Privacy Policy - Uniorange Spain

www.uniorange.es

Effective Date: 24 de Julio de 2025

At Uniorange Spain (operated by The Atlas Group Holdings, hereinafter "Uniorange," "we," "us," or "our"), we are deeply committed to protecting your privacy and personal information. This Privacy Policy outlines how we collect, use, process, and safeguard your data when you visit our website at www.uniorange.es and make purchases, in full compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Spanish data protection laws.

1. Information We Collect

We collect personal information that you voluntarily provide to us when you make a purchase, register an account (if applicable), or contact us for support. This information is essential for us to provide our services to you. The types of personal data we collect include:

  • Identity Data: Name, surname.

  • Contact Data: Shipping address, billing address, email address, phone number.

  • Transaction Data: Details about products and services you have purchased from us.

  • Payment Data: Information related to your payment method (e.g., last four digits of your card number, expiration date). Please note: Your full payment card details are processed securely by our third-party payment processors and are not stored on our servers.

We do not collect browse history, product preferences, device information, IP addresses, or use analytics tools like Google Analytics. We also do not use cookies for tracking or marketing purposes beyond what is strictly essential for website functionality.

2. How We Use Your Information (Legal Bases for Processing)

We use the personal data we collect solely for the following specific purposes, relying on the corresponding legal bases under GDPR:

  • To process and fulfill your orders, including shipping products, managing returns, and sending order confirmations.

    • Legal Basis: Contractual Necessity (processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract).

  • To communicate with you regarding your orders, inquiries, and customer service requests.

    • Legal Basis: Legitimate Interest (it is in our legitimate interest to provide effective customer service, respond to your queries, and fulfill our contractual obligations) and Contractual Necessity.

  • To maintain accurate records of your purchases and transactions.

    • Legal Basis: Legal Obligation (for accounting, tax, and consumer protection purposes) and Legitimate Interest (for internal record-keeping and business administration).

We explicitly confirm that we do not use your data for marketing purposes, including sending email newsletters or personalized advertisements.

3. Sharing Your Information

We value your privacy and do not share your personal information with any third parties beyond those strictly essential for providing our services and fulfilling our legal obligations. These third parties act as data processors on our behalf:

  • Payment Processors: To securely process your financial transactions.

  • Shipping Carriers: To facilitate the delivery of your orders.

We ensure that all third-party service providers acting as data processors are contractually bound by Data Processing Agreements (DPAs) that require them to comply with GDPR standards, implement appropriate security measures, and process your data only according to our instructions. We do not share your data with marketing platforms, CRM systems, or review platforms.

4. Data Security

We implement robust technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, using secure connections (SSL/TLS encryption) for all transactions, access controls, and regular security assessments. We are committed to ensuring the integrity and confidentiality of your data.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose of processing. For example, we retain transaction data for periods required by tax and consumer protection laws in Spain.

6. Your Rights (Under GDPR)

As a data subject under GDPR, you have the following rights regarding your personal information. To exercise any of these rights, please contact us at help@uniorange.es. We will respond to your request within one month, which may be extended for complex requests.

  • Right to Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and certain information about the processing.

  • Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you and to have incomplete personal data completed.

  • Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain circumstances (e.g., if the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal ground for processing).

  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data, or if the processing is unlawful).

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where technically feasible.

  • Right to Object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests. As we do not process data for direct marketing, this right primarily applies to other processing based on legitimate interest.

  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes GDPR. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).

7. Cookies

Our website uses only strictly necessary cookies that are essential for basic website functionality and to enable services explicitly requested by you (e.g., maintaining your shopping cart, securing your connection, remembering your language preference). These cookies are fundamental for the website to operate correctly and do not collect any personal data for tracking, analytics, or marketing purposes. As they are strictly necessary for the service you request, your explicit consent is not required for their use, but we provide this information for full transparency. We do not use any non-essential cookies.

8. International Data Transfer

As part of our operations, your personal information may be transferred to, stored, and/or processed by our third-party service providers (e.g., payment processors, hosting providers, or shipping carriers) in countries outside the European Economic Area (EEA). These countries may not offer the same level of data protection as the EEA.

In such cases, we ensure that appropriate safeguards are in place to protect your data, in compliance with GDPR requirements for international transfers. These safeguards may include:

  • Reliance on Standard Contractual Clauses (SCCs) adopted by the European Commission, which provide contractual guarantees for data protection.

  • Transfers to countries deemed to provide an adequate level of data protection by the European Commission.

By using our website and providing your information, you acknowledge and consent to such transfers under these safeguards.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Any changes will be posted on this page with an updated "Effective Date" at the top. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions about this Privacy Policy, your rights, or our data practices, please do not hesitate to contact us via email:

contact@uniorange.es