This Privacy Policy explains how Omanero Technologies, S.L. ("Omanero") processes your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: Omanero Technologies, S.L. — Tax ID B-XXXXXXXX — Madrid (Spain).
  • Contact / Data Protection Officer: privacidad@omanero.com

2. Data we process

  • Registration and profile data: first name, last name, email, country, language, password (encrypted).
  • Activity data: connected partners, public identifiers (UID), cashback events and calculations, referrals.
  • Reward payout data: payout method and identifiers (e.g. wallet or IBAN) you provide.
  • Technical data: IP address, device, browser and usage data (see Cookie Policy).
  • Verification data: as needed for fraud prevention or regulatory compliance, where applicable.

3. Purposes and legal bases

  • Providing the Service (account, cashback calculation and payment): performance of the contract (Art. 6.1.b GDPR).
  • Fraud prevention and security: legitimate interest (Art. 6.1.f) and, where applicable, legal obligation (Art. 6.1.c).
  • Service (transactional) communications: performance of the contract.
  • Marketing communications and analytics/marketing: consent (Art. 6.1.a), revocable at any time.
  • Compliance with legal obligations (accounting, tax): legal obligation.

4. Recipients and processors

We process data with providers acting as processors (e.g. cloud infrastructure and authentication, email, analytics), bound by contracts under Art. 28 GDPR. We share with Partners only the data strictly necessary to attribute your activity and calculate cashback. We do not sell your personal data.

5. International transfers

Some providers may be located outside the European Economic Area. In such cases, transfers rely on adequacy decisions or appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses).

6. Retention

We keep data while the user relationship exists and, after it ends, for legally required periods (commercial, tax) and those needed to address possible liabilities. Thereafter, data is deleted or anonymised.

7. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent, by writing to privacidad@omanero.com. You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with the rules.

8. Security

We apply appropriate technical and organisational measures to protect your data (encryption in transit, access control, per-user segregation). No system is infallible; in the event of a security breach affecting your rights, we will act in accordance with applicable notification rules.

9. Minors

The Service is not directed at minors. We do not knowingly collect data from minors.

10. Changes

We may update this Policy. The version in force, with its date, is the one published on this page.