Privacy Policy

MOBIUS GESTIÓN, S.L. (hereinafter, MOBIUS SARETEC GROUP) aims to respect the privacy of its users and protect the personal data they may provide to MOBIUS SARETEC GROUP.

In accordance with Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (hereinafter, the LOPDGDD) and the European Union General Data Protection Regulation (hereinafter, the GDPR), this data collection shall be governed by the terms set out below:

Information on the data controller, collection, purposes, legal basis and retention period of personal data

This Privacy Policy contains all the information about the processing of users’ personal data carried out by MOBIUS SARETEC GROUP. As evidence of its commitment to data protection regulations, MOBIUS SARETEC GROUP makes the information concerning this Privacy Policy permanently available to users on this website.

MOBIUS GESTIÓN, S.L. (hereinafter, MOBIUS SARETEC GROUP)

Tax ID No.: B-99.279.424

7 Calle Anabel Segura

Alcobendas (28108 – Madrid)

www.grupomobius.com

dpo@grupomobius.com

Depending on how the user uses this website, MOBIUS SARETEC GROUP will need to process personal data, which will generally include the following:

  • Identification data (for example, first name, surname, language, contact details, etc.).

  • Professional data and data relating to the entity represented.

  • Information included in enquiries, applications, requests and incidents.

  • Contractual, administrative, financial and billing data.

  • Connection, location and browsing data (for example, when interacting with us from a mobile device).

  • Marketing information (for example, if the user subscribes to our newsletter).

  • Data required to demonstrate the consent given or objection exercised by the user.

  • Data associated with multichannel communications: telephone number, basic communication metadata (such as date, time, channel, delivery status and response) and the information provided by the user through messaging channels such as WhatsApp or SMS.

MOBIUS SARETEC GROUP reminds users that some of the personal data requested to provide access to certain features or services of this website will be mandatory, as they are essential to provide the service, give access to the feature concerned, or manage the reason for contacting us and process it administratively.

Depending on how the user interacts with this website, personal data will be processed for the following purposes:

PURPOSE

INFORMATION

CUSTOMER SERVICE AND OPERATIONAL COMMUNICATIONS

Only the personal data strictly necessary to manage or resolve the user’s enquiry, application or request will be processed. We may respond through the channel selected or used by the person, including telephone, email, SMS or WhatsApp.

Necessary operational notices, or notices reasonably connected with a request or service, will also be sent, including confirmations, reminders, changes, incidents, status updates or requests for documentation, excluding advertising unrelated to the contractual relationship.

When the user contacts us or agrees to receive information via WhatsApp, SMS or other instant messaging channels, their telephone number and the information provided through that channel will be processed.

Users are also informed that their calls may be recorded for quality purposes and to improve the commercial service provided to them.

MARKETING

Personal data will be processed to:

  • Manage the sending of marketing communications, promotions, news, content, events or commercial information about products and services, or newsletters, to all users who have subscribed by email, telephone, SMS, WhatsApp or other electronic means.

QUALITY SURVEYS

Send quality surveys concerning the products or services provided.

MANAGEMENT OF JOB APPLICATIONS RECEIVED

Process the personal data provided by the user through this website in order to submit their application to the data controller’s personnel selection processes.

ETHICS OR WHISTLEBLOWING CHANNEL

Process the personal data strictly necessary to operate and manage the ethics or whistleblowing channel.

In all cases, the user shall be responsible for the accuracy of the data provided. Otherwise, MOBIUS SARETEC GROUP may exclude the user from the services for which false data have been provided, without prejudice to any other legal action that may apply.

The legal basis permitting the processing of the personal data provided by the user shall be governed by the following table:

PURPOSE

LEGAL BASIS

CUSTOMER SERVICE AND OPERATIONAL COMMUNICATIONS

When the user makes contact through any form provided on this website or through any other means of contact advertised on this website, the legal basis for processing is the user’s consent.

For operational notices sent via channels such as WhatsApp or SMS linked to a service, the legal basis is performance of the contract or the taking of pre-contractual measures, as well as the legitimate interest in providing and coordinating the service effectively.

MOBIUS SARETEC GROUP also has a legitimate interest in responding to applications, enquiries or questions submitted by the user, whether through this website or through any means of contacting the company, including the social networks on which MOBIUS SARETEC GROUP is present.

With regard to call recording, MOBIUS SARETEC GROUP has a legitimate interest in ensuring service quality, ongoing training and the proper performance of its functions, in accordance with Article 6(1)(f) of Regulation (EU) 2016/679 (GDPR).

If the user contacts MOBIUS SARETEC GROUP in exercise of rights protected by any legal provision, including complaints or enquiries concerning MOBIUS SARETEC GROUP’s services or products, the legal basis governing such processing is compliance with legal obligations.

Where the data provided by the user are contact details of sole traders or self-employed professionals, the legal basis for processing is legitimate interests, as provided for in Article 19 of Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights, in conjunction with Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

MARKETING

The legal basis for processing personal data for the marketing purposes described is the user’s consent. Consent to receive marketing communications by WhatsApp, SMS or other electronic means will be requested through a separate, unticked box that is clearly distinguished from acceptance of the Privacy Policy. Acceptance is voluntary and does not affect the handling of an enquiry. The user may withdraw consent or object at any time, free of charge, by replying “STOP” to the SMS or WhatsApp message where the channel allows this, or by writing to dpo@grupomobius.com. Withdrawal will not affect the lawfulness of processing carried out previously.

Where there is a prior contractual relationship with the user, provided that MOBIUS SARETEC GROUP lawfully obtained the recipient’s contact details and uses them to send marketing communications concerning its own products or services similar to those initially contracted by the customer, the legal basis for processing will be legitimate interests, with particular reference to Article 21(2) of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

Where the data provided by the user are contact details of sole traders or self-employed professionals, the legal basis for processing is legitimate interests, as provided for in Article 19 of Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights, in conjunction with Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

QUALITY SURVEYS

MOBIUS SARETEC GROUP has a legitimate interest in conducting quality surveys among users in order to analyse user satisfaction with this website, customer service quality and the products and/or services contracted.

MANAGEMENT OF JOB APPLICATIONS RECEIVED

The legal basis for processing personal data for the purpose of managing job applications received is the user’s consent.

ETHICS OR WHISTLEBLOWING CHANNEL

The legal basis for processing personal data to operate and manage the ethics or whistleblowing channel is compliance with a legal obligation and/or legitimate interests.

The personal data retention period will depend on the purposes for which the data were collected:

PURPOSE

RETENTION PERIOD

CUSTOMER SERVICE AND OPERATIONAL COMMUNICATIONS

Personal data processed for this purpose, including data processed in recorded calls, will be retained for as long as necessary to deal with the user’s enquiry, application or request. Data generated through operational channels such as WhatsApp and SMS will be retained for the duration of the management process or relationship and until any objection to the channel has been addressed, where applicable.

Once this period has elapsed, the data will be retained, duly blocked, to defend the company’s interests against potential claims by customers, users or third parties concerning rights recognised under the applicable legislation, for no longer than five (5) years.

MARKETING

Personal data processed for this purpose will be retained until the user indicates that they no longer wish to receive marketing communications.

In the case of newsletters, the user may unsubscribe at any time by clicking the link at the end of the update message received by email or by withdrawing consent. Minimum information will be retained on a suppression list in order to honour the user’s opt-out.

QUALITY SURVEYS

Personal data processed for this purpose will be retained for as long as necessary to carry out the appropriate actions to improve our service, our products or the usability of this website, depending on the purpose of the survey, or until MOBIUS SARETEC GROUP anonymises the data collected.

MANAGEMENT OF JOB APPLICATIONS RECEIVED

Personal data processed for this purpose will be retained until the user decides to withdraw consent. Likewise, the data controller will process the personal data provided for this purpose for future personnel selection processes, reserving the right to delete or destroy them without prior notice.

ETHICS OR WHISTLEBLOWING CHANNEL

Personal data processed for this purpose will be retained for as long as necessary to carry out the appropriate investigation and reporting actions.

Users are informed that MOBIUS SARETEC GROUP will retain personal data, duly blocked, for as long as civil, commercial, administrative, criminal or tax liabilities may arise, in compliance with the legislation in force at any given time and until the relevant limitation periods have expired. Once those periods have elapsed, the personal data will be deleted.

In order to provide the service and fulfil our obligations, we may need other parties to process your personal data. Such data processing will be carried out as follows:

  • Access by Processors: We allow access to your data by providers acting as our Processors, under our instructions and pursuant to a contract that guarantees security. The categories of these providers are:

    • Technology and hosting service providers.
    • Customer service providers.
    • Marketing and advertising service partners.
    • Service providers related to MOBIUS SARETEC GROUP’s administration.
    • Messaging and communications service providers: The Rocket Science Group LLC (SMS – Mailchimp) and Whatsapp Ireland Limited (WhatsApp Business).

    These providers will act as processors and may be replaced or supplemented by other technology providers offering equivalent functionalities.

  • Disclosure of data to other Data Controllers: We will disclose your data to other entities that will process them for their own purposes only where strictly necessary:

    • By legal obligation: To public authorities, courts or tribunals where required by law.
    • With your explicit consent: To any other entity, provided that you have given us your prior consent.

For the provision of the service, the Company may engage technology providers (processors) located in countries outside the European Economic Area (EEA).

In such cases, the Company will ensure that these transfers are carried out under one of the appropriate safeguards provided for in the GDPR, such as the execution of Standard Contractual Clauses (SCCs) approved by the European Commission, thereby ensuring a level of protection equivalent to that in Europe.

The User may request further information about these safeguards through the available contact channels.

Users’ rights

Users who have provided personal data for processing by MOBIUS SARETEC GROUP have the following rights:

RIGHT OF ACCESS

The user has the right to obtain confirmation from MOBIUS SARETEC GROUP as to whether or not personal data concerning them are being processed and to access the personal data held by MOBIUS SARETEC GROUP.

RIGHT TO RECTIFICATION

The user has the right to request that MOBIUS SARETEC GROUP rectify inaccurate data concerning them. The user also has the right to have incomplete personal data completed, including by means of a supplementary statement.

RIGHT TO ERASURE/RIGHT TO BE FORGOTTEN

The user has the right to have MOBIUS SARETEC GROUP erase personal data concerning them, subject to the requirements established by the legislation in force.

RIGHT TO RESTRICTION

The user has the right to request that MOBIUS SARETEC GROUP restrict the processing of personal data, subject to the requirements established by the legislation in force.

RIGHT TO DATA PORTABILITY

The user has the right to receive from MOBIUS SARETEC GROUP the personal data concerning them in a structured, commonly used and machine-readable format and to transmit those data to another controller where the processing is based on consent or a contract and is carried out by automated means.

RIGHT TO OBJECT

The user has the right to object to MOBIUS SARETEC GROUP’s processing of personal data concerning them where such processing is based on public or legitimate interests. In that event, MOBIUS SARETEC GROUP will cease processing the data unless there are compelling legitimate grounds or the processing is required for the establishment, exercise or defence of possible legal claims.

AUTOMATED INDIVIDUAL DECISION-MAKING

The user has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, subject to the requirements established by the legislation in force.

RIGHT TO LODGE A COMPLAINT

The user has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the rights set out above in this Privacy Policy have been infringed or that the processing of personal data concerning them infringes Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 or Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights.

The user or their legal or voluntary representative, after providing proof of identity and the corresponding authority to act, may exercise the rights described above by sending a written communication to dpo@grupomobius.com.

Data Protection Officer

MOBIUS SARETEC GROUP has appointed a Data Protection Officer through whom the user may submit complaints, claims and suggestions concerning the processing of their personal data.

Users are likewise informed that they may exercise their rights before the Data Protection Officer by emailing dpo@grupomobius.com and following the instructions set out in the preceding section.

Social Media

MOBIUS SARETEC GROUP is present on the main social networks: LinkedIn and YouTube. It therefore acts as Data Controller for the data posted on its profiles arising from friends, likes, followers, comments, pins, etc.

The user expressly agrees to be bound by the privacy terms and conditions established by the various social networks or platforms on which MOBIUS SARETEC GROUP is present, authorising MOBIUS SARETEC GROUP to use the means made available by those networks to inform users about its various activities and services.

Minors

Children under 14 years of age may not use the services available on this website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all actions carried out through this website by the children in their care, including completing forms with those children’s personal data and, where applicable, ticking the accompanying boxes.

Accordingly, since MOBIUS SARETEC GROUP is unable to determine whether users are minors, parents, guardians or legal representatives must put in place the necessary mechanisms to prevent minors from accessing this website and/or providing personal data without their supervision. MOBIUS SARETEC GROUP accepts no liability in this regard.

Source of data and third-party data

Data are obtained directly from the data subject, the entity for which they work or which they represent, customers or partners lawfully involved in providing the service, and sources accessible or permitted by law. Anyone providing third-party data must be authorised to do so and must provide those third parties with the required information.

Security applied to personal data

In order to guarantee the security and integrity of the personal data provided, MOBIUS SARETEC GROUP has adopted the necessary technical and organisational measures to prevent data loss and unauthorised processing or access by third parties, as required by the applicable legislation and taking into account the state of the art and the nature of the data stored.

Users are nevertheless informed that WhatsApp and SMS channels must not be used to send passwords, complete bank details, identity documents or particularly sensitive information unless a secure procedure has been enabled and this is strictly necessary. Staff must move the conversation to a more secure channel where the content requires it.

Changes to the Privacy Policy

This Privacy Policy may be updated at any time according to the needs of the website and future legislative changes concerning privacy, and MOBIUS SARETEC GROUP reserves the exclusive right to do so.

If such a change is made, MOBIUS SARETEC GROUP will inform the user where the changes are significant for their privacy, so that the changes introduced may be reviewed and the user may decide whether to object to the processing of personal data or unsubscribe from any service or feature. In any event, where consent is required to process personal data for purposes other than those provided for in this Privacy Policy, the user’s consent will be requested in accordance with the data protection legislation in force at that time.

Contact MOBIUS SARETEC GROUP

7 Calle Anabel Segura

Alcobendas (28108 – Madrid)

Tel. +34 917 943 468

hello@grupomobius.com

Last updated: 25 September 2026

Legal text prepared by: Área Digital Abogados, S.L.P. (areadigitalabogados.es)