Your data.
Handled with purpose.

Introduction and scope

This Privacy Policy explains how DISTRIBUCION DE CLASE MUNDIAL, S.L. trading as B2B Mobiles Europe collects, uses, shares, protects and retains personal data through b2bmobiles.eu and through its wholesale and commercial operations.

It applies to identifiable individuals who interact with us in a business context, including buyer and supplier contacts, trade applicants, sellers, manufacturers, corporate representatives, website visitors, professional advisers and people who contact our team. It does not create contractual rights beyond applicable data-protection law.

By using the website or communicating with us, you acknowledge that this policy describes our processing. Where consent is the lawful basis, we request that consent separately and you may withdraw it as explained below.

Controller and privacy contact

DISTRIBUCION DE CLASE MUNDIAL, S.L. is the data controller for the personal data covered by this policy. As controller, we decide why and how that personal data is processed and remain responsible for handling it lawfully, fairly, transparently and securely.

We have not described [email protected] as a Data Protection Officer address. It is our designated privacy contact and is monitored by the team responsible for coordinating privacy enquiries and rights requests.

• Trading name: B2B Mobiles Europe.
• Company Registration Number: 6080019513784.
• EU VAT Number: ESB56672850.
• Registered address: Carrer Creu Coberta, 77, Sants-Montjuic, 08014 Barcelona, Spain.
• Privacy contact: [email protected].
• Telephone and WhatsApp: +34 662 90 94 48.
• Website: b2bmobiles.eu.

Legal framework and territorial scope

Our principal data-protection framework is Regulation (EU) 2016/679, the EU General Data Protection Regulation, together with Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights and other applicable Spanish law.

The UK GDPR and the UK Data Protection Act 2018 may also apply to relevant processing connected with offering goods or services to individuals in the United Kingdom or monitoring their behaviour there. References to data-protection law in this policy include each framework only to the extent it applies to the particular processing.

Because the controller is established in Spain, the Spanish Data Protection Agency, the AEPD, is normally our lead supervisory authority for EU processing. A UK individual may also raise a matter with the Information Commissioner's Office where the UK GDPR applies.

Personal data we collect

Personal data means information relating to an identified or identifiable natural person. A company name or general switchboard number may not itself be personal data, but the name, direct contact details and activity of a person working for that company are personal data.

We collect only the categories reasonably needed for the relevant relationship, service, transaction, security purpose or legal obligation.

• Identity and business-contact data, including name, job title, company, business address, email address, telephone number, WhatsApp number, country and preferred contact route.
• Trade-account and verification data, including company registration, VAT or tax identifiers, ownership or authority information, trade references and due-diligence records requested after an application.
• Enquiry and commercial-profile data, including products, brands, grades, quantities, specifications, target prices, locations, buying or selling preferences and service requirements.
• Transaction and financial data, including quotations, orders, invoices, payment references, bank-account details where needed for payment or refund, currency, tax treatment and account balances. We do not ask visitors to submit payment-card details through ordinary website forms.
• Delivery and operations data, including consignee name, delivery address, courier reference, tracking events, proof of delivery and customs information.
• Device and claim data, including IMEI or serial numbers, diagnostic results, RMA details, fault evidence, CheckMend status and certified-erasure records where relevant to a transaction.
• Communications data, including emails, WhatsApp messages, form submissions, call notes, instructions, complaints and correspondence history. Calls are not recorded unless we tell participants in advance and have a lawful basis.
• Technical and usage data, including IP address, browser, operating system, device type, approximate location derived from IP, referral source, pages visited, interaction events, timestamps and cookie or analytics identifiers.
• Marketing and preference data, including subscription status, consent record, topics of interest, engagement with our communications and unsubscribe or objection records.

Sensitive data, device data and minors

Our website and services are designed for businesses and adult professional contacts. They are not directed at children, and we do not knowingly seek personal data from anyone under eighteen through trade or commercial forms.

We do not normally need special-category data such as health, biometric, political, religious, trade-union or sexual-life information. Please do not include such data, national identity documents, passwords or unrelated personal information in a general enquiry unless we specifically request it through an appropriate secure route and explain why it is required.

Devices supplied through buy-back, asset-clearance or related services may contain end-user data. The organisation supplying those devices remains responsible for lawful transfer and for following agreed preparation instructions. Any processing or certified erasure we perform on that device data is governed by the relevant service instructions, contract and controller or processor responsibilities, not by treating the device contents as ordinary website-enquiry data.

How we collect personal data

We obtain personal data from several direct and indirect sources. Where information comes from another person within your organisation, a trade reference or a public source, we use it only for a relevant and lawful business purpose.

• Directly from you through trade applications, quotation requests, supplier introductions, sell-your-devices enquiries, contact forms, subscriptions and other website forms.
• Through email, WhatsApp, telephone calls, meetings, stock discussions, purchase orders, contracts, invoices, delivery instructions, warranty cases and other correspondence.
• Automatically through essential website technology, server logs, cookies and analytics or measurement tools, subject to the consent rules described in our Cookie Policy.
• From your employer, colleague, agent, adviser, customer or another authorised person involved in the commercial relationship.
• From public business registers, VAT and company-verification services, professional websites, sanctions lists, fraud-prevention sources, trade references and other lawful due-diligence sources.
• From couriers, payment providers, diagnostic platforms and other service providers where they return an order, payment, delivery, device or compliance status to us.

Lawful bases for processing

We identify a lawful basis before processing personal data. The basis depends on the purpose and context, and more than one purpose may apply to the same business record.

• Contract and pre-contract steps: responding to a requested quotation, assessing a trade application, opening an account, processing an order, arranging delivery, handling payment and administering a warranty or service request.
• Legitimate interests: developing and protecting our B2B operation, managing professional relationships, improving services, maintaining security, preventing fraud, conducting proportionate trade due diligence, recovering debts and establishing or defending legal claims. We balance these interests against the individual's rights and reasonable expectations.
• Legal obligation: keeping accounting, VAT, tax, customs and company records; complying with sanctions, fraud-prevention or other applicable regulatory duties; and responding to a binding request from a court, regulator or competent authority.
• Consent: sending subscription-based stock lists, newsletters and marketing communications where consent is required; placing non-essential cookies; and any other purpose for which we specifically request consent.
• Existing business communications: where applicable law permits a limited communication about our own similar B2B products or services to an existing contact, we may rely on legitimate interests subject to a clear and free opt-out in every message.

How we use personal data

We use personal data only for stated, compatible and lawful purposes. If we need to use it for a materially different purpose, we will explain that purpose and the relevant legal basis before the new processing unless law provides an exception.

• Responding to enquiries, quotation requests and requests for information.
• Assessing and managing trade-account, supplier, buy-back, sourcing, consultancy and distribution relationships.
• Preparing offers, processing orders, issuing invoices, matching payments, arranging refunds and maintaining commercial records.
• Coordinating collections, deliveries, customs information, tracking and proof of delivery.
• Managing grading questions, warranties, RMA cases, credit notes, device verification and dispute resolution.
• Conducting proportionate due diligence, sanctions screening, fraud prevention and legitimacy checks on prospective and existing partners.
• Sending stock offers, new-arrival notices and commercial updates to contacts who have validly subscribed or where another lawful route applies.
• Operating, securing, measuring and improving the website, forms, systems and visitor experience.
• Meeting Spanish, EU and any applicable UK accounting, VAT, tax, customs, legal and regulatory obligations.
• Protecting our rights, systems, staff, stock and legitimate trading partners and establishing, exercising or defending legal claims.

Required and optional information

Fields marked as required are needed to identify the business contact, understand the request, take pre-contract steps or maintain an appropriate compliance record. Other fields are optional but may help us respond more accurately or quickly.

If required information is not provided, we may be unable to assess an application, issue an accurate quotation, verify a counterparty, complete an order, arrange delivery or respond to a rights request. We will not require information that is disproportionate to the stated purpose.

Data sharing and recipients

We do not sell personal data. We do not give personal data to unrelated third parties for their own marketing. We share only what is reasonably necessary with trusted recipients that need the information for a defined service, transaction or legal purpose.

• Our six logistics partners: DHL Express for international and priority EU shipments, FedEx for global routes, UPS for European parcel and freight, GLS for our pan-European road network, Correos Express for Spanish domestic distribution and Royal Mail for UK buyers.
• Banks, payment providers and financial-service partners for payment matching, transaction processing, fraud checks, refunds and required financial controls.
• Website, cloud, email, communications, analytics, customer-management and IT support providers that host, secure, maintain or support our business systems under appropriate instructions and contracts.
• Diagnostic, device-verification and certified-erasure providers where their service is required for a batch, claim, compliance record or customer instruction.
• Accountants, auditors, insurers, lawyers and other professional advisers where they need the information to provide advice, assurance or representation.
• Tax, customs, judicial, regulatory, law-enforcement or other competent authorities where disclosure is legally required or necessary to protect legal rights.
• A genuine buyer, investor, lender or successor in connection with a proposed business transfer, restructuring or financing, subject to confidentiality and data-protection safeguards.

International data transfers

Our trading relationships and service providers may involve the United Kingdom, the European Economic Area and countries outside both areas. A transfer occurs only where it is necessary for the relevant business purpose and a lawful transfer route is available.

Transfers from the EEA to the United Kingdom may rely on the European Commission's UK adequacy decision while it remains valid and applicable. Transfers from the UK to the EEA may rely on the United Kingdom's adequacy regulations. These adequacy routes generally avoid the need for separate standard clauses for that transfer.

For a transfer to a country or recipient not covered by an applicable adequacy decision, we may use the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, together with an appropriate transfer assessment and supplementary safeguards where required. A limited legal derogation is used only where the law permits it.

You may ask the privacy contact for information about the safeguard relevant to your data. We may redact confidential commercial or security information from any copy supplied.

Data retention

We keep personal data only for as long as reasonably necessary for the purpose collected, including contract performance, relationship management, accounting, tax, customs, warranty, fraud prevention and legal claims. We then securely delete, anonymise or place the record beyond ordinary use, subject to backup cycles and legal holds.

• Commercial books, correspondence, invoices and supporting business records are normally retained for at least six years from the last relevant accounting entry in line with the Spanish Commercial Code, or longer where a tax, customs, anti-money-laundering, dispute or other rule requires it.
• Records connected with an applicable UK tax or reporting obligation are kept for the statutory UK period relevant to that record, which may extend to approximately seven years depending on the record and accounting date.
• Approved trade-account and active partner data is kept throughout the relationship and then for the period needed to meet legal, audit, warranty, fraud-prevention and claims requirements.
• Unsuccessful or incomplete applications and routine enquiries are normally kept for up to two years after the last meaningful contact unless a shorter period is appropriate or a legitimate fraud, dispute or compliance reason requires longer retention.
• RMA, device-identity, delivery and complaint records are retained with the related transaction record for the applicable commercial and legal period.
• Marketing-subscription data is kept until consent is withdrawn or the record is inactive and no longer useful. A minimal suppression record may be retained so that an unsubscribe or objection continues to be respected.
• Server logs, cookie identifiers and analytics data are retained for the security period or analytics setting described in the Cookie Policy or relevant consent information.

Data security and incident response

We use proportionate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No internet or storage system can be guaranteed completely secure, but our controls are reviewed in light of the nature of the data and the risk involved.

• Role-based access and limits on who can see business, transaction and device information.
• Appropriate account, authentication, network, endpoint, backup and communications safeguards.
• Supplier selection and contractual controls for service providers handling personal data.
• Staff confidentiality expectations and practical handling procedures for commercial records.
• Blancco certified erasure for devices processed through an agreed data-erasure service, producing an auditable record where certification is included in the service.
• Incident assessment, containment and notification procedures. We notify the competent authority and affected individuals where applicable law requires it.

Marketing and communication preferences

A visitor who subscribes to stock offers or commercial updates gives consent to receive the communications described at the point of sign-up. Every marketing email provides a practical unsubscribe route, and a contact may also withdraw consent or object by emailing [email protected].

Operational messages about an enquiry, account, quotation, order, delivery, payment, warranty or security matter are service communications, not marketing. We may still need to send those messages while the relevant relationship or legal obligation continues.

We do not sell or rent subscription lists. We do not use consent to justify unrelated processing, and choosing not to receive marketing does not prevent a business from requesting quotations or purchasing stock.

Cookies and analytics

The website uses essential storage technologies needed for security and functionality and may use optional analytics or similar technologies where a valid consent or other lawful route applies. The categories, providers, purposes, durations and controls are explained in our separate Cookie Policy.

You can manage optional cookies through the available consent controls and browser settings. Blocking essential technology may prevent parts of the website from working correctly. Withdrawing optional-cookie consent does not affect the lawfulness of earlier processing.

Your data-protection rights

Depending on the applicable law and circumstances, an individual may exercise the following rights. These rights are not absolute, and an exemption may apply where, for example, data must be retained for a legal obligation, another person's rights or a legal claim.

• Access: ask whether we process your personal data and request a copy together with information about the processing.
• Rectification: ask us to correct inaccurate data or complete information that is materially incomplete.
• Erasure: ask us to delete personal data where a valid ground applies and no overriding retention basis remains.
• Restriction: ask us to limit processing in the circumstances defined by law.
• Portability: receive qualifying data you provided in a structured, commonly used, machine-readable format, or ask for it to be transmitted where technically feasible.
• Objection: object to processing based on legitimate interests because of your particular situation. You may object to direct marketing at any time and we will stop using your data for that purpose.
• Withdraw consent: withdraw consent at any time where consent is the basis, without affecting earlier lawful processing.
• Automated decisions: ask not to be subject to a qualifying decision based solely on automated processing that produces legal or similarly significant effects, subject to the exceptions in law.
• Complaint: complain to the competent supervisory authority if you believe personal data has been processed unlawfully.

How to exercise a right

Send the request to [email protected] with the subject Privacy Request. State your full name, the business or organisation through which you dealt with us, the contact details previously used and the right you wish to exercise. You may also use the form below.

We normally respond without undue delay and within one month. Where a request is complex or several requests are received, the period may be extended by up to two further months as permitted by law, and we will explain the extension within the first month.

We may ask for limited additional information to verify identity and authority before disclosing, changing or deleting data. This protects the requester and other people. Rights are normally free, but the law permits a reasonable fee or refusal where a request is manifestly unfounded or excessive. We will explain any refusal and the available complaint route.

Automated decisions and profiling

We may use ordinary analytics, form validation, security monitoring and commercial prioritisation to support our team. We do not currently make decisions about trade access, orders, supplier approval or individual rights solely by automated processing where the decision produces legal or similarly significant effects for the individual.

If that position changes, we will provide the information and safeguards required by applicable law before introducing the processing, including meaningful information about the logic and a route to human review where required.

Complaints and supervisory authorities

Please contact us first so we can investigate and try to resolve a privacy concern promptly. This does not remove your right to approach a supervisory authority.

• Spain and principal EU authority: Agencia Española de Protección de Datos, AEPD, at aepd.es.
• United Kingdom, where UK GDPR applies: Information Commissioner’s Office at ico.org.uk.
• An individual in another EEA country may also contact the supervisory authority in the country of habitual residence, place of work or alleged infringement where the GDPR permits.

Changes to this Privacy Policy

We may update this policy to reflect changes in law, regulatory guidance, technology, services, providers or business processes. The current version is published on this page and the last-updated date identifies when it was most recently revised.

Where a change materially affects an active processing relationship, we will take reasonable steps to provide an additional notice through an appropriate contact route. We will request fresh consent if a new purpose requires consent rather than assuming that earlier consent covers it.

Privacy enquiries and requests

For a privacy question, rights request or concern, contact the controller using the details below. Giving the company relationship and the email address previously used helps us locate the correct records without collecting unnecessary information.

• Email: [email protected].
• WhatsApp: +34 662 90 94 48.
• Registered address: Carrer Creu Coberta, 77, Sants-Montjuic, 08014 Barcelona, Spain.
• Mark written correspondence for the attention of the Privacy Contact.