Privacy Policy

Last updated: 19 September 2026 Print or save as PDF

We inform you that the website www.panotmobility.com (the "Website") is operated by Panot Mobility (hereinafter, "Panot"), with tax ID (NIF) B01593730 and registered office at Balmes 362 - 08006 Barcelona. "You" and "Your" refer to you as a user of our Website.

This privacy policy ("Privacy Policy") is intended to inform you of how we collect and use Your Information. This Privacy Policy, our Legal Notice, and our Cookie Policy make up the "Terms and Conditions" of our website.

Your access to and use of the Website implies your full acceptance of the Terms and Conditions of the Website. In this regard, if You access and use the Website, you undertake to comply with the provisions set out in the aforementioned legal documents. The provision of the Website service is limited to the period during which You are connected to the Website or to any of the services provided through it. Therefore, You must carefully read this Privacy Policy each time you intend to use the Website, as it may be subject to changes.

Definitions

Personal data
This is any information relating to an identified or identifiable natural person, such as, for example: first name and surname, national ID number (DNI), postal address, email address, images, data on tastes and hobbies, interests.

Data controller
This is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing. In this case, and unless otherwise indicated, Panot Mobility is the controller responsible for the processing of the data processed at www.panotmobility.com.

Data processor
This is the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. In other words, these are service providers of Panot Mobility that may have access to certain personal data for the provision of their services. The relationship between Panot Mobility and its data processors will always be governed by a contract specifically regulating the conditions of access to the data, as required by the legislation in force.

Recipient
This is the natural or legal person, public authority, agency or other body to which personal data are disclosed, whether or not a third party.

Data subject's consent
Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they, either by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Information processed as data controller

When you browse our website you may provide us with data through various means, including:

1. Data that you provide to us when using the data forms on the website or when you communicate with us through means such as email

The data will be processed for the purpose specified in each form. If you send us a message, we will process it for the purpose of managing the communications that may be established, on the basis of your request.

We may obtain your express consent for the purpose of sending you commercial communications through each data collection form, or through a request in an email message. In such cases, we will always inform you in advance of all aspects required by the applicable data protection regulations.

Likewise, if, once consent has been given, you no longer wish to receive commercial communications, you may revoke your authorisation by sending an email to hey@panotmobility.com.

2. Data that the website collects automatically during your browsing, in the event that you have previously given your consent under the terms specified in this privacy policy

Like most commercial websites, our website uses a technology called "cookies" (small pieces of data that your browser stores on the hard drive of your terminal) and web server logs to collect information about how our website is used.

For more information on how we use cookies, please see our Cookie Policy.

Who is the data controller?

Information about the entity responsible for processing the data.

The data controller is Panot. The regulations in force define the "data controller" as the entity that determines the purposes and means of the processing. Below we provide the details necessary for you to properly identify our company:

Information about the data controller:

Data controller: Panot Mobility S.L.
Address: Balmes 362 - 08006 Barcelona
Data protection contact: hey@panotmobility.com

Data processing activities under the responsibility of Panot Mobility

Management of communications through electronic means

Summary: the entity will process your data in order to send a response to your request or to the comments that you send us by email.

• Data subject to processing: we will process the data that you have provided to us in the email sent.
• Purpose of the processing: the purpose of processing the data is to manage the communications that may be established with data subjects who send us messages by email.

The data will not be used for a different purpose.

• Automated decisions: no profiling is carried out and no automated decisions are made.
• For how long will we keep your data? The data will be processed for the time necessary to manage your request or comment. Subsequently, the data will be deleted if no new conversation or interaction occurs between the parties within a period of one year.
• Legal basis for the processing: the legal basis for processing your data is your consent, which you give by voluntarily sending us your message.
• Obligation to provide the data and consequences of not providing it: you must provide us with your contact details, as otherwise we will not be able to contact you in order to manage your request or comment.
• Source of the data: the data subject themselves.
• Recipients of the data: no data will be disclosed to third parties.
• International data transfers: no international data transfers will be made.

Management of communications through contact forms

Summary: the entity will process your data in order to send a response to your request or to the comments that you send us through the contact forms on the website.

• Data subject to processing: we will process the data that you have provided to us in the website's contact form.
• Purpose of the processing: our website has contact forms in different areas of it. The purpose of processing the data is to manage the communications that may be established with users of the website who send us messages through them.

If you have expressly requested it, we will use your data to send you information about Panot Mobility's products.

• Automated decisions: no profiling is carried out and no automated decisions are made.
• For how long will we keep your data? The data will be processed for the time necessary to manage your request or comment. Subsequently, the data will be deleted if no new conversation or interaction occurs between the parties within a period of one year. In the event that you have authorised the receipt of commercial information, we will process your data until you revoke your consent.
• Legal basis for the processing: the legal basis for processing your data is your consent, which you give by ticking the acceptance box on each data collection form.
• Obligation to provide the data and consequences of not providing it: completing the form is completely voluntary. In any case, if you wish to communicate with us through this means, you must provide us with the data marked as "mandatory", as otherwise we will not be able to contact you in order to manage your request or comment.
• Source of the data: the data subject themselves.
• Recipients of the data: No data will be disclosed to third parties. Panot Mobility relies on the collaboration of information technology service providers that process the data in the name and on behalf of our entity. In these cases, following a strict provider selection process based on guarantees of compliance with data protection regulations, we will enter into the relevant data processing agreement with these entities.
• International data transfers: no international data transfers are made.

Receipt of Curriculum Vitae and participation in personnel selection processes

Summary: in the event that you send us your curriculum vitae, it will be included in future personnel selection processes provided that you send us a formal reply indicating that you expressly accept all the terms relating to the processing of the data.

• Data subject to processing: we will process the data that you provide to us in your curriculum vitae.
• Purpose of the processing: in the event that you send us your curriculum vitae, your data will be processed for the purpose of managing your participation in personnel selection processes at our entity.

The data will not be used for a different purpose.

• Automated decisions: no profiling is carried out and no automated decisions are made.
• For how long will we keep your data? The data will be processed for one year, after which the data will be deleted.
• Legal basis for the processing: the legal basis for processing your data is the performance of a contract or pre-contractual measures.
• Obligation to provide the data and consequences of not providing it: the submission of the data is completely voluntary. However, in the event that you provide us with your data through a specific data form, in order to participate in personnel selection processes you may be required to provide us with a minimum set of data so that we can properly identify you.
• Source of the data: the data must be provided by the data subject themselves.
• Recipients of the data: no data are disclosed to third parties.
• International data transfers: no international data transfers are made.

Reservation form

Summary: the entity will process your data in order to provide you with information about the selected product.

• Data subject to processing: we will process the identifying and contact data necessary to provide you with information about the product.
• Purpose of the processing: to provide you with information about the selected product and manage the reservation process, where applicable.
• Automated decisions: no profiling is carried out and no automated decisions are made.
• For how long will we keep your data? we will process your data for the time necessary to manage the reservation request.
• Legal basis for the processing: the lawfulness of the processing is based on the performance of a contract or pre-contractual measures for the management of the reservation process.
• Obligation to provide the data and consequences of not providing it: the requested data are mandatory, since otherwise the information cannot be provided and, if you are interested, the reservation process cannot be processed.
• Source of the data: the data subject themselves.
• Recipients of the data: Data disclosures: no data are disclosed to third parties except where legally required.

Likewise, Panot Mobility relies on the collaboration of other service providers that process the data in the name and on behalf of our entity. In these cases, following a strict provider selection process based on guarantees of compliance with data protection regulations, we will enter into the relevant data processing agreement with these entities.

• International data transfers: no international data transfers are made.

Exercise of rights

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. As a data subject, you have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep it for the exercise or defence of claims. In certain cases and for reasons relating to your particular situation, you may object to the processing of your data. We will stop processing the data, except for compelling legitimate grounds, or the exercise or defence of possible claims.

In those cases in which the processing of your data is based on your consent, you may revoke it at any time.

In those cases in which it is legally applicable, you will have the right to data portability, which means that you have the right to receive the personal data relating to you that we are processing, and to store it on your own device; this right also allows you to request that we communicate your data to another data controller.

Likewise, in the event that you consider that there is a problem or an incident in relation to the processing of data, you may contact the entity through the contact address indicated in this document, and in any case, you have the right to lodge a complaint with the Supervisory Authority for the protection of personal data.

You may contact the person responsible for data protection at the following email address: hey@panotmobility.com

To exercise your rights, you must send us a request to the email address indicated, attaching a copy of your DNI (national ID), or another document that legally identifies you.

Security

Panot Mobility has implemented security measures in accordance with the risks inherent in the processing of personal data.

The security measures implemented are aimed at providing an adequate level of security, including confidentiality, taking into account the state of the art and the cost of implementation with respect to the risks and the nature of the personal data being processed.

In assessing the risk in relation to data security, account has been taken of the risks arising from the processing of personal data, such as the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorised disclosure of or access to such data, which are liable in particular to cause physical, material or non-material damage.

Cookie Policy

Information about this website's cookies —types, purposes and retention periods— and how to accept them, reject them or withdraw your consent is set out in the Cookie Policy and in the website's cookie settings panel.

Mobile application

Use of location data (including background location)

The Panot mobile application uses the user's location data, including background location, solely for the purpose of providing the mobility and security services associated with Panot electric bicycles.

What location data is collected

• Approximate and precise geographic location of the device.
• Background location, even when the application is not actively open.

Purpose of the use of the data

Location data is used exclusively to:

• Enable the location of the bicycle linked to the user's account.
• Improve the security of the service, including the detection of anomalous use or possible theft situations.
• Support operational functionalities of the service (assistance, recovery, incident management).
• Fulfil the subscription service agreed with the user.

Location data is never used for advertising purposes or for the creation of commercial profiles.

Access to background location

The application may access background location when:

• The user has an active subscription.
• There is a bicycle linked to the user's account.
• Continuous access to the location is required to ensure the security and correct functioning of the service, even when the application is not being actively used.

Access to background location is requested explicitly with the user's consent and can be revoked at any time from the device settings.

Disclosure and processing by providers

Location data may be processed by technology providers acting as data processors, solely for the provision of the service.

Location data is not sold or shared with third parties unrelated to the provision of the service.

Data retention

Location data is retained only for the time strictly necessary to fulfil the purposes described and in accordance with the applicable data protection regulations.