Privacy Policy

At Movil Planet, we are committed to protecting the privacy and personal data of customers and users through transparent, lawful and secure processing. This policy explains what data we process, why and on what legal basis, how long we keep it, who may receive it and your rights.

Processing complies with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable legislation.

1. DATA CONTROLLER

Company: Movil Planet Trading, S.L. (“Movil Planet”).

Tax ID (NIF): B93731651.

Registered address: Calle Reserva, 46, Oficina 15, Polígono Industrial Lauro Torre, 29130 Alhaurín de la Torre, Málaga, Spain.

Telephone: +34 951 59 26 99.

WhatsApp: +34 651 05 00 19.

Email: contacto@movilplanet.eu.

Website: https://movilplanet.eu.

Internal privacy contact and contact for exercising rights: Administration of Movil Planet Trading, S.L.

Data protection contact: contacto@movilplanet.eu.

As controller, the company determines the purposes and means of processing personal data. Its administration handles privacy matters internally, without prejudice to the company's legal duties. You may contact us at the address above with privacy questions or to exercise your rights.

2. PERSONAL DATA WE PROCESS

Depending on your relationship with us and the services used, we may process:

• Identity and contact details: name, surname, postal address, email, telephone and billing information.
• Account information: user identifier, access credentials protected by appropriate security measures, and account preferences.
• Commercial and order information: purchases, order history, invoices, payments, deliveries, returns, warranties and related correspondence.
• Payment information: data needed to manage and verify payments. Card details and other sensitive financial information are processed by the relevant payment service providers according to the method used.
• Customer service information: enquiries, complaints, support requests, incidents and correspondence.
• Technical and browsing information: IP address, device and browser information, access logs and other data needed for operation and security.
• Marketing preferences: subscriptions, consent, communication preferences and objections to advertising.
• Devices submitted for after-sales service: identifiers such as serial number or IMEI and data strictly needed to handle the issue.

Movil Planet does not generally request special categories of personal data. Customers should avoid including unnecessary personal information in enquiries and should back up devices before technical service, removing personal data where possible and appropriate.

3. PURPOSES OF PROCESSING

3.1. ORDERS AND CONTRACTUAL RELATIONSHIP

We process data to fulfil purchases, payments, invoicing, deliveries, returns and requested services. We may also retain order history to provide assistance relating to previous transactions.

3.2. CUSTOMER SERVICE AND AFTER-SALES SUPPORT

We process data to answer enquiries and manage issues, complaints, warranties, repairs and requests concerning our products. Where necessary, strictly relevant information may be shared with manufacturers, suppliers or repair centres involved.

3.3. LEGAL OBLIGATIONS

We process data to comply with tax, accounting, commercial, consumer and data protection requirements and valid requests from competent authorities.

3.4. SECURITY AND FRAUD PREVENTION

We may process data to detect and prevent fraud, unauthorised access, account misuse and threats to the shop, customers or transactions. Measures will be proportionate and respect individuals' rights and freedoms.

3.5. MARKETING AND CUSTOMER LOYALTY

With valid consent, we may send product news, offers, promotions and discounts through authorised channels. Where Article 21(2) of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) applies, we may send electronic marketing about our own similar products or services to existing customers, provided they have not objected and can opt out easily and free of charge.

Recipients may withdraw consent or object at any time through the messages or by contacting us.

3.6. THIRD-PARTY COMMUNICATIONS

Where separate, specific and informed consent is requested and obtained, data may be processed for marketing relating to appropriately identified partner companies or companies specified in the information provided. Sharing data with third parties for their own marketing purposes requires a valid legal basis and appropriate information.

Accepting purchase or website terms does not itself authorise third-party marketing.

3.7. WEBSITE OPERATION AND IMPROVEMENT

We process necessary information to keep the shop secure, available and operational, resolve technical problems and improve browsing. Cookies and similar technologies are governed by the Cookie Policy and applicable consent requirements.

4. LEGAL BASES

Depending on the purpose, processing is based on:

• Performance of a contract or pre-contractual steps (GDPR Article 6(1)(b)): orders, payments, deliveries, returns and contracted services.
• Legal obligations (Article 6(1)(c)): invoices, tax, accounting, warranties and other statutory duties.
• Legitimate interests (Article 6(1)(f)): proportionate fraud prevention, system security and defence of legitimate rights and interests, subject to balancing individuals' rights and interests.
• Consent (Article 6(1)(a)): certain marketing, optional processing and purposes requiring specific permission.

Where the existing-customer marketing exception under LSSI-CE Article 21(2) applies, all conditions will be met and the right to object will remain available. Withdrawing consent does not affect previous lawful processing or processing supported by another valid legal basis.

5. REQUIRED AND OPTIONAL INFORMATION

Identity, contact, delivery, payment and billing details necessary for orders and legal obligations must be supplied. Without them, the requested contract or service may be impossible. Optional data, including some marketing preferences, is voluntary. Refusing advertising does not prevent purchases or unrelated services.

6. DATA RETENTION

Data is retained only for the purposes for which it was collected and then for periods required by law or needed to address potential liability, including:

• Orders, invoices and accounting records: statutory tax, accounting and commercial retention periods.
• Warranties, returns and complaints: the time needed to handle the issue and related legal responsibilities.
• Customer accounts: while active or while a legitimate purpose for retention exists, subject to statutory periods.
• Enquiries and correspondence: as needed to respond and for justified subsequent periods.
• Marketing: until consent is withdrawn, an objection is made or the purpose ends.
• Technical and security logs: necessary and proportionate periods for security and incident handling.

Where required, data will be blocked during statutory limitation periods, with use restricted as permitted by law. It will then be appropriately deleted or anonymised.

7. DATA RECIPIENTS

Where necessary to provide services, strictly relevant data may be disclosed to:

• Couriers and logistics providers, for order preparation, tracking and delivery.
• Banks, payment and finance providers, for payments, refunds and requested finance.
• Manufacturers, distributors and repair centres, for warranties, repairs and after-sales issues.
• Technology suppliers, for hosting, maintenance, security, email and platform management.
• Accountants, advisers and administrative providers, for accounting, tax and legal obligations.
• Public authorities and courts, where required by law or a valid request.

Providers processing data on our behalf act as processors under appropriate contractual and confidentiality obligations pursuant to GDPR Article 28. We will not share data with third parties for their own marketing without a valid legal basis and required information.

8. IINTERNATIONAL DATA TRANSFERS

Some technology providers may process or access data from outside the European Economic Area. Any international transfers must rely on a valid mechanism under GDPR Chapter V, such as a European Commission adequacy decision or appropriate safeguards, including standard contractual clauses where applicable.

You may request information about relevant transfers and safeguards via contacto@movilplanet.eu.

9. AUTOMATED DECISIONS AND PROFILING

We may use technical tools to detect potentially fraudulent transactions, check transaction security or protect the platform, within legal limits. Where decisions are based solely on automated processing and produce legal or similarly significant effects within GDPR Article 22, we will provide the required information about the logic, significance and consequences, together with applicable safeguards and rights.

Any profiling will comply with relevant legal bases, transparency obligations and other safeguards.

10. YOUR RIGHTS

Data subjects may exercise rights including:

• Access: find out whether their data is processed and obtain information.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where the legal conditions apply.
• Objection: object to certain processing, including direct marketing.
• Restriction: request limited processing in legally specified cases.
• Portability: receive data in a structured format and transfer it to another controller where conditions apply.
• Withdrawal of consent: withdraw permission for consent-based processing.
• Automated decision-making rights: exercise applicable safeguards.

Send requests to contacto@movilplanet.eu or Movil Planet Trading, S.L., Calle Reserva, 46, Oficina 15, Polígono Industrial Lauro Torre, 29130 Alhaurín de la Torre, Málaga, Spain.

Requests must identify the person and the right being exercised. If reasonable doubts about identity arise, we may request proportionate additional information, without demanding unnecessary documents.

Requests are generally handled within one month of receipt, extendable by up to two further months where complexity or volume requires, with notice within the first month. Exercising rights is free except in legally permitted exceptional cases.

You may complain to the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

11. SECURITY AND CONFIDENTIALITY

We use appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or improper destruction. Depending on risk, these may include access controls, authentication, encryption, backups and incident-management procedures.

Access is restricted to staff and providers who need it for their duties and are bound by confidentiality. No system can guarantee absolute security; nevertheless, we apply the protections and incident-response procedures required by law.

12. COOKIES AND SIMILAR TECHNOLOGIES

The website uses cookies and similar technologies for essential functions and, where applicable, audience measurement, personalisation and advertising. Our Cookie Policy explains categories, purposes, providers, retention periods and settings.

Cookies requiring consent will not be installed or used before valid permission is obtained, except where a legal exemption applies. Users can change preferences and withdraw consent through the website controls.

13. UPDATES TO THIS PRIVACY POLICY

We may update this policy to reflect legal, technical, organisational or processing changes. Where material changes affect purposes, legal bases or processing conditions, we will provide appropriate information and obtain fresh consent where necessary. The current version is available on the website.

Last updated: October 26, 2026.