PRIVACY POLICY
Last updated: 3 September 2026
At Fixa we take our users' privacy seriously. This Policy explains what personal data we process, for what purposes, on what legal basis, with whom we share it, and what rights you have over it.
1. Data controller
- Name: Fixa Global Technologies, S.L. ("Fixa")
- Spanish tax ID (CIF): B27547371
- Registered office: Gran Via de les Corts Catalanes 655, 08010 Barcelona (Spain)
- Contact email: info@fixanow.com
- Website: fixanow.com
- Official Complaint Form (Generalitat de Catalunya): no. B-655329
Fixa has not appointed a Data Protection Officer, as none of the circumstances set out in Article 37 of Regulation (EU) 2016/679 (GDPR) apply.
For any matter relating to this Policy or the exercise of your rights, please write to info@fixanow.com with "Data protection" in the subject line.
2. Personal data we process
2.1. Customer data
- First name and surname
- Email address
- Phone number
- Postal address (necessary to deliver the service at your home)
- Photographs of the property or item to be repaired that the customer chooses to upload
- Description of the problem or request
- History of requests, accepted quotes and reviews
- Communications exchanged through the platform
2.2. Professional data
- First name and surname
- Spanish foreign resident ID (NIE) or company tax ID (CIF)
- Phone number
- Email address
- Postal address
- Proof of registration in the Spanish special regime for self-employed workers (RETA) or equivalent corporate form
- Current professional civil liability insurance policy
- Profile photograph
- Professional specialty or specialties
- Geographical service area
- Background geolocation data only while a job is accepted and in progress, in order to show the customer the professional's travel status
- History of jobs, quotes and reviews
2.3. Technical and browsing data
- IP address, device type, operating system, device identifiers, application version
- Web and application usage data (pages visited, times, events)
3. Purposes of processing and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Account creation and management | Performance of a contract (Art. 6.1.b) |
| Connecting customers and professionals (intermediation) | Performance of a contract |
| AI analysis of uploaded photographs to generate preliminary diagnostics and reference price ranges | Performance of a contract |
| Improvement and training of Fixa's own AI models using user conversations and photographs | Legitimate interest (Art. 6.1.f), with the user's right to object at any time |
| Sending operational communications (confirmations, quote notifications, alerts) | Performance of a contract |
| Sending commercial communications about similar own services to existing users | Legitimate interest, with the possibility to object at any time |
| Professional geolocation during job execution | Performance of a contract |
| Compliance with legal obligations (tax, accounting, consumer, fraud prevention) | Legal obligation (Art. 6.1.c) |
| Handling complaints and resolving incidents | Performance of a contract / legitimate interest |
| Platform security and fraud prevention | Legitimate interest |
4. Use of artificial intelligence
Fixa uses artificial intelligence systems (both proprietary and third-party) for the following purposes:
- Preliminary diagnostics: analysis of photographs uploaded by the customer to generate a preliminary description of the problem and a reference price range. These diagnostics are indicative and do not replace the on-site professional's assessment.
- Conversational assistance: interaction with users within the application.
- Continuous improvement of own models: Fixa trains and improves its AI models using the conversations and photographs generated on the platform. Where technically possible, data is anonymised before being used for training.
Right to object: if you do not wish your photographs, messages or conversations to be used for training our models, you may object at any time by writing to info@fixanow.com. Objecting will not affect the service we provide to you.
Fixa does not take decisions based solely on automated processing that produce legal or similarly significant effects on users.
5. Recipients of data (data processors)
Fixa shares personal data with the following providers, acting as data processors under contracts entered into pursuant to Article 28 GDPR:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Web hosting and servers | Germany (EEA) |
| Google LLC / Google Ireland Ltd. | Web analytics (Google Analytics) | Ireland / USA |
| Infobip Ltd. | SMS and communications delivery | United Kingdom / EEA |
| Telnyx LLC | Communications and messaging services | USA |
| Twilio Inc. | Communications and messaging services | USA |
| Google Ireland Ltd. (Google Ads) | Campaign measurement and conversion tracking | Ireland / USA |
| Meta Platforms Ireland Ltd. (Meta Pixel) | Measurement and optimisation of advertising on Facebook and Instagram | Ireland / USA |
Fixa does not sell personal data to third parties.
6. International data transfers
Fixa's main servers are located in Germany (Hetzner), within the European Economic Area, so the core processing does not involve international transfers.
Some auxiliary providers (Google, Twilio, Telnyx) may involve data transfers to the United States. These transfers are covered by:
- the Standard Contractual Clauses approved by the European Commission (Decision 2021/914), and/or
- the EU-US Data Privacy Framework, where the provider is certified under it.
You can request a copy of the applicable safeguards by writing to info@fixanow.com.
7. Aggregated and anonymised data
Fixa may process, transfer or commercialise aggregated and anonymised data on patterns of breakdowns, maintenance and the state of homes, for the purpose of developing insurance products, preventive services, risk models and other analytical products, together with insurance companies and other commercial partners. Since this data is anonymised, it does not allow the identification of specific natural persons and therefore falls outside the scope of the GDPR.
8. Retention periods
| Category | Period |
|---|---|
| Active account data | For as long as the account remains active |
| Data after account closure | The periods legally required (up to 6 years for tax and commercial purposes) |
| Photographs uploaded by the customer | 12 months from job completion. If the right to object to AI training is exercised, they are anonymised within 30 days |
| In-platform communications | 3 years from the last interaction |
| Professional geolocation data | 90 days from job completion |
| Tax and accounting data | 6 years (Art. 30 of the Spanish Commercial Code) |
| Complaint data | 3 years from resolution |
9. Your rights
As the data subject, you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten") where the legal circumstances apply
- Restriction of processing
- Object to processing, including the use of your data for AI model training and for commercial communications
- Data portability
- Not to be subject to decisions based solely on automated processing that produce legal effects
- Withdraw consent at any time, where processing is based on consent
How to exercise them: send an email to info@fixanow.com with "Data protection rights" in the subject line, attaching a copy of an identification document. We will respond within a maximum of one month.
Complaint to the supervisory authority: if you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, or through its electronic office at www.aepd.es.
10. Cookies and tracking technologies
Fixa's website and app use cookies and similar technologies for the following purposes:
- Technical (necessary): keeping you logged in and ensuring the platform works.
- Analytics: Google Analytics, to understand in aggregate how the platform is used.
- Marketing and advertising: Google Ads (including conversion tracking and remarketing) and Meta Pixel (Facebook/Instagram), to measure the effectiveness of our campaigns and show relevant ads.
Analytics and marketing cookies are only activated with your consent, which you may grant, refuse or withdraw at any time through our cookie settings banner. You may also opt out via the Google Analytics Opt-out Add-on (https://tools.google.com/dlpage/gaoptout), Google Ads Settings (https://adssettings.google.com/) and Facebook Ad Preferences (https://www.facebook.com/adpreferences/).
11. Minors
Fixa's services are exclusively addressed to persons over 18 years of age. Fixa does not knowingly collect data from minors. If we detect that data from a minor has been collected without the valid consent of their legal representatives, we will delete it immediately.
12. Security
Fixa applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure, including encryption in transit, access controls, backups and periodic audits.
13. Amendments
Fixa reserves the right to amend this Privacy Policy to adapt it to legislative or case-law developments or to changes in the services. Material amendments will be communicated to registered users with reasonable notice by email or through the application.