Privacy Policy

This policy covers two separate things: how we handle data on this website (Part A) and how we handle data when you rent a power bank from a MasBattery station (Part B).

PART A: THIS WEBSITE

3.1 Who we are. VISPROMASK, S.L., trading as MasBattery, is the data controller for personal data processed in connection with this website. For any data-protection question, contact [email protected].

3.2 What this site does and does not collect. This website has no newsletter forms. We only process personal data when you choose to contact us, through the contact form on the site, the chat assistant (section 3.12), email or WhatsApp, or when website analytics cookies are activated with your consent. Messages sent through the contact form are stored on our hosting provider, Cloudflare, Inc., and delivered to our team by email through Resend, Inc. (United States), acting as a processor, under the transfer safeguards in section 3.7.

3.3 Email correspondence. When you write to [email protected] (or any @masbattery.com address), we process the email address, name, and any other information you choose to include, for the purpose of replying to your enquiry and discussing potential services. Legal basis: performance of a contract or pre-contractual steps (GDPR Art. 6(1)(b)).

3.4 WhatsApp. When you message us on WhatsApp, messages are delivered through WhatsApp Ireland Limited (a Meta company), acting as a processor on our behalf and under its own terms. We receive your phone number, profile name, and message content; Meta may process this data in the United States and other jurisdictions. WhatsApp’s practices are governed by its Business Terms (https://www.whatsapp.com/legal/business-terms) and Privacy Policy. Legal basis: pre-contractual steps (GDPR Art. 6(1)(b)).

3.5 Website analytics cookies. With your consent (collected via the cookie banner), we use analytics tools to understand site usage and improve content. These tools may set cookies and collect IP address, device and browser information, pages visited, and referring URL. Legal basis: consent (Art. 6(1)(a)). You can withdraw consent at any time via the “Cookie settings” link in the footer. Specific tools and cookie names are listed in the Cookie Policy at /legal/cookies.

3.6 Who sees your data. We share personal data only with: our website host (Cloudflare, Inc., hosting and CDN, servers in the EU and worldwide) and any analytics provider configured by us; professional advisers under confidentiality; and authorities where legally required. We do not sell personal data.

3.7 International transfers. The data controller is established in Spain. Our website host (Cloudflare, Inc., hosting and CDN, servers in the EU and worldwide) and any analytics tools we use may process data outside the European Economic Area. Where that is the case, those transfers rely on the European Commission’s standard contractual clauses (Implementing Decision (EU) 2021/914) and the applicable supplementary measures.

3.8 Retention. Email correspondence: up to 24 months from your last interaction with us, unless we have an ongoing commercial relationship or a legal obligation to retain longer. Analytics data: up to 14 months.

3.9 Your rights. Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time without affecting prior lawful processing. To exercise these rights, write to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the supervisory authority in your country of residence.

3.10 Security. We apply reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and logging.

3.11 Changes. We may update this Policy. Material changes will be communicated on this page; the “Last updated” date above will reflect any revision.

3.12 Chat assistant. The chat window on this website is an AI assistant, not a person. If you use it, we process the messages you write and, only if you choose to fill in the short form it offers, your name, work email and venue name. Purpose: answering your questions about MasBattery and passing venue enquiries on to our team. Legal basis: our legitimate interest in answering the questions you send us (GDPR Art. 6(1)(f)) and, when you ask us to contact you, pre-contractual steps (Art. 6(1)(b)). The assistant runs on Workers AI, a service of Cloudflare, Inc., our website host, acting as processor. Your messages are processed on Cloudflare's network, and the transfer safeguards in section 3.7 apply. Chat logs record the messages, the page and the country the visit came from, not your IP address, and are deleted automatically after 30 days. To prevent abuse, a one-way code derived from your IP address is kept for up to two days. Contact details you leave through the chat are kept as set out in section 3.8 for email correspondence. Please do not write card numbers or other payment details in the chat.

3.13 Automated submission protection. We use Cloudflare Turnstile to protect website forms and chat against automated abuse. Cloudflare processes technical browser and network information for this security check. If the check cannot run, you can retry without losing your entered details or contact [email protected] directly.

PART B: MASBATTERY POWER BANK RENTAL SERVICE

Last updated: 18 August 2026

B.1 Controller VISPROMASK, S.L. · Trading as: MasBattery · NIF: B42707752 · Calle Antonino Vera 57, 4º D, 03600 Elda, Alicante, Spain · [email protected]

B.2 In short You do not need an app or an account to rent. We do not ask for your name, email or phone number. We process only the minimum data needed for the rental and the payment.

B.3 What we process From the rental: operation number, station, slot and battery identifiers, pick-up and return times, duration and amount. From the payment: the last four digits of the card, the amount, the date and time, and the cardholder name as passed by the card network to our payment provider. If you write to us: the content of your message and the contact details you use to send it.

B.4 What we do not process We do not collect your name, email or phone number in order to rent. There is no user account and no sign-up. We do not store your full card number.

B.5 Purposes and legal bases Providing the rental service and charging the corresponding amount. Basis: performance of the contract, GDPR Art. 6(1)(b). Keeping records of transactions. Basis: compliance with Spanish tax and accounting obligations, Art. 6(1)(c). Preventing fraud and recovering power banks that are not returned. Basis: legitimate interests, Art. 6(1)(f). Handling your questions, incidents and complaints. Basis: performance of the contract and legitimate interests, Art. 6(1)(b) and 6(1)(f).

B.6 Recipients Stripe Payments Europe, Ltd. (Ireland), payment services provider. The provider of the technical platform that operates the stations, acting as processor, and the host of that platform, acting as sub-processor. We do not sell or share your data with third parties for advertising purposes.

B.7 International transfers The technical platform that runs the stations is hosted in Singapore, and the provider’s technical staff located in China can access it for maintenance and support. Singapore has no adequacy decision from the European Commission. These transfers rely on the European Commission’s standard contractual clauses, controller to processor module, together with the applicable supplementary measures. The data reaching that platform is limited to what is listed in B.3 and does not include your name, email or phone number.

B.8 Retention Transaction records are kept for the periods required by Spanish tax and commercial law. Customer service correspondence is kept for as long as needed to resolve your case and for the applicable limitation periods.

B.9 Your rights You can exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to [email protected]. Because we do not collect identifying data, to locate a transaction we will need the station you used, the approximate date and time, and the last four digits of the card. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency, www.aepd.es.

B.10 Security We apply appropriate technical and organisational measures to protect the data against unauthorised access, loss or alteration, taking into account the minimal and non-identifying nature of the information processed.

B.11 Changes We may update this policy where necessary for legal, technical or operational reasons. The version that applies is the one published at the time of your rental.

B.12 Contact [email protected] · WhatsApp: +34 614 025 417 (WhatsApp messages only)