Meteored's General Privacy Policy

Disclaimer: This document has been translated using automated systems for your convenience. In the event of any discrepancy, ambiguity, or conflict of interpretation, the original version in English available at www.meteored.com shall prevail and be the solely legally binding version.

ALPRED S.L., hereinafter "the company" or "Meteored", may collect and process data from users of the Website/App and other interested parties, obtained through different means such as:

• Web forms and Dashboard (including Meteored Business and community panels).
• Email.
• Telephone contact.
• Software Applications (Apps).
• Other services and/or corporate Websites/Apps that link to this policy.

The processing of data collected through these sources will be carried out in accordance with the provisions of the European General Data Protection Regulation 2016/679 (GDPR), the Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and other applicable current regulations.

For the purpose of presenting the company's privacy policy, the following sections are set out:

1. Who is the Data Controller?

2. For what purpose do we process your personal data?

Mainly for the normal management of the company's services and activities. These purposes will correspond depending on the type of relationship with the company (user, client, employee, partner, collaborator, supplier):

1. Internal administration.
2. Economic, financial, and accounting management.
3. Human resources management.
4. Service management.
5. Commercial management and promotion, including customer care and support actions, informative communications, and newsletters.
6. Communications management (Website/App, social networks, others).
7. Analytics.

If the reason for contacting the company and sending information about yourself is for job search purposes (sending resumes, etc.), the data provided will be processed to evaluate your possible candidacy for company job offers. If the provided data is of interest to the company, a profile will be created with them, remaining filed for human resources management for one year.

• User: person or company that uses the services. (Purposes 2, 4, 5, 6, 7)
• Client: person or company that contracts a service. (Purposes 2, 4, 5, 6)
• Employee: person who has an employment relationship with Alpred. (Purposes 1, 2, 3)
• Partner: company with which Alpred works, whether a supplier or not, and with which it shares business strategies. (Purposes 2, 4, 7)
• Collaborator: person who has a non-labor, commercial working relationship with Alpred. (Purposes 1, 2, 3)
• Supplier: company with which Alpred works and that offers tools or services. (Purposes 2, 4, 7)

3. What type of data do we process?

Preliminary Considerations (Minors and Third-Party Authentication):

• Data of Minors: Our services are not directed to children under 14 years of age (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal data from minors without the verifiable consent of their parents or guardians. If we discover that we have collected data from a minor without such consent, we will proceed to delete it immediately.
• Third-Party Registration (Single Sign-On): If you choose to register or log in to our websites or apps, as well as users.meteored.com or dashboard.meteored.com using third-party accounts (such as Google or Apple), we will receive your basic profile information (such as name and email address) from these providers to create and authenticate your account.

A. General and user information (Website/App):

Information provided by you:

• Sending us an email message or completing an inquiry form to receive additional information: for example, you could send us a question, and we would use your email address to answer it.
• Sending a comment, opinion, photo, or video: for example, you could send us a photo of a weather phenomenon you have witnessed, and we could publish it on the Services for other users to enjoy.
• Reporting on the weather or other conditions: for example, you could tell us that there is cold or rainy weather in your area.
• Interacting with interactive advertising: we receive information such as usage, viewing, or interaction. The rest of the information generated by the interaction when you send questions or writings through the interactive ads placed on the Services or third-party platforms; we may share this information with our Advertising Partners.
• Personalizing the Services: for example, you could define a home location, so that every time you start the Services, the weather for that location is automatically displayed. More defined or precise geolocation will require your consent on both the web and the app.
• All information provided through cookies or similar technologies when you accept their use. This is initially managed through the CMP (Consent Management Platform) that complies with the IAB Spain standard, and can be modified whenever you deem appropriate. This information helps us understand, analyze, and measure how users use the Services; to manage Service operations; to offer ads and measure their effectiveness; to diagnose problems; to recognize returning visitors; and to facilitate your access to, and use of, the Services.

Location information:

Both we and our service providers, as well as our Advertising Partners and Analytics Partners, may collect location information through the Services, provided that cookies and location consent have been accepted. We collect location information to provide you with location-based services (such as severe weather alerts and other related information via our mobile applications), offer ads relevant to your geographic location, and conduct analytics to improve the Services. The ways we collect location information, along with the type of location information collected, depend on the devices used to access the Services and their settings. It will always depend on the consents you give at the time, which can be changed later. If you access the Services via the Website/App, we may be able to detect your general location, allowing us to automatically display the weather in your geographic area. Depending on your browser type and settings, it may inform you that the Website/App wants to know your specific location and ask for your permission. If you do not allow it, or if the browser does not allow it, only general location information will be collected, which can be stored locally on the device. Although we may not be able to collect direct location information on your device, you can manually enter a location (such as a city, zip code, and country). You can continue receiving relevant content for the city you entered in the search bar or modify that city at any time. If you access the Services from your mobile device and grant the appropriate permissions or consents, we may, depending on your application and operating system, directly collect precise geographic information via GPS (5-meter range), mobile network information, and other location-based features (range between 100 ms and 2 km). Depending on the mobile device's operating system, we typically receive the mobile device's latitude and longitude, as well as the date, time, and sensor data, such as an altimeter. The accuracy of latitude and longitude can vary greatly and is determined by various factors, including those controlled by the device, the operating system, or the mobile service provider. If you allow any of Meteored's mobile applications to directly collect location information while the mobile applications run in the background, you will enable continuous location collection. Thus, we can send you severe weather alerts for the area you are in. We also use this location information to perform analytics and improve the Services. You can disable direct location collection (or, on some operating systems, continuous direct location collection) via your device settings, modifying permissions within the Website/App (Settings), or deleting the mobile application from the device. If you disable location-based services, you may still receive alerts for locations you previously selected in the Services.

Alerts and notifications:

Some Services offer you the ability to receive push notifications for weather-related updates. To provide these Services, we may need to collect your email address, device information, and/or mobile carrier information, in addition to the zip code or geographic area to which the alert, update, or notification pertains. If you do not wish to continue receiving such notifications, you can disable them in your mobile device settings or the specific Service where you registered, or you can delete the application in the same way as with location tracking.

Advertising Partners and other involved third parties:

We may obtain information about you or your use of the Services through our providers and other third parties, such as our analytics providers or advertisers, if these third parties have a legitimate basis to share such information. We may combine the information you provide us and the automatically collected information with information from public or third-party sources. If you access the Services through social media and other third-party platforms, you authorize us to collect, store, and use such information and content in accordance with this Privacy Policy. If we combine or associate information from other sources with the personal data we collect through the Services, the combined information will be treated identically to personal data, as established in this Privacy Policy.

User Panel in our webs and apps. User-Generated Content:

If you register on our community services to upload photos, videos, or weather comments, this content (along with your profile) will be stored on our servers and may be publicly displayed on our platforms. When publishing content, the user must, in all cases, be the owner of the published content, hold the copyright and intellectual property rights, or have the consent of the affected third parties, and is responsible for everything they publish. Meteored also reserves the right to remove metadata (such as EXIF geolocation data) from images for security purposes.

External Social Networks:

The social networks on which the data controller (Alpred - Meteored) has a profile are subject to the provisions of the previous section, and the following processing purposes should also be specified:

• To process requests and inquiries submitted to the data controller.
• To inform about activities and events organized by the data controller.
• To inform about products or services offered by the data controller.
• To interact through official profiles.

The user can access the legal terms and privacy policies of the social networks themselves at any time, as well as configure their profile on them. The data controller can:

• Access the public information on the profile.
• Publish on the user's profile all information already published on the data controller's social network.
• Send personal and individual messages through the social network's channels.
• Post status updates from the page on the user's profile.

The user can always control their connections, delete content that is no longer of interest, and restrict who they share their connections with; to do this, they must access their privacy settings on the social network itself.

Any publication on the social network, whether text, graphics, photographs, videos, etc., is expressly prohibited. Content that offends or is likely to offend morality, ethics, good taste, or decorum, and/or that infringes, violates, or breaches intellectual or industrial property rights, the right to one's image, or the Law.

In these cases, the administrator reserves the right to immediately remove the content without prior notice and may request the user's permanent account suspension.

The administrator is not responsible for content freely published by a user.

Users should be aware that their posts will be visible to other users, and therefore they are primarily responsible for their own privacy.

Images that may be published on the external social network will not be stored in any file by the administrator, but they will remain on the social network.

B. Data processing in "Meteored Business" (Dashboard and API Services):

For developers and companies contracting services via dashboard.meteored.com, specific rules apply:

• Account and Billing Data: We collect your name, corporate email, billing address, and VAT/Tax ID to manage your subscription and issue legal invoices.
• Payment Processing (Stripe): Meteored does not process, store, or transmit your full credit card numbers. All payments are securely managed through our authorized provider (Stripe) using a tokenized system. Meteored only receives payment confirmation and the last four digits of the card.
• End-User Data in B2B Integrations (API, Smart Forecasts, Widgets, and others): If you subscribe to the Meteored API or other B2B integration services, we treat requests strictly as stateless weather queries. Meteored does not collect, process, or store personal data from end users of its platforms or applications. Transmitting any personally identifiable information about your end users to our B2B services is strictly prohibited.

C. General types of information:

In addition to the different means of obtaining data and types of information mentioned, we inform you that other types of information we may process in our systems relate to other stated purposes and the normal development of the company's services and activities, which, depending on the type of data subject (employees and candidates, users, clients, suppliers, partners, collaborators), may belong to the following categories:

• Identifying data.
• Image data.
• Identification codes or keys.
• Postal or electronic addresses and other contact data.
• Personal and professional characteristics data.
• Academic and curricular data.
• Economic, financial, and insurance data.
• Economic and non-economic payroll data and other employment-related information.
• Other data and information necessary or implicit in the development of the company's activities and services.

4. For how long will we keep your data?

Personal data will be kept as long as a relationship is maintained with you, either as a user or as another type of data subject; as long as its deletion is not requested; or as long as there is any legal provision or requirement for its retention, as well as during the periods in which liabilities may arise.

When the data is no longer necessary for the purposes for which it was collected, it will be deleted, ensuring its anonymization and/or confidentiality.

In the case of data provided for job search purposes, if they are not of interest to the company, they will be deleted immediately ensuring their confidentiality, and such data may be kept up to a maximum of one year in anticipation of future recruitment campaigns. In any case, data kept anonymously without the data subject being identifiable may be retained indefinitely, treated as aggregated or statistical data.

Right to be forgotten and Data Blocking:

If you request the deletion of your account, we will proceed to delete your profile and access. However, the retention or anonymization conditions will depend on the services you have used:

1. For clients with paid or billing services (e.g., Meteored Business): In compliance with Spanish commercial and tax regulations (Commercial Code and General Tax Law), we are required to retain your billing, payment, and transaction history data for a period of up to six (6) years. During this time, your data will remain duly blocked and will only be available to Public Administrations, Judges, or Courts. When these legal obligations expire, the data will be permanently deleted.

1. For users of our websites and apps (User-Generated Content): If you delete your user account, your public profile will no longer be visible. However, the content you have generated and shared publicly (such as photographs or weather comments) may remain published on our Services, but it will be completely anonymized, being unlinked from your name, email or any other personal data that identifies you.

5. What is the legitimacy for the processing of your data?

Any data processing carried out by the company will be previously based on one or more of the following conditions:

1. The data subject has given their consent for the processing of their data.
2. The data is necessary for the performance or execution of a contract, or pre-contractual conditions, and the data subject is a party.
3. The data is necessary for compliance with legal or contractual obligations applicable to the data controller.
4. In compliance with the legitimate interest of the data controller or a third party, provided that the privacy rights of the data subject are not prejudiced.

Table of correlation of personal data processing

6. To which recipients will your data be communicated?

The company's default policy is not to disclose or communicate data subjects' data to any third party, except:

1. auxiliary services, authorized data processors, or other implicit third parties necessary for the correct provision of goods and services (Data Processors).
2. competent public authorities and administrations in the exercise of their functions.
3. other legitimate interested parties and legally foreseen third parties.

More specifically, we set out how we share data subjects' information with necessary partners and third-party services:

Information collected on the Services may be prepared and maintained in a format that does not identify you or other users, and such information may be used or shared. For example, we may analyze personal data to generate aggregated or statistical data, none of which is personal information.

Information collected on the Services may also be shared in the following ways:

Third-Party Service Providers. When your personal data is collected through the Services, it may be shared with those third parties whose collaboration is necessary for the provision of the Service. They also help us provide the features and functionality you have requested. These Third-Party Service Providers include, but are not limited to, companies that support our advertising programs, manage shipments for us, provide data storage, offer customer service, help evaluate the audience and develop products, and provide or deliver materials to you via email, other electronic communication platforms, or postal service. This explicitly includes web and cloud hosting providers (e.g., Cloudflare, Google Cloud) and payment gateways (Stripe) for Meteored Business users. We may also provide personal data to third-party mapping service providers to provide mapping material for the Services. Third-Party Service Providers are authorized to use the personal data we supply them solely for the purpose of providing the service on our behalf. All these Third-Party Service Providers are bound by contract to maintain the confidentiality of personal data.

Companies offering promotions, products, or Services. We may share location data, advertising identifiers, IP addresses, and aggregated usage statistics for the Services with advertisers, provided you have given your consent for this.

Other Websites, other services, plugins, and links. Like many Websites on the Internet and other Internet-based services, the Services may link to web pages located on Websites or services maintained by other entities. In some cases, you may navigate to pages of other Websites that are framed with elements of the Services, such as the header or footer. In that case, the URL will identify the Site you are visiting. In other cases, such as ads, you will connect to another Site or service when you click or activate these opportunities, including click-to-call, click-to-text, and click-to-email opportunities. These other Sites and services are not subject to our Privacy Policy, and we are not responsible for their information collection practices. The privacy policies of other organizations may differ from ours, for example, regarding the level of security, the use of cookies, and the collection, use, and disclosure of personal data.

Some of the Services allow users to interact with other Websites/Apps or services. For example, plugins can connect third-party services identifiable by their respective logos (such as social media platforms) to the Services. You will remain connected to those other Sites/Apps and services until you log out. When you use these interfaces, you will allow the Services to access part of your information on those other Sites/Apps and services. Your use of those other Sites/Apps and services is subject to the privacy policies of those Sites/Apps and services, and not to this Privacy Policy.

Some of the Services use third-party operating systems, platforms, communication services, devices, and software elements (such as mobile device operating systems, wireless services, mobile phones, and tablet devices), and some Services are provided by third-party distributors, device manufacturers, device operators, platform operators, and communication services. We do not exercise any control over these third-party entities, products, and services, which may collect, use, process, transmit, and disclose your information. Since we do not control the data management practices of such third parties, we recommend reviewing their privacy policies, terms of use, and license agreements (if any).

You become responsible the moment you click on any of the links.

Advertising Partners. We may share the information we collect with Advertising Partners so they can deliver relevant ads or content on their own Websites/Apps or applications or on other third-party Websites/Apps or applications and analyze and report on the content or ads that users view or interact with. Advertising Partners may also collect information, or we may also provide information to Advertising Partners. The information may include data on how users interact with the Services, the information users provide through an interactive ad, the content and ads users have viewed, users' activities on other Websites/Apps and online services, and the physical places users have visited. Provided you have given your consent for this.

Aggregated information. As part of the Services, we will prepare and maintain information collected from the Services that is aggregated or otherwise modified so that it does not directly identify you and cannot be linked to you. We use and share such information for our business purposes.

We and our partners perform the following data processing provided you grant consent in the CMP (Consent Management Platform). Store information on a device and/or access it, use limited data to select basic ads, create profiles for personalized advertising, use profiles to select personalized advertising, create a profile to personalize content, use profiles for personalized content selection, measure advertising performance, measure content performance, understand the audience through statistics or by combining data from different sources, develop and improve services, use limited data to select content.

Precise geographic location data and identification via device scanning, personalized advertising and content, advertising and content measurement, audience research, and service development.

International Data Transfers: Some of our Data Processors (such as Stripe, Google, or Cloudflare) may be located outside the European Economic Area (EEA), specifically in the United States. Meteored guarantees that all international data transfers are carried out under strict security measures and legal mechanisms approved by the European Commission, such as the EU-US Data Privacy Framework or the execution of Standard Contractual Clauses (SCCs).

Other privacy limitations: Subject to applicable local legislation, we, our affiliates, or our Third-Party Service Providers may disclose your personal data without your permission (i) pursuant to court or governmental orders, warrants, or subpoenas, or to ensure compliance with the law; (ii) whenever we believe that the rights, property, or safety of a person is endangered; (iii) if we discover that your actions violate our Terms of Use or any other of our legal rights; or (iv) in any other case where required or permitted by applicable law (for example, in the case of a legitimate access request by courts, or State Security Forces and Bodies).

7. Storage and retrieval of data on users' terminals.

When you have previously given your consent, we may carry out what is described in this section.

We work with various advertisers, ad networks, ad servers ("Advertising Partners") who use various technologies to collect data about your use of the Services (e.g., content viewed and ads clicked) to deliver relevant ads. Advertising Partners use various technologies on the Services via the web and within our mobile applications to (among other things): track the use of the Services, which Sites/Apps or content users interact with, and which Sites or mobile applications they interact with once they leave the Services; link user devices; and offer more relevant ads on the Services or other Websites or mobile applications you visit.

We also contract certain third parties who use data collection technologies to track, analyze, and report data regarding the use of the Services. They are also responsible for analyzing and optimizing the performance of the Services ("Analytics Partners").

The information collected via the data collection technologies described in this section may be linked to other information about you, such as location, and may constitute personal data. We use the technologies described in this section, alone or combined, to understand user behavior; personalize and measure the effectiveness of ads; help diagnose problems; recognize returning visitors; and facilitate your access to and use of the Services.

Use of cookies, web beacons, and information saved by other technologies

Third parties may use cookies and other technologies through the use of our Services to support or offer personalized advertising on online services and third-party Sites/Apps. Among the data collection technologies used by both us and third parties, the following are included, but not limited to:

• Cookies: text files containing small amounts of information. They are downloaded to the computer system or mobile device when visiting a Website and stored in the browser. Cookies are sent back to the originating Website on each subsequent visit to that Website or to another Website that recognizes them. Some cookies from our Services collect IP and MAC addresses. Cookies are useful because they allow a Website to recognize a user's device. Cookies may also be embedded in the App when viewing web content. These will be destroyed upon closing the view.
  More information on cookies

• Web beacons: certain pages of the Services contain web beacons. Web beacons allow third parties to obtain information, such as the IP address of the computer system that accessed the page where the web beacon appears, the URL of the page where the web beacon appears, the time of viewing the page containing the web beacon, the type of browser used to view the page, and the information present in the cookies sent by the third party.

• Web storage: we use local storage, such as HTML5 localStorage and indexedDB, to improve the user experience. This is achieved, for example, by storing your user preferences and settings (e.g., volume/mute audio) regarding animated content in the Services. Local storage is similar to browser cookies, but can store more complex data than simple text. In itself, local storage cannot perform any action on or with the data stored on the device.

Use of advertising identifiers

We and our Advertising Partners may collect information about a user's movement within and across the use of mobile applications through advertising identifiers, to support or supply personalized advertising.

An advertising identifier is a randomly generated alphanumeric code associated with a user's device to help advertise services. These user-resettable identifiers have different names depending on the operating system: GAID (Google Advertising ID) on Android devices and IDFA (Identifier for Advertisers) on iOS. Advertising identifiers provide advertisers with a way to identify a user's device without using a permanent device identifier, such as a serial number.

This Privacy Policy does not cover the practices of our Advertising Partners, and we do not control the technologies of our Advertising Partners. We provide links to more information about our approved partners and any opt-out pages:

View our partners

The opt-outs described below are specific to devices or browsers, so they may not be available on all devices. Thus, if you opt-out from your mobile device, you may still receive personalized advertising on your personal computer or other devices. If you choose to use the Website or App of any of our Advertising Partners to opt-out, you may still see ads, but they will not be based on your interests.

Adjusting device settings, ceasing the use of the Service, or uninstalling the relevant mobile app also entails opting out of future information collection by the Services.

Web-related opt-outs

For more information about our Advertising Partners' technology, how they use the information collected by technologies on the Services, and the choices you have not to accept cookies placed by some of the Advertising Partners on the Services, visit the DAA opt-out page, the DAAC opt-out page, or one of the country-specific EDAA opt-out pages. In some jurisdictions, to opt-out of additional third-party ad networks, you can visit the Network Advertising Initiative Website.

Your browser, whether Internet Explorer, Chrome, Firefox, or Safari, may allow you to manage cookies and local storage. Since every browser is different, we recommend using the "Help" feature of each to learn how to block cookies, receive notifications when new cookies are found, and disable existing cookies. However, remember that without some cookies, you may not be able to take full advantage of all Services, and some parts of them may not function correctly. For more information on cookie management, visit http://www.allaboutcookies.org/manage-cookies/.

Mobile app-related opt-outs

You can opt-out of receiving personalized advertising on Android and iOS through your device settings. Please note that these opt-outs will disable personalized ads from all providers across all your applications, not just our mobile applications.

• Android users (version 2.3 and later): "Opt out of Ads Personalization" by following the instructions provided by Google here: Google Play Help.
• iOS users (version 6 and later): "Limit Ad Tracking" by following the instructions provided by Apple here: Apple Support Center.

The DAA offers AppChoices, an independent optional tool for users to exercise control over data collection and use across mobile applications for personalized advertising and other related uses. For participating companies to benefit from this service, you can install the DAA's AppChoices app on your mobile device. Click here for more information about the DAA's AppChoices tool.

8. What are your rights when you provide us with and/or we process your data?

As a data subject, you may at any time request the exercise of any of the following rights regarding data protection:

• Access to the data subject's personal data to confirm whether or not data concerning you is being processed and to obtain more information about this processing.
• Rectification or Erasure of personal data concerning the data subject when, among other reasons, they are inaccurate or are no longer necessary for the purposes for which they were collected.
• Restriction of the processing of the data subject's personal data in certain circumstances, in which case they will only be kept for the exercise or defense of claims, for the protection of the rights of another person, or for reasons of public interest.
• Receive the personal data concerning you, which you have previously provided to us, in a structured format where possible. (Portability of your data).
• Object to the processing of your data in certain circumstances and for reasons related to your particular situation. The company will cease to process your data, except for legitimate reasons, or the exercise or defense of possible claims.
• Revoke consent, which will result in the termination of processing based on consent. In no case is this retroactive. There will be no prejudice to the processing carried out prior to the withdrawal of consent.

To do this, you just have to contact us via the email address [email protected], or by postal mail to C/ MAYOR 46, 30893 ALMENDRICOS (MURCIA) SPAIN. Our data protection officer will respond to inquiries as soon as possible.

Optionally, you can also contact the competent Data Protection Agency ico to learn more about your rights or request their protection by the supervisory authority.

9. Data Security

The company adopts in its information system the technical and organizational measures necessary to guarantee an adequate level of confidentiality, integrity, and availability of the information we process.

However, to the extent permitted by the legal system, we assume no liability for damages caused by alterations that third parties may cause in our information system. Any security breach will be appropriately evaluated, controlled, and communicated to the competent authority and/or State Security Forces and Bodies, when necessary.

10. Sending communications or information

Our policy regarding the sending of information through telematic means (email, instant messaging, etc.) is limited to sending only necessary communications for our users and interested parties, in relation to the contracted services or in relation to the company's activity.

Any commercial mailing or our newsletter will be carried out with your prior consent.

If you prefer not to receive these messages, we will offer you through them the possibility to exercise your right to object to the receipt of these messages, in accordance with the provisions of Title III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce of Spain.

This privacy policy has been revised in February 2026, so there may be variations until the next revision of the text.