PRIVACY POLICY

1. Data Controller
Pablo García Pomar 
Tax ID: 32067499W 
Address: C/ Honda 18, Right Premises, 11402, Jerez de la Frontera, Cádiz 
Phone: +34 611 729 058 

2. Purpose & Legal Basis of Processing
• Enquiries: Responding to user requests via web forms or communication channels (Art. 6.1.a GDPR – Consent). 
• Service Provision: Registration and management as a user for contracted services (Art. 6.1.b GDPR – Contract execution). 
• Reservations: Processing bookings made through the platform (Art. 6.1.b GDPR). 
• Browsing Data: Gathered via cookies under user consent (Art. 6.1.a GDPR). 
• Commercial Communication: Promotional emails permitted only when expressly consented by the user (Art. 6.1.a GDPR). 

Cookies may collect browsing behaviour, device data, user preferences, and session data. See Cookie Policy for full detail.

3. Data Retention
Data will be retained for as long as the commercial relationship remains active and thereafter for statutory limitation periods.

4. Data Transfers
No personal data is shared with third parties unless legally required or necessary for service provision. Service providers may access data only under processing contracts and never as transferees.

5. User Rights
Individuals may exercise: Right of Access, Rectification, Erasure, Opposition, Portability, Restriction, and Automated Decision Objection. 
Requests must be submitted with reference “Data Protection” to: 
✉ C/ Honda 18 Local derecha, 11402 Jerez de la Frontera, Cádiz 
📧 info@sherrylockersconsignas.com 

Users may file complaints with the Spanish Data Protection Authority (AEPD): www.aepd.es

6. Free-Text Fields
Input fields are intended solely to collect information relevant to service quality. Users must not provide special category data (financial, political, religious, health, racial, sexual information etc.).

7. Non-Mandatory Fields
Unmarked fields are optional; failure to complete them may limit access to related services.

8. Data Accuracy
Users must provide accurate and updated information. Incorrect or false submission may result in refusal of access and service without liability to the controller.

9. Confidentiality
All exchanged information shall be treated confidentially unless expressly authorised or legally required. Display or transmission of data online does not grant access rights without consent.