Privacy policy
Last updated: 7 May 2026
Data controller
The controller of personal data collected via trackiber.es is:
Owner: Manuel Gómez Muñoz
Tax ID: NIF 50338088N
Address: La Moraleja Business Park, Av. de Europa 19, Of. 345, 28108 Alcobendas (Madrid), Spain
Email: info@trackiber.com
Phone: +34 630 88 28 19 · WhatsApp direct
Activity: Sale of telematics and geolocation hardware for fleets
Website: trackiber.es
This policy applies to data processing in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPDGDD).
Data collected and purposes
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order management and invoicing | Name, NIF/CIF, address, email, phone, payment data | Performance of the contract (art. 6.1.b GDPR) | 6 years (accounting obligation, art. 30 Spanish Commercial Code) |
| Customer service | Name, email, phone, content of the enquiry | Legitimate interest (art. 6.1.f GDPR) | 3 years from last contact |
| Sending commercial communications | Name, email | Consent (art. 6.1.a GDPR) | Until consent is withdrawn |
| Compliance with legal obligations | Invoicing data | Legal obligation (art. 6.1.c GDPR) | Applicable statutory periods |
Data recipients
To provide the service we work with the following processors, all under a processor agreement compliant with art. 28 GDPR:
- Shopify Inc. (Canada / EU) — store hosting and order processing. Holds standard contractual clauses and certification before data protection authorities.
- Payment gateways (Shopify Payments, Stripe or equivalent) — for secure card payment processing.
- Carriers (Correos Express, GLS, MRW, SEUR or other logistics operators) — for delivery of orders.
- Transactional email providers — for sending order confirmations and notifications.
- Public authorities — where required by law (Spanish Tax Agency, courts, law enforcement).
No international data transfers outside the European Economic Area are made beyond those mentioned, nor is data shared with third parties for commercial purposes.
Data subject rights
Any person has the right to obtain confirmation as to whether their personal data is being processed and, where applicable, to exercise the following rights:
- Access to the personal data being processed.
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten") when the data is no longer needed.
- Restriction of processing in cases provided for by the regulations.
- Objection to processing based on legitimate interest.
- Portability of the data to another controller.
- Not to be subject to automated decisions with legal effects.
To exercise any of these rights, write to info@trackiber.com stating the right you wish to exercise and attaching a copy of an identity document.
If the data subject considers that processing does not comply with the regulations, they can file a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
Security measures
Technical and organisational measures have been adopted as needed to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, in line with the state of the art, the nature of the data and the risks involved.
Communications on trackiber.es are encrypted using HTTPS/TLS and payment data is not stored on the store servers; it is processed directly by the PCI-DSS certified payment gateway.