1. Data Controller

Controller: UAIOS S.L.U. (UAIOS) Tax ID:  Address: Avenida de Manoteras 34, Madrid, Spain Data Protection Officer: UAIOS Privacy Department Privacy contact: privacidad@uaios.io

2. Processing Purposes

• Respond to information and contact requests made through the Website.
• Manage service provision, contractual relationship, and billing.
• Customer service and technical support.
• Sending informational or commercial communications about Manbox services, if authorized by the user.
• Compliance with applicable legal obligations.

3. Legal Basis

• Consent of the data subject (Art. 6.1.a GDPR) for forms and commercial communications.
• Performance of a contract (Art. 6.1.b GDPR) to provide requested services.
• Legal obligation (Art. 6.1.c GDPR) in tax, accounting, or consumer matters.
• Legitimate interest (Art. 6.1.f GDPR) for Website security and service improvement.

4. Data Retention Periods

Data will be retained for the time necessary to fulfill the purpose for which it was collected and to determine possible liabilities arising from the processing. In the contractual sphere, data will be retained for the duration of the relationship and subsequently for the periods necessary to comply with legal obligations.

5. Data Recipients

As a general rule, data will not be disclosed to third parties, except when required by law or when necessary for service provision (e.g., technology providers, hosting or messaging services), with whom corresponding data processing agreements will be signed.

6. User Rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability by sending an email to privacidad@uaios.io with the subject “GDPR Rights Exercise – Manbox” and indicating the right you wish to exercise. If you are not satisfied with the response, you may file a complaint with the Spanish Data Protection Agency (AEPD).

7. Security Measures

UAIOS S.L.U. implements appropriate technical and organizational measures to guarantee the security, confidentiality, and integrity of personal data and prevent its alteration, loss, unauthorized processing, or access.

8. Minors

Manbox services are not directed at minors under 14 years of age. If we detect that we are processing data of minors without valid consent, we will take appropriate measures for its deletion.

9. Policy Changes

We reserve the right to update this Privacy Policy to adapt to regulatory or processing changes. In case of substantial changes, users will be reasonably notified.