Privacy Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spain’s LOPDGDD, we inform you that the data controller for this website is:

Osotrade Gestiones S.L. (1st MAD Prep)
CIF: B87771226
Address: C/ Velázquez 27, 1º izq., 28001 Madrid, Spain
Email: info@1stmadprep.es

2. Purpose of data processing

The personal data collected will be used for the following purposes:

Responding to inquiries received via contact forms, email, or phone.
Providing the contracted prep and logistics services (FBA/FBM).
Fulfilling legal obligations (invoicing, tax, security).
Sending commercial communications related to our services, provided there is a prior B2B relationship or express consent.

3. Legal basis for processing

The legal bases for processing your data are:

Execution of a contract (B2B prep and logistics services).
Compliance with legal obligations.
Legitimate interest in maintaining relationships with professional clients.
Express consent for marketing communications.

4. Data retention periods

Client data: retained for the duration of the business relationship and, after termination, for the legally required period (5–6 years for tax/accounting).
Contact data: retained until the individual requests deletion.
Job applications/CVs: retained for up to 1 year.

5. Data sharing

No data will be shared with third parties unless legally required or necessary for service provision (e.g., carriers, hosting, software providers), all of whom are under Data Processing Agreements (DPAs).

6. International data transfers

If tools with servers outside the EEA are used (e.g., Google Workspace, Stripe, PayPal), data protection is ensured through Standard Contractual Clauses approved by the European Commission or other adequate safeguards.

7. Data subject rights

You may exercise your rights of access, rectification, erasure, restriction, objection, and data portability by writing to info@1stmadprep.es, indicating "Data Protection" in the subject line.
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your data is being processed unlawfully.

8. Information security

We apply reasonable technical and organizational measures (HTTPS, strong passwords, backups, access control). However, users are advised to take extra precautions (antivirus, device updates).

9. Confidentiality

All processed information is considered confidential and will not be used for purposes other than those outlined above.