Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

TheONE GLOBALJoaquin Fuster 26907007 Palma de MallorcaSpain

Tax ID (NIF): ESX5155070B

Email: info@theone-superapp.com

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data such as your IP address, the date and time of access, the page requested and your browser type, in order to deliver the website and protect it against misuse.

The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

We only use technically necessary cookies and no cookies for advertising or analytics:

• Session cookie: keeps you signed in to your account. It is encrypted and deleted after 7 days at the latest or when you sign out.
• Language cookie: remembers whether you use the website in German or English.

No consent is required for these cookies, as they are necessary for the website to function.

To understand how our website is used, we keep our own cookieless statistics. These record the page visited, the referring website, campaign parameters (e.g. utm_source), device type, and the country and city that our hosting provider derives from the IP address.

Your IP address is not stored. To count unique visits, we derive an encrypted value from your IP address and browser identifier that changes daily and cannot be used to identify you. Nothing is stored on your device.

The legal basis is our legitimate interest in improving our service (Art. 6(1)(f) GDPR).

When you apply to TheONE, we process the information from the application form, in particular:

• as a member: name, email address, phone number, date of birth, country and city, and the details you give about your interests, goals and other wishes
• as a business partner: company and brand name, sector, team size, address, website, names of the owner and contact person, email address, phone number, description of services and target clientele, and uploaded images

We use this data to review your application, contact you and, if approved, set up your account. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

If an application is declined, we keep the email address and phone number only in encrypted (hashed) form, to recognise repeat applications.

After approval you create an account with a username and password. The password is only stored in encrypted form. We process your account data to give you access to TheONE and the agreed services (Art. 6(1)(b) GDPR).

Application and account data are stored in a database provided by MongoDB, Inc., 1633 Broadway, New York, NY 10019, USA. Images uploaded by business partners are stored with Vercel (Vercel Blob). Transfers to the USA are covered by the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

To send emails such as confirmations of receipt, approvals, activation links and notifications, we use the service Resend (Resend, Inc., USA). Your email address and the content of the message are processed for this purpose (Art. 6(1)(b) GDPR).

Payments for memberships and partnerships are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe does not pass your payment details, such as card data, on to us; we only receive the information needed to match the payment. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). For more information, see Stripe's privacy policy.

When you use the AI assistant TheONE POWER AI, your messages are sent to and processed by Anthropic, PBC, 548 Market St, San Francisco, CA 94104, USA, in order to answer them. According to Anthropic, data sent through its API is not used to train AI models. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). Please do not enter particularly sensitive data in the chat that is not needed for your request.

For the Christmas lottery we use the data from your application to run the draw and to notify winners by email. It is not passed to third parties for marketing.

Terms and conditions of the Christmas lottery

We keep personal data only for as long as it is needed for the purpose concerned or as long as statutory retention obligations apply, for example tax obligations for invoice data. After that, the data is deleted.

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

To exercise these rights, please contact info@theone-superapp.com.

You also have the right to lodge a complaint with a data protection supervisory authority; in Spain this is the Agencia Española de Protección de Datos (www.aepd.es).

We update this privacy policy when our service or the legal requirements change. The version published on this page applies.