Privacy policy
Last updated: 7 May 2026
Data controller
The controller of the personal data collected through trackiber.es is:
Owner: Manuel Gómez Muñoz
Tax ID: 50338088N
Address: La Moraleja Business Park, Av. de Europa 19, Of. 345, 28108 Alcobendas (Madrid), Spain
Email: info@trackiber.es
Phone: +34 630 88 28 19 · Direct WhatsApp
Activity: Sale of telematics and geolocation hardware for fleets
Web: trackiber.es
This policy applies to data processing in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and the safeguarding of digital rights (LOPDGDD).
Data collected and purposes
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Order management and invoicing | Name, National ID/VAT ID, address, email, phone, payment data | Performance of contract (art. 6.1.b GDPR) | 6 years (accounting obligation, art. 30 Spanish Commercial Code) |
| Customer service | Name, email, phone, content of the enquiry | Legitimate interest (art. 6.1.f GDPR) | 3 years from last contact |
| Sending of commercial communications | Name, email | Consent (art. 6.1.a GDPR) | Until consent is withdrawn |
| Compliance with legal obligations | Invoicing data | Legal obligation (art. 6.1.c GDPR) | Applicable legal terms |
Data recipients
To provide the service we work with the following processors, all under a data-processor agreement pursuant to art. 28 GDPR:
- Shopify Inc. (Canada / EU) — store hosting and order processing. Has standard contractual clauses and certification with data protection authorities.
- Payment gateways (Shopify Payments, Stripe or equivalent) — for secure card payment processing.
- Shipping carriers (Correos Express, GLS, MRW, SEUR or other logistics operators) — for order delivery.
- Transactional email providers — for order confirmations and notifications.
- Public administrations — where there is a legal obligation (Spanish Tax Agency, courts, law enforcement).
No international data transfers are carried out outside the European Economic Area other than those mentioned, nor is information shared with third parties for commercial purposes.
Data subject rights
Anyone has the right to obtain confirmation as to whether personal data concerning them is being processed and, if so, to exercise the following rights:
- Access to the personal data processed.
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten") when the data is no longer necessary.
- Restriction of processing in the cases provided for by law.
- Objection to processing based on legitimate interest.
- Portability of the data to another controller.
- Not to be subject to automated decisions with legal effect.
To exercise any of these rights, write to info@trackiber.es stating the right you wish to exercise and attaching a copy of the document that proves your identity.
If the data subject considers that the processing does not comply with the law, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
Security measures
The technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access have been adopted, in line with the state of technology, the nature of the data and the risks to which it is exposed.
Communications on trackiber.es are encrypted via HTTPS/TLS and payment data is not stored on the store servers; it is processed directly by the PCI-DSS certified payment gateway.