Privacy Policy

Data Controller
The data controller for the data collected is Samplia Media, S.L., with VAT number B65964074 and address in Madrid, Calle Resina, 59 – J (hereinafter, Samplia or the Owner, interchangeably), owner of this website (hereinafter, the Website) and the Samplia Application (hereinafter, the App or the Application, interchangeably).

This Privacy Policy regulates the collection and processing of personal data provided by Users when they access or use the functionalities of the App, as well as through the Website forms and other means made available to Users.

Data collection, purposes, legal bases, and retention periods:

a. Registration: We basically collect your email, name and surname, phone number, country, zip code, age, and gender at the time of registration. This data is necessary for you to enjoy the benefits we offer, such as downloading products from our machines' advertisers, and for us to process your registration in the App as a User.
The legal basis for processing such data is based on the contractual relationship maintained with the User.
Your data will be kept while you are registered in the App.

b. Prevention of fraudulent registrations or uses: Two fraud prevention systems have been established for the correct compliance of legal conditions.
For the formalization of the registration in the App, Samplia will send the User, via SMS, a verification code to the phone number entered during registration. Thus, both the phone number and the data associated with it (such as the unique identification code of the specific mobile device from which the App is used) will also be processed to carry out the relevant checks ensuring that the data of the new registration does not coincide with that previously used for another registration, nor are they managed from the same mobile device. This data will also be used to prevent the fraudulent use of the App, such as using multiple accounts per user in violation of the App's Terms and Conditions. Device data will in no case be used as tracking systems.
The legal basis for the processing of such data is supported by Samplia's legitimate interest.
This data will be kept while you are registered in the App and up to 15 days after your withdrawal for the sole purpose of avoiding fraud situations with the App (without being used for other purposes). After this period, the data will be kept properly blocked for a period of up to three years for the prescription of actions. After this period, it will be deleted.

c. Sending our own notifications about the service: The service involves informing the User by electronic means of any news about our services associated with the operation, version changes, etc., of the App. For example, we will contact you to report new functionalities of the App, technical maintenance issues, or modifications in legal texts.
The legal basis for the processing of such data is based on the contractual relationship maintained with the User.

d. Sending our own commercial communications: The service involves informing the User by electronic means (email, push notifications, or messages via instant messaging programs associated with the User's phone number) of any news regarding our services, as well as the free sample campaigns available to Samplia Users in machines or third-party establishments.
Since the purpose is for you to know the free products we make available to you or news in our service, the legal basis for processing such data is supported by our legitimate interest.
The User may object at any time to receiving this type of commercial communications through the Samplia control panel, the link included in the emails we send, writing to dpo@samplia.com, or replying to any message received via SMS or instant messaging programs associated with the User's phone numbmer with the word "BAJA" (UNSUBSCRIBE). You can also disable the reception of push notifications on your device.

e. Conducting surveys: In order for the User to download free products from our machines, it is necessary to answer surveys about the products collected.
We will collect the information you provide us to prepare market studies. The legal basis for processing such data is based on the User's consent.
Your data will be kept while you are registered in the App.
However, based on such data, we may conduct studies for statistical information with aggregated, dissociated, and anonymized data, so we would not use your personally identifiable information.

f. Profiling: Accepting the download of products in Samplia machines or obtaining a sample in establishments implies that Samplia analyzes your tastes and other information regarding the samples you acquire through surveys and the use of the App in order to offer you information, through electronic means, about the products that best suit you.
The legal basis for this processing will always be your consent.
The data retention period will be the time you remain registered in our system for sending advertising and have not objected or revoked consent, unless other periods apply.

g. Sending third-party commercial communications: If you expressly authorize it, Samplia may send you advertising for products and services from third-party brands or email marketing, affiliation, or retargeting campaigns on behalf of such brands.
The legal basis for carrying out this processing will always be your consent.
The data retention period will be the time you remain registered in our system for sending advertising and have not objected or revoked consent, unless other periods apply.
At any time you can revoke your consent through the provided links or by writing to dpo@samplia.com.

h. Communications about promotions and sweepstakes the User has joined: Promotions, and occasionally sweepstakes, exclusive to Users will be offered through Samplia. To participate in these promotions, Users must read and accept the rules associated with each promotion.
Notifications about the User's participation in such campaigns or promotions, such as participation conditions, notices on compliance with conditions, notifications of extension of promotion periods, communications on promotion results, etc., are based on the contractual relationship of the specific campaign or promotion and may be communicated by telematic means.
Your data will be kept while you are registered in the App.

Data communications to third parties

Using the Application, in principle, does not involve communicating any of your personal data to third parties, except in those cases where you expressly authorize it, in which case we will inform you about the identity of the recipient (specifically, the brand(s) owning the promotion in which you participated and allowed such communication). The purpose would be to send commercial communications about their own products and services, communicating your email and contact information.
The legitimacy basis would be, in any case, consent, and this may be revoked at any time before the brand through the channel it makes available to Users.

Exercise of rights

As a User, you can revoke your consent for processing your data at any time, exercising the rights of access, rectification, deletion, portability, opposition, and limitation to processing, by notifying Samplia through an email addressed to dpo@samplia.com or indicating it to the postal address above, indicating "Data Protection" as the subject. On special occasions, we may ask the User to prove their identity by an official document, for example, to prevent unauthorized third-party access to their data.
Finally, the User may communicate any modification in writing or request to unsubscribe, indicating so at any of the addresses provided.
At any time, the User may file a claim with the Spanish Data Protection Agency to enforce their rights.
To delete your account and the data associated with it, you can also do so through the user area of the App.

Modification of the Privacy Policy

Samplia reserves the right to modify its privacy policy at any time, respecting current data protection legislation and subject to prior notice to interested parties.

Applicable language to this privacy policy

The applicable language to this Privacy Policy is Spanish. Any version of it in a different language is provided for the convenience of the User and to facilitate their understanding. However, this Privacy Policy will always be governed by its Spanish version.
In case of contradiction between the Privacy Policy in any language and its Spanish version, the Spanish version will prevail.

Date of update: 12/11/2025