Privacy Policy

Last updated: December 03, 2025

1. Introduction

At Hoop Solutions, SL (hereinafter “TRIBBU”), we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it. Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), TRIBBU informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file.

2. Responsible for processing

  • Titular: Hoop Solutions S.L.
  • Domicilio social: Calle Bravo Murillo, 231, 2ºDcha, 28020, Madrid
  • C.I.F.: B88304126
  • Registro público: Registro público: Tomo 38.422, Folio: 92, Nº de hora Registral: 683510
  • E-mail DPO : dataprotection@tribbuapp.com
    ‍

3. Collection and processing of personal data

The category of personal data we collect from the various forms available on the website, such as Request a demo, Carpooling request

  • First and last name
  • Phone number and corporate email address
  • Company name and number of employees

Browsing information:

  • IP address, agent user, date and time you accessed our services, internet browser you use, and data about your device's operating system.

Any other information or data you choose to share with us. In some cases, it is mandatory to complete the data collection form in order to access and enjoy certain services offered on the website; likewise, failure to provide the requested personal data or to accept this data protection policy will make it impossible to subscribe, register, or participate in any of the promotions in which personal data is requested. The purpose for which we process your personal data is as follows:

  • To manage requests for information about our services.
  • To develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website.
    ‍

4. Legal basis for the processing of your data

  • The legal basis for processing your data as mentioned above is:
  • Consent of the interested party to receive information about our services and products through contact forms and/or email.
  • Legitimate interest in processing our customers' data for direct marketing purposes
  • Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.

‍

5. Retention of your personal data

The processing of data for the purposes described above will be maintained for the time necessary to fulfill the purpose for which it was collected and/or until you revoke your consent, without prejudice to compliance with legal obligations arising from the processing of data and when necessary for the formulation, exercise, or defense of potential claims, provided that applicable law permits it. For more information, please contact us at dataprotection@tribbuapp.com.

6. Transfer of your data to third parties

The data processed by TRIBBU is hosted in the EU and processed within the EU or in a third country that the European Commission considers to offer an adequate level of security, or by service providers that have entered into binding agreements that fully comply with the law on transfers to third countries.

In this regard, your data will be stored in the europe-west4-a region (Port of Ems, Netherlands, Europe), on Google Cloud Platform (GCP) servers.

Other recipients of your data may include government agencies and administrations, to the extent that we are legally obliged to do so, and service providers such as tax advisors or lawyers. TRIBBU strives to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties are required to ensure that the information is treated in accordance with data privacy regulations.

7. Exercising your rights and how you can enforce them.

You can send your communications and exercise your rights by sending a request to the following email address: dataprotection@tribbuapp.com. In accordance with the GDPR, you have certain rights when it comes to our processing of your personal data:

  • Right to be informed: You have the right to receive clear, transparent, and easily understandable information about how we use your personal data and your rights.
  • Right of access: You have the right to obtain access to your personal data.
  • Right to rectification: You have the right to have your personal data rectified if it is inaccurate or incomplete.
  • Right to erasure: This right allows you to request the erasure or deletion of your personal data when there is no compelling reason for us to continue using it. This is not an absolute right to erasure and exceptions apply.
  • Right to restrict processing: You have the right to “block” or suppress the further use of your personal data. When processing is restricted, we may continue to store your personal data, but we cannot continue to use it.
  • Right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
  • Right to object to processing: You have the right to object to certain types of processing.
  • Right not to be subject to an automated decision: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects (or similarly significant effects) for you.

In some cases, the request may be denied if you ask for the deletion of data necessary for compliance with legal obligations. Likewise, if you have a complaint about data processing, you can file a complaint with the competent data protection authority.

8. Responsible for the accuracy and veracity of the data provided

The user is solely responsible for the accuracy and correctness of the data provided, exempting TRIBBU from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it duly updated. The user undertakes to provide complete and correct information in the registration or subscription form. TRIBBU reserves the right to terminate the services contracted with users in the event that the data provided is false, incomplete, inaccurate, or out of date. TRIBBU is not responsible for the accuracy of information that it has not produced itself and which is indicated as coming from another source, and therefore does not assume any responsibility for any hypothetical damages that may arise from the use of such information. TRIBBU reserves the right to update, modify, or delete the information contained on its web pages and may even limit or deny access to such information.

9. Processing of personal data of minors

In principle, our services are not specifically aimed at minors. However, in the event that any of them are aimed at minors under the age of fourteen, in accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, of December 5 (LOPDGDD), TRIBBU will require the valid, free, unequivocal, specific, and informed consent of their legal guardians for the processing of minors' personal data. In this case, the identity document or other form of identification of the person giving consent will be required. In the case of those over fourteen years of age, the data may be processed with the consent of the user, except in those cases where the law requires the assistance of the holders of parental authority or guardianship. You have the right to receive a copy of the personal data we hold about you (your right to access the data).

10. Security measures implemented to protect your personal data

At TRIBBU, we implement state-of-the-art security standards to prevent unauthorized access, maintain data accuracy, and ensure the correct use of information. 

Our organization is ISO 27001 certified, which guarantees that we apply international best practices in information security management.

We also apply security measures to ensure the confidentiality, availability, and resilience of personal data processing systems.

We apply these same security rules or standards when working with business and technology partners. We only select and hire external processors and suppliers who have adequate security measures in place and provide sufficient safeguards, including technical and organizational measures, to ensure the adequate protection of the data we entrust to them.

11. Privacy Policy Update

This privacy policy may be modified. We recommend that you review the privacy policy periodically.

12. Links to other websites

The website https://www.tribbuapp.com/ may contain links to other websites. By clicking on one of these links and accessing an external website, your visit will be subject to the privacy policy of that website, and TRIBBU will be released from any responsibility regarding its privacy policy.