Privacy Policy

Last updated: 11/07/2025

Introduction

At Vibra Mobile Operador de Telecomunicaciones S.L. (hereinafter, "Vibra Mobile" or "we"), we are committed to protecting the privacy and security of our users’, customers’, and partners’ personal data.

This Privacy Policy describes in detail how we collect, use, store, and protect your personal information, as well as the rights you can exercise over it.

The processing of your personal data is carried out in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD 3/2018), ensuring confidentiality, integrity, and availability of the information at all times.

By interacting with Vibra Mobile through our services, applications, websites, or customer service channels, you unreservedly accept the terms of this Privacy Policy.

Who is responsible for data processing?

Data Controller: Vibra Mobile Operador de Telecomunicaciones S.L.

Tax ID (CIF): B75592774

Registered address: Av. Unión Europea 12, P-1, 28850, Torrejón de Ardoz – Madrid

If you have any questions, you can contact our Data Protection Officer (DPO) at dpo_vibra@vibramobile.com.

What data do we collect?

•Identification and contact details: Name, surname, ID/NIE/Passport, postal address, email address, phone number.
•Billing and transaction data: Payment information and banking details, billing history, and service usage.
•Technical and browsing data: IP address, device type, operating system, browser, cookies, and similar technologies.
•Contractual and service data: Information about contracted products or services, incident history, and customer support inquiries.
•Geolocation data: Approximate location based on connection to mobile networks.

What do we use your data for?

After obtaining your prior consent, your data will be used for:

•Service provision and contract management: Processing service activation and maintenance, managing billing and payments, handling inquiries and complaints.
•Service improvement and personalisation: Analysing the use of our products to improve user experience and sending notifications about updates or changes to services.
•Marketing and commercial communications: Sending offers, promotions, and news (subject to prior authorisation), personalising advertising based on interests and consumption habits.
•Legal compliance and security: Detecting and preventing fraud, and complying with legal, tax, and regulatory obligations.

What is the legal basis for processing your data?

The processing of your personal data is based on:

•Contract performance: To provide you with the contracted services.
•Legal obligations: To comply with tax, telecommunications, and security regulations.
•Legitimate interest: To improve our services and ensure security.
•Consent: For sending commercial communications and personalised advertising.

Data security / Data sharing

Data security: We will never process your data in an unlawful, abusive, or unexpected way. At Vibra Mobile, we apply both technical and organisational security measures to protect your personal data and prevent unauthorised access, loss, or alteration.

We do not share your data with third parties, except in the following cases:

•Legal obligation: When required by competent authorities.
•Service providers and data processors: Companies that help us provide our services (e.g., hosting, billing, technical support).
•International transfers: If a provider is located outside the European Economic Area (EEA), we ensure adequate protection measures are in place in compliance with applicable law.

How long do we keep your data?

At Vibra Mobile, we only keep your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations.

Below are the retention periods depending on the type of data processed:

•Contractual and billing data: Retained during the term of the contract and, once terminated, kept for the periods required by applicable tax, accounting, and commercial law — generally up to 6 years after the end of the contractual relationship, unless additional obligations require a longer retention period.
•Commercial communications data: Retained until you unsubscribe or withdraw your consent. However, we may keep basic contact information to prevent sending unwanted communications in the future, in compliance with applicable regulations.
•Technical and browsing data: Stored in accordance with our Cookie Policy and retained only for the time strictly necessary to fulfil the purposes set out in that policy, without prejudice to your ability to manage or delete them at any time via your browser settings.

Once the indicated retention periods have expired, we will securely delete the data unless it must be kept blocked for the formulation, exercise, or defence of claims, or to comply with a legal obligation.

Do you know your rights as the data subject?

As a user, data protection laws grant you several rights over your personal data.

Below, we explain what they are and how you can exercise them. You can also find more information on these rights on the Spanish Data Protection Agency’s website www.aepd.es, where you can access detailed descriptions and downloadable templates.

•Right of access: You have the right to request information about what personal data we process, for what purpose, and to obtain a copy of it.
•Right to restrict processing: You can request that we restrict the processing of your data in certain circumstances, such as if you contest its accuracy or need it to be retained for legal claims.
•Right to object: You have the right to object to the processing of your data when it is based on Vibra Mobile’s legitimate interests or carried out for direct marketing purposes. In such cases, we will stop processing your data unless there are compelling legitimate grounds or it is needed for legal claims.
•Right to withdraw consent: You can withdraw your consent to data processing at any time, without affecting the lawfulness of processing carried out before withdrawal.
•Right to rectification: You can request the correction or update of your personal data if it is inaccurate or incomplete.
•Right to erasure: You can request the deletion of your personal data when it is no longer necessary for the purposes it was collected for, unless we are legally required to keep it.
•Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where the processing is based on your consent or a contract and is carried out by automated means.
•Right not to be subject to automated decision-making: You can request not to be subject to a decision based solely on automated processing, including profiling, when it has legal effects on you or similarly significantly affects you.

To exercise any of these rights, you can contact Vibra Mobile by sending an email to web_vibra@vibramobile.com with the subject "Exercise of data protection rights."

We may request additional information to verify your identity before processing your request.

We will respond to your request within a maximum period of one month, which may be extended to two months for particularly complex requests or due to processing volume.

If you believe we have not handled your personal data correctly or have not responded to your request, you have the right to lodge a complaint with the national supervisory authority:

Spanish Data Protection Agency

C/ Jorge Juan, 6 – 28001 - Madrid

www.aepd.es

Use of cookies and similar technologies

At Vibra Mobile, we use cookies and similar technologies to improve your user experience, personalise content, analyse website traffic, and offer advanced functionalities. Some of these cookies are essential for the website to function, while others help us optimise its performance and improve our services.

You can find more information about the types of cookies we use, their purpose, and how to configure or reject them in our Cookie Policy (/legal/cookies).

There you will find detailed instructions for managing your preferences at any time.

Changes to the Privacy Policy

At Vibra Mobile, we are committed to keeping our Privacy Policy up to date to reflect changes in applicable legislation, our services, or how we process your personal data.

We reserve the right to modify this Privacy Policy at any time. When we make significant changes that may affect your rights or the processing of your personal information, we will inform you through our official channels, which may include:

•Email: If changes require your acceptance or significantly affect your rights, we will send you a notification to the email address linked to your account.
•Notice on our website: We will publish an update on our website www.vibramobile.com so you can review the changes at any time.
•In-app notifications: If you use our mobile app, we may send you a notification within the app.

When do the changes take effect? Modifications will take effect from the date of publication of the new version on our website, unless otherwise specified or required by applicable law to obtain your explicit consent.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

If you have questions or need more information about the changes, please contact us at dpo_vibra@vibramobile.com.