Privacy Policy
Introduction
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor is it necessary to conclude a contract. You are under no obligation to provide such data, and failure to do so will have no consequences—except where explicitly noted in the sections that follow. “Personal data” means any information relating to an identified or identifiable natural person.
1. Data Controller
MBO Tech Spain Business SL
Calle de Hermosilla 48, 1 D
28001 Madrid, Spain
Phone: +34 91 993 1169
E-mail: info@mbo-tech.eu
If you wish to contact our Data Protection Officer, please reach out via the above e-mail or postal address.
2. WhatsApp Business
We use WhatsApp Business (WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; and, if you are outside the EEA, WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) to handle customer inquiries.
-
Purpose: To receive and respond to your messages.
-
Data Collected: Your WhatsApp number, name (if provided), and any additional information you share.
-
Storage: On a mobile device that contains only contact details of users who have messaged us.
-
No Additional Sharing: We do not share your personal data with WhatsApp beyond what you have already consented to when using the service.
-
Data Transfers: WhatsApp forwards data to Meta Platforms Inc. in the USA under the EU–US Data Privacy Framework.
-
Legal Basis:
-
If your message concerns pre-contractual measures or an existing contract, we rely on Art. 6(1)(b) GDPR.
-
Otherwise, we rely on Art. 6(1)(f) GDPR (our legitimate interest in providing quick support). You may object to processing under Art. 6(1)(f) GDPR at any time for reasons arising from your particular situation.
-
-
Retention: We use your data only to address your inquiry, then delete it in line with statutory retention periods unless you consent to further processing.
For WhatsApp’s terms and privacy policy, see:
https://www.whatsapp.com/legal/#terms-of-service
https://www.whatsapp.com/legal/#privacy-policy
3. Data Processing for Orders
When you place an order via our Shopify store (www.mbo-tech.eu), we collect and process only the personal data necessary to fulfill and manage your order or respond to your questions. Providing this data is essential to conclude the contract; without it, we cannot process your order. Data processing is based on Art. 6(1)(b) GDPR.
We may share your data with:
-
Shipping carriers
-
Dropshipping or fulfillment partners
-
Payment service providers
-
IT and other service providers necessary for order processing
In all cases, we strictly limit data sharing to the minimum required.
4. Inventory & Accounting System
We use an external inventory and accounting service (easybill GmbH, Düsselstr. 21, 41654 Kaarst, Germany) under a data-processing agreement. The personal data you provide when ordering is transmitted to easybill solely to fulfill our contract with you (Art. 6(1)(b) GDPR).
5. Data Retention
After your order is completed, we retain your data for the duration of the warranty period. Thereafter, we keep your data as required by tax and commercial law—typically up to 10 years—and then delete it, unless you have consented to further use.
6. Your Rights
Where the legal requirements are met, you have the following rights under Articles 15–20 GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to restrict processing
-
Right to data portability
Under Article 21(1) GDPR, you also have the right to object to processing based on our legitimate interests (Art. 6(1)(f) GDPR) or for direct marketing.
If you believe your data is processed unlawfully, you may lodge a complaint with a supervisory authority (Art. 77 GDPR).
Last updated: July 6th, 2025