Privacy & Cookie Policy
1. Data controller
The controller responsible for processing personal data collected through the Website is TRAVENTIX SOLUTIONS SL, with Tax ID (CIF) B88652029 and registered address at Av. del Litoral, 12-14, 5th floor, Ciutat Vella, 08005 Barcelona.
2. Data we collect
In the context of contracting and using RoamRapid's services, we process, among others, the following data: identification and contact data (name, email address); transaction data (product purchased, amount, order reference); technical device data required to activate the eSIM; mobile data usage data associated with the contracted service; and browsing data collected through cookies and analytics tools (see the Cookie Policy). We do not collect payment information (card numbers or other sensitive payment data), which is processed directly by Stripe under its own policies.
3. Purposes and legal basis for processing
Data is processed for the following purposes: (i) managing the purchase and activation of the eSIM service, on the basis of contract performance (Art. 6(1)(b) GDPR); (ii) managing service provisioning through our wholesale connectivity provider, on the same basis; (iii) handling support and refund requests, on the basis of contract performance and the legitimate interest in providing adequate customer care; (iv) complying with legal, tax and record-keeping obligations (Art. 6(1)(c) GDPR); (v) sending commercial communications about our own products, where the Customer has given express consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time; (vi) analysing use of the Website, on the basis of consent given through the cookie banner.
4. Recipients and data processors
To provide the service, RoamRapid shares certain data with the following data processors, with whom it maintains (or will maintain) the corresponding data processing agreement under Article 28 GDPR: the wholesale eSIM connectivity provider, which receives only the data strictly necessary to provision the service (order identifier, plan purchased); Stripe, as the payment processing provider (RoamRapid itself is the Merchant of Record for the sale); our customer support platform; transactional email and infrastructure providers (AWS); and analytics (Amplitude) and tag management (Google Tag Manager) providers. Data is not shared with third parties for purposes other than those described here, except where legally required.
5. International data transfers
Some of the providers referred to in the previous clause may process data outside the European Economic Area. In such cases, the transfer is based on the safeguards provided for under the GDPR (European Commission standard contractual clauses or another equivalent adequacy mechanism).
6. Retention period
Data will be retained for the duration of the contractual relationship and, thereafter, for the periods required by applicable law: as a general rule, data linked to tax and accounting obligations will be retained for the legally established period (currently up to four years for tax purposes, without prejudice to longer periods required under other regulations); data processed on the basis of consent (commercial communications, non-essential cookies) will be retained until such consent is withdrawn.
Support tickets handled through our customer support platform are retained for 24 months from closure to allow for service-quality follow-up and handling of any related claims.
7. Rights of data subjects
The Customer may exercise, at any time, their rights of access, rectification, erasure, restriction of processing, portability and objection, and may withdraw consent where processing is based on it, by contacting info@roamrapid.com, specifying the right they wish to exercise and enclosing a copy of an identity document. Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if they consider that the processing of their data does not comply with applicable law.
8. Security
RoamRapid applies reasonably appropriate technical and organisational measures to safeguard the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed.
9. Minors
The Website and RoamRapid's services are aimed exclusively at adults with legal capacity to enter into contracts. We do not knowingly collect data from minors.
Automated individual decision-making
RoamRapid does not carry out automated decision-making, including profiling, that produces legal effects concerning the Customer or similarly significantly affects them.
13. Changes to this Policy
RoamRapid may update this Privacy & Cookie Policy to reflect legislative or case-law developments, industry practices, or changes to the analytics or marketing tools used. The Customer is advised to review this page periodically.