Privacy Policy

Last updated: 16/09/2026 · V40.

1. Data Controller

DAVATEL is the trade name used by PLATAFORMA DE TRANSACCIONES ELECTRONICAS TODORECARGAS, S.L.U. on www.davatel.com.

There is currently no designated Data Protection Officer. For any privacy-related inquiries, you may use the email address hola@davatel.com.

2. Data that may be processed by DAVATEL

DAVATEL may process the following data, depending on the form, service, or procedure used:

• Full name (first and last names).
• DNI, NIE, or CIF (national identification or tax identification numbers).
• Telephone number, email address, and postal address.
• Postal code and service coverage information.
• IBAN or bank documentation.
• Current operator, requested plan, and information required to process the registration.
• Customer signature, signed contract, and attached documents.
• DNI/NIE, CIF, Form 036 (tax registration form), signed contract, and IBAN documentation.
• Information regarding distributors, wholesalers, platform users, commissions, and billing.
• IP address, online identifiers, cookies, access logs, and technical browsing data.
• Chat conversations, AI assistant, WhatsApp, calls, emails, or other communications held with DAVATEL or authorized distributors.

3. Purposes of processing

Data will be processed for the following purposes:

• Responding to inquiries received via forms, telephone, email, WhatsApp, or chat.
• Managing requests for service activation, number portability, coverage checks, or the contracting of telecommunications services.
• Sharing necessary data with operators, wholesalers, or partners to process requests.
• Managing users of the private platform, including administrators, distributors, and wholesalers.
• Managing commissions, invoices, payments, cancellations, refunds, and settlements.
• Verifying the identity, business activity, legal representation, tax status, or bank account details of distributors and wholesalers.
• Providing support, assistance, commercial help, and the operation of the AI ​​assistant.
• Sending communications related to specific requests.
• Sending commercial communications via telephone, WhatsApp, SMS, or email, provided there is consent or another valid legal basis.
• Measuring conversions, analyzing website usage, improving services, and conducting online advertising, in accordance with the cookie policy.
• Complying with legal, tax, accounting, data protection, telecommunications, consumer protection, and fraud prevention obligations.

4. Legal basis

The legal bases for processing may include:

• Consent: when the user accepts forms, commercial communications, or non-technical cookies, or voluntarily provides data.
• Execution of a request or a contractual/pre-contractual relationship: for processing sign-ups, requests, distributor agreements, commissions, and requested services.
• Legal compliance: for tax, accounting, legal, telecommunications, or data protection obligations, or for handling complaints.
• Legitimate interest: for security, fraud prevention, internal management, defense against claims, and communications permitted by regulations, while always respecting the rights of the data subjects.

5. Disclosure of data to third parties

DAVATEL may disclose necessary data to operators, wholesalers, or partners in order to process requests. This includes, but is not limited to, Movistar, Vodafone, Orange, MasMovil/MASORANGE, Avatel, O2, Lowi, Digi, Finetwork, Humanity, and other operators or partners as required.

Within the platform, the administrator can view all sign-ups, data, and documents; distributors can only view information pertaining to their own customers; and wholesalers can view information pertaining to their assigned distributors.

Technology providers necessary for hosting the website, sending communications, maintaining systems, providing support, managing email, security, cookies, analytics, advertising, maps, videos, WhatsApp, or AI assistants may also have access to data.

The AI ​​provider used may be ChatGPT/OpenAI. Documents, credentials, or client-identifying data must not be entered into the assistant. Before sharing information with a provider, their involvement must be disclosed, and appropriate safeguards must be applied; contractual documentation must be submitted via the designated forms.

6. International data transfers

The use of technology providers such as Google, Meta, WhatsApp, YouTube, OpenAI/ChatGPT, or others may involve international data transfers. In such cases, these transfers will be carried out in compliance with the safeguards required by applicable regulations, such as adequacy decisions, standard contractual clauses, or other legally valid mechanisms.

7. Data retention

Contacts and inquiries that do not result in a contract are retained for the duration of their processing—typically up to 12 months—unless a claim or legal obligation necessitates a longer retention period. Contracts, settlements, and accounting documents are retained for the duration of the business relationship and in accordance with applicable legal timeframes; accounting documentation may need to be kept for six years. This does not imply a six-year retention period for every copy of an ID document (DNI), bank receipt, or consumer invoice; such items are retained only for as long as they are necessary for their specific purpose, after which they will be deleted or blocked, as appropriate. Opt-out (exclusion) lists contain only the minimum data required to respect an individual's objection. Records and conversations are retained only for the time necessary to fulfill their intended purpose—typically up to 12 months—unless incidents occur or legal liabilities are established.

8. Commercial calls and communications

DAVATEL, its authorized distributors, or its wholesalers may contact the user via telephone, WhatsApp, SMS, or email to manage a specific request when necessary for its processing.

Future commercial communications will require the user’s consent or another valid legal basis. Users may withdraw their consent or object to receiving such communications by writing to hola@davatel.com.

Calls may be recorded, where appropriate, for purposes of quality, security, request verification, and proof of consent; the user will be informed of this at the beginning of the call.

9. User rights

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability by writing to hola@davatel.com.

You may also withdraw your previously given consent at any time, without affecting the lawfulness of any processing carried out prior to such withdrawal.

If you believe that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

10. Minors

DAVATEL’s services are intended for individuals over the age of 18. Requests from minors will not be processed.

11. Security

DAVATEL will implement reasonable technical and organizational measures to protect personal data, limit access to authorized users, and prevent unauthorized access, loss, alteration, or misuse of the information.

Distributors and wholesalers are required to handle customer data in a confidential, lawful, and secure manner.

Additional information for the professional sector

We process data regarding identity, representation, business activity, contact details, billing, bank accounts, and necessary documentation provided by our partners in order to evaluate onboarding, manage contracts, grant access, and settle transactions. The legal bases for this processing include pre-contractual measures, the execution of a contract, legal obligations, and our legitimate interest in security and protection. Evidence of signature and acceptance includes the version, date, IP address, and other technical data required to verify the process.

Distributors have access to their own business activity; wholesalers have access to information concerning their specific network; and authorized personnel have access only to the information necessary for the performance of their duties. Authorization to access data does not permit the reuse of customer data for the user’s own prospecting or marketing purposes. If data is provided by a distributor, the distributor must inform the data subject about the recipients and the specific process being requested. You may request information regarding the origin of your data.

For electricity and gas, the full invoice, contact details, supply information, consumption data, and any proposals are processed in order to carry out the requested assessment. For the new electricity comparison tool, Auro receives the contact details, invoice information, supply data, and consumption figures necessary to prepare the comparison and the resulting report. If the account holder decides to proceed with a contract, the necessary identification, banking, and supply details are provided to Auro and the chosen energy supplier. Gana Energía or other partners may be involved in preliminary steps or in services that continue through their respective channels. Contract-related data and documentation are requested at the appropriate stage. Uploading an invoice does not change your energy supplier, nor does it activate a contract.

Professional access requires information about the partner; however, searching for tariffs does not require the entry of the customer’s personal identification details. Optional marketing communications are subject to a specific legal basis and are not a condition for submitting a request. The comparison tool does not make automated decisions that have legal effects on the customer.

Requests regarding data rights are generally addressed within one month; if an extension is legally permitted due to the complexity or volume of requests, you will be notified within that initial one-month period. Additional information may be requested to verify your identity, though this does not automatically require the submission of a full copy of your national ID (DNI). You may file a complaint with the AEPD (Spanish Data Protection Agency).

Revision: September 17, 2026 · V41 (electricity comparison tool).