Privacy policy

Controller

ZERO1 MEDIA SL

VAT / NIF

ESB70826946

Registered office

C/ Valencia 74, 4-4, 08015 Barcelona, Spain

Privacy contact

info@ultimatetools.eu

We have not appointed a Data Protection Officer, as we are not required to under article 37 of the GDPR. Privacy requests are handled directly at the address above.

Browsing this site does not require an account. There is no login, no user profile and no order history, because we do not sell anything. The data involved is limited to the following.

• Technical data handled automatically. When you load a page, our infrastructure provider processes your IP address, the request, your browser type and the approximate region the request came from, in order to serve the page and protect the site from abuse. We do not use this data to identify you.
• Analytics data. If you consent to analytics cookies, we collect statistics about how the site is used: pages viewed, time on page, referring source, device type and approximate location. See our cookie policy.
• Advertising data. If you consent to advertising cookies, our advertising partners may record that you visited this site so that we can measure our campaigns and show relevant ads. See our cookie policy.
• Your email address, if — and only if — you choose to subscribe to our newsletter.
• What you write to us, if you contact us by email: your address, your message, and anything you include in it.

We do not knowingly collect data from children under 14, and we do not process special categories of data as defined in article 9 of the GDPR.

• To operate and secure the website — legitimate interest (art. 6(1)(f)): our interest in serving the site reliably and defending it against attack.
• To understand how the site is used — your consent (art. 6(1)(a)), given through the cookie banner and withdrawable at any time.
• To measure and target our advertising — your consent (art. 6(1)(a)), given through the cookie banner and withdrawable at any time.
• To send you the newsletter — your consent (art. 6(1)(a)), given when you subscribe and withdrawable via the unsubscribe link in every email.
• To answer your messages — legitimate interest (art. 6(1)(f)) in responding to enquiries addressed to us.
• To attribute affiliate commissions — legitimate interest (art. 6(1)(f)) in being paid for referrals. This is carried out by the vendor you click through to, under its own privacy policy; see the section on affiliate links below.

Most outbound links on this site are affiliate links. When you click one, the vendor or its affiliate network typically sets a cookie in your browser, on their own domain, so that a later purchase can be attributed to us. That processing happens on the vendor's side and is governed by the vendor's privacy policy, not by this one.

We do not receive your name, email address, payment details or any other personal data from these purchases. What we receive is aggregate commission reporting: how many referrals converted and for how much. See our affiliate disclosure.

We do not sell personal data. We share it only with the providers we need to run the site, each of which acts as a processor under a data processing agreement, or as an independent controller where indicated.

• Cloudflare — hosting, content delivery and security for this site.
• Supabase — the database holding the deal catalogue and the brand logos.
• SiteGround — hosting for other websites operated by the company.
• Lovable — the platform on which this site is developed and deployed.
• beehiiv — newsletter delivery, if you subscribe.
• Google (Google Analytics) — website statistics, subject to your consent. Google acts as an independent controller for part of this processing.
• Advertising platforms — including Meta (Facebook, Instagram) and TikTok, for campaign measurement and targeting, subject to your consent. These platforms act as independent or joint controllers for part of this processing.

Some of the providers above are established in the United States or process data there. Where that happens, the transfer is covered either by the EU–US Data Privacy Framework, where the provider is certified under it, or by the European Commission's Standard Contractual Clauses together with the supplementary measures required by the provider.

You can request a copy of the safeguards applied to a specific transfer by writing to info@ultimatetools.eu.

• Server and security logs: retained for the short period set by our infrastructure provider, generally no more than 30 days.
• Analytics data: retained according to the retention period configured in the analytics tool, no longer than 14 months.
• Advertising data: retained according to each platform's own retention policy.
• Newsletter subscription: until you unsubscribe.
• Email correspondence: for as long as needed to deal with the matter, and afterwards for as long as required to defend a legal claim.
• Cookie consent record: kept as proof of consent for the period required by law, and in any case no longer than 24 months, after which you are asked again.

Under the GDPR you have the right to:

• obtain confirmation of whether we process your data, and a copy of it (art. 15);
• have inaccurate data corrected (art. 16);
• have your data erased (art. 17);
• restrict how we process it (art. 18);
• receive it in a portable format (art. 20);
• object to processing based on legitimate interest, on grounds relating to your situation (art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out before you withdrew it (art. 7(3)).

To exercise any of these, write to info@ultimatetools.eu. We reply within one month, and we may ask you for information to confirm your identity before we act.

If you believe we have handled your data unlawfully, you may lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (aepd.es, C/ Jorge Juan 6, 28001 Madrid), or with the supervisory authority of the EU country where you live.

This site uses cookies and similar technologies. Only the ones strictly necessary to serve the site are set without your consent; analytics and advertising cookies are set only after you accept them, and you can change your mind at any time. The full list, and the instructions for withdrawing consent, are in the cookie policy.

We update this policy when the way we process data changes — for example when we add or remove a provider. The date at the top of this page always shows when it was last revised. Where a change materially affects you, we will make it visible on the site rather than rely on you re-reading this page.