Privacy policy

Who is responsible

ANVI TELCOM SL is responsible for customer data processed for sales and customer support through todomobile.mobi. Its registered address and privacy contact are below. A technology partner provides the storefront and eSIM fulfilment platform on its behalf; payment providers and mobile-network suppliers process the information needed for their respective services.

Information and purposes

We process the contact and account details you provide, order and payment references, eSIM identifiers and service-status or usage information, support messages, and technical information such as IP address, browser and security logs. We use this information to take and deliver orders, manage accounts, support connectivity, handle refunds, prevent fraud and meet legal obligations. Payment details are handled by the payment provider; the storefront does not receive your full card security credentials.

App notifications

The Todo Mobile Travel eSIM app sends notifications only if you turn them on: «News & offers» (new articles, offers and the partner programme) and, when you are signed in, «Account notifications» (your eSIMs, replies from support, and updates in the Partner and Work panels you can access). Both are off until you turn them on. When you do, the app sends us the notification token that your phone's push service issues (Google Firebase Cloud Messaging on Android, Apple Push Notification service on iPhone), with the app version, the language and the wording you agreed to. We use it only to send the notifications you chose, through that service. You can turn either off at any time in the app's Profile, or block notifications in your phone's settings; we then stop sending them.

Business calls

If your company gives you a business phone line in the app, you can make and answer calls over the internet. The app uses your microphone only during a call you place or answer, and only after you allow microphone access; buying and using an eSIM never needs it. Call audio travels encrypted from your phone to the calling service our technology partner runs for us, which connects it to the other party; calls to and from ordinary phone numbers continue over the telephone network through telecommunications carriers. Calls are not recorded, with exceptions your company controls. If it sets an automated assistant to answer callers on its line, what a caller says to the assistant before the call reaches a person (including you, if you call that line) is recorded in short clips and turned into text, so the assistant can reply. Each clip is deleted as soon as the assistant has answered it. The text of the conversation, what the caller said and what the assistant replied, is used only to run the assistant during the call and is kept for 90 days, then deleted. AI service providers engaged by our technology partner process the caller's words and the conversation text for this. Once a person answers, nothing more is recorded. Your company may also set an AI receptionist to answer its line. It talks with the caller live through an AI service provider engaged by our technology partner, and can take a message, book an appointment or pass the call to a person. The caller's number, the text of the conversation, a summary of it and any message or appointment details it takes are kept for the period your company sets, from 30 to 365 days (90 days by default), and then deleted. Messages, summaries and bookings it passes on to your company stay with your company. For each call we keep a record of the direction, the other number, the company line used, the start and end times, the duration, the outcome and, for a charged call, its cost, to show your call history and to charge the call to your company's calling balance. If the record cannot reach us at once, a copy waits briefly on the calling server and is deleted there once delivered. Each charge appears in the history of the balance that pays for your company's calls, with the number you dialled (for an incoming call, your company's line), the minutes and the cost; the holder of that balance can see it. The calling server also keeps a technical log of how calls are handled, including the numbers involved, to operate and secure the service. To ring your phone while the app is closed, the app registers your device with the calling service (on iPhone, with an Apple VoIP push token); signing out stops this. Your call history is deleted with your account; charges stay in the paying balance's history as billing records, kept as described under «Retention and cookies». You can withdraw microphone access in your phone's settings at any time; you then cannot make or answer calls in the app.

Legal bases

Processing necessary to fulfil your order or account request is based on the contract or steps you ask us to take before it. Tax, accounting and other required records are processed to comply with legal obligations. Security and fraud prevention rely on legitimate interests, balanced against your rights. Optional marketing and non-essential cookies require consent where applicable; consent can be withdrawn without affecting earlier lawful processing.

Recipients and international processing

Information needed to deliver the service is shared with our storefront and eSIM fulfilment platform provider, the selected payment provider, eSIM and mobile-network suppliers, and hosting, communications and support providers. Authorities or advisers may receive information where legally required or necessary to resolve a claim. These services can involve processing outside the EEA, including the United States. Contact us for details of the recipients, locations and transfer safeguards applicable to your order.

Retention and cookies

Order and billing records are kept for the periods required by tax and accounting law and to resolve claims. Other personal data is retained only as needed for its stated service, support or security purpose. Necessary cookies support login, checkout, security and preferences; optional cookies are subject to the choices shown on the cookie page. You can ask us for the retention period or criteria for a particular record.

Your rights

Subject to applicable law, you can request access, correction, erasure, restriction or portability of your personal data, object to processing, and withdraw consent. Email info@todomobile.mobi; we may need proportionate information to verify your request. You may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or your competent data-protection authority. Providing order and contact information is necessary to fulfil a purchase; without it we may be unable to provide the service.

Contact the merchant