Data Protection and Privacy Policy

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and digital rights (LOPDGDD), we inform users about the processing of their personal data.

Purpose of Data Processing

Personal data collected through the platform (website and app) will be processed for the following purposes:

  • Managing platform users.
  • Sending newsletters, promotions and prize draws.
  • Commercial and advertising communications.
  • Invitations to promotions from Móviles y más or third parties.

Consent for these purposes is given by ticking the checkboxes provided for that purpose.

Data Processing in the APP

Móviles y más does not process personal data of users who download the application.

Data Storage

  • Newsletter subscription data, where that service exists, is stored with providers offering Chapter V GDPR safeguards (EU-US Data Privacy Framework adequacy decision where applicable, or Standard Contractual Clauses under Decision 2021/914).
  • The platform is hosted on EU/EEA cloud providers with the same safeguards for international transfers.

Commitment to Confidentiality

Móviles y más agrees to:

  • Treat personal data confidentially.
  • Implement technical and organisational measures to guarantee data security and prevent unauthorised access.

Data Security

Móviles y más implements advanced security measures such as data encryption, access controls and regular audits to protect personal data against unauthorised access, loss or alteration.

Users’ Rights

Users have the right to:

  • Access: Know what personal data is being processed.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of their data.
  • Objection: Object to the processing of their data.
  • Portability: Request the transfer of their data to another controller.
  • Restriction: Restrict the processing of their data.
  • Withdrawal of consent: Withdraw consent at any time.

To exercise these rights, you can contact us via:

  • Postal address: Parque científico de la UE, Edificio I+D, Módulo 113, Madrid, Spain.
  • Email: info@movilesymas.com

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD). More information at www.aepd.es.

Data Retention

Personal data will be kept for as long as a contractual relationship remains in force. Once terminated, data will be kept for sending newsletters unless users request deletion.

Data Retention Periods

  • Registered user data: Kept while a contractual relationship exists.
  • Newsletter subscription data: Kept until users request deletion.
  • Billing data: Kept for the period required by applicable tax legislation.

Recipients of Data

Personal data will not be transferred to third parties except where required by law. However:

  • For commercial communications we only use providers offering Chapter V GDPR safeguards (EU-US DPF adequacy or SCCs 2021/914).
  • Platform hosting applies the same safeguards where transfers outside the EEA occur.

Lawful Basis for Processing

The processing of personal data is based on:

  1. Performance of a contract (Article 6(1)(b) GDPR).
  2. Consent of the data subject (Article 6(1)(a) GDPR).
  3. Legitimate interest (Article 6(1)(f) GDPR).

Source of Data

Personal data processed by Móviles y más is provided directly by users. Data categories include:

  • Identification data (name, surname, ID, etc.).
  • Commercial information.
  • Financial data (bank account number, credit card, etc.).

Móviles y más does not process special-category data.

Use of Cookies

Móviles y más uses necessary cookies (exempt, e.g. remembering your mym:consent:v1 choice and theme) and, only with your prior consent, Google Analytics 4 (_ga, _ga_<ID>, maximum 13 months). No advertising cookies or other third parties.

On entry you will see a modal with Accept, Reject and Configure on the same level. You can change or withdraw your consent at any time via the “Configure cookies” button in the footer or from the Cookie Policy, with the same effort as accepting (Art. 7(3) GDPR). Blocking cookies in your browser also works: the site remains usable.

Commercial Communications

Users who have given their consent will receive commercial communications from Móviles y más. They can unsubscribe at any time using the link in each communication or by contacting info@movilesymas.com.

International Data Transfers

In the event of international data transfers, Móviles y más ensures appropriate safeguards are in place to protect personal data, such as European Commission-approved standard contractual clauses.

Supervisory Authority

If you consider that your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD):

  • Address: C/ Jorge Juan, 6, 28001 – Madrid, Spain.
  • Website: www.aepd.es

Protection of Minors

Móviles y más services are not aimed at children under 14. We do not knowingly collect personal data from minors without parental or guardian consent. If we detect that we have collected a minor’s data without such consent, we will delete it immediately.

Amendments to the Privacy Policy

Móviles y más reserves the right to update this Privacy Policy to adapt it to legislative changes or internal needs. Users are advised to review this section periodically.

Notification of Changes

If significant changes are made to this Privacy Policy, Móviles y más will notify users through a prominent notice on the platform or by email.