Introduction

At Mobile Depot, we are fully committed to protecting the privacy, integrity, and security of all personal data we handle. This General Data Protection Regulation (GDPR) Policy outlines how we collect, process, store, and safeguard personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and Council, commonly known as the General Data Protection Regulation (GDPR).

This document provides transparency into our data processing activities, defines our legal obligations, and informs our clients, vendors, and employees of their rights under the GDPR.

Mobile Depot is a B2B supplier of new, used, refurbished, 14-day return, and “as-is” mobile phones, tablets, and accessories. As we serve businesses across the EU and globally, we prioritize GDPR compliance across all departments and digital platforms.

Scope and Application

This GDPR Policy applies to all personal data processed by Mobile Depot in the context of:

It covers data collection via:

Data Controller

The data controller responsible for determining the purpose and means of processing personal data is:

As a data controller, we are responsible for ensuring that your personal data is handled lawfully, fairly, and transparently.

Lawful Basis for Data Processing

Mobile Depot processes personal data only when one or more of the following lawful bases apply:

A. Contractual Obligation

We process data to fulfil contractual obligations such as:

B. Legitimate Interest

We process certain data to pursue legitimate business interests, including:

C. Consent

Where consent is required, such as for newsletters or targeted promotions, it is collected through an explicit opt-in process and can be withdrawn at any time.

D. Legal Obligation

We process data to comply with tax, regulatory, and customs obligations under Spanish and EU law.

Types of Personal Data Collected

Cookies can either be:

While Mobile Depot primarily serves businesses, we collect limited personal data from company representatives, including:

We do not collect sensitive personal data such as health, ethnicity, religious belief, or biometric information.

Data Collection Methods

Data is collected through:

All data collected is limited to what is necessary for the intended business purpose.

Purpose of Data Processing

We collect and process data for the following purposes:

Data Retention Policy

Mobile Depot retains data only for as long as necessary for business operations, regulatory compliance, and legitimate interests. Retention periods include:

When data is no longer required, it is securely deleted or anonymized.

Data Security Measures

We implement appropriate technical and organizational security measures, including:

Breaches are reported to the supervisory authority (Agencia Española de Protección de Datos - AEPD) within 72 hours when legally required.

Rights of Data Subjects

Under the GDPR, all individuals whose personal data we process are entitled to the following rights:

A. Right to Access

You can request confirmation and a copy of the personal data we hold about you.

B. Right to Rectification

You have the right to request corrections to any inaccurate or outdated data.

C. Right to Erasure

You may request that we delete your personal data where it is no longer needed, or consent has been withdrawn.

D. Right to Restrict Processing

You can request that we temporarily suspend the processing of your data under certain conditions.

E. Right to Data Portability

You may request that your personal data be transferred to another organization in a structured, commonly used format.

F. Right to Object

You may object to data processing based on legitimate interests or direct marketing.

G. Rights Related to Automated Decision-Making

Mobile Depot does not use data for automated decision-making or profiling.

To exercise any of these rights, email our DPO at [email protected]. We aim to respond within 30 days of receipt of a verified request.

Third-Party Data Sharing

We only share personal data with trusted third parties for the following purposes:

All third parties are contractually bound to process data in compliance with GDPR.

We do not sell, lease, or trade personal data to third parties under any circumstances.

International Data Transfers

In cases where data must be transferred outside the European Economic Area (EEA), Mobile Depot ensures that appropriate safeguards are in place, including:

Children’s Data

Our services are strictly intended for business use by persons over the age of 18. We do not knowingly collect or store data from minors. If you believe we have unintentionally stored data of a child, please contact us immediately to rectify the issue.

Marketing and Communication Preferences

We may send marketing content to our B2B clients, such as:

Marketing is conducted under the lawful basis of legitimate interest for current clients and consent for prospective leads. All marketing communications include an easy opt-out link.

You may withdraw your consent or update your preferences at any time by contacting [email protected] or using the unsubscribe feature in our emails.

Cookies and Online Tracking

Our website uses cookies to enhance user experience, monitor traffic, and optimize content. For details, please refer to our dedicated Cookie Policy, which outlines the types of cookies we use and your choices for managing them.

Policy Updates

We reserve the right to update this GDPR Policy periodically to reflect changes in data processing practices or legal obligations. Updates will be posted on this page, with the effective date clearly indicated.

We encourage you to review this page regularly to stay informed of your rights and our obligations.

Supervisory Authority Contact

If you believe your rights under the GDPR have been violated, you may lodge a complaint with your local supervisory authority or the Agencia Española de Protección de Datos (AEPD):

Contacting Us

For all questions regarding this GDPR Policy, your data, or to make a formal data access request, contact: