the security of personal data and to prevent its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data and the risks. to which they are exposed.

The Page has the SSL Certificate (Secure Socket Layer) in order to guarantee security in the transmission of data between your browser and our Page.

The secure server establishes a connection so that the information is transmitted in an encrypted manner, which ensures that it is only intelligible to the user's device and that of the Site. In this way, using the SSL protocol guarantees:

That the user is communicating their data to the Page's server center and not to any other.

That between the user and the Page the data is transmitted encrypted, preventing its possible reading or manipulation by third parties.

To verify that you are in a secure environment, you can:

Verify that the Page address begins with https://

Check that a lock icon appears in your browser's address bar

Verify the presence of the SSL certificate by checking the properties of the Page in your browser, for which you must consult its characteristics

The User will be solely responsible for the veracity of the data provided to Xesgalicia.

Any change made to the Privacy Policy and information management practices will be reflected in a timely manner, and Xesgalicia may add, modify or delete said privacy policy when it deems necessary.

In no case will Xesgalicia modify the policies or practices to make them less effective in protecting the personal data of our Users previously stored, without the prior consent of the affected Users.