Information provided in compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

In Europe and in Spain there are data protection rules designed to protect your personal information, and our company is obliged to comply with them. That is why it is very important to us that you fully understand what we are going to do with the personal data we ask you for when you visit our website, write to us through our forms or contract our services.

We will be transparent and give you control over your data, in plain language and with clear options that let you decide what we do with your personal information. If you have any questions after reading this information, please do not hesitate to ask us.

1. Who are we? (Data controller)

  • Company name: Shavo Vaults S.L.U.
  • Tax ID (CIF / NIF): B67477984
  • Main activity: Safe deposit box rental
  • Address: Carrer Ausiàs March, 6, 08010 – Barcelona (Barcelona), Spain
  • Contact telephone: +34 931 76 88 73
  • Contact e-mail: info@barcelonavaults.es
  • Website: http://www.barcelonavaults.es
  • Registration details: registered in the Barcelona Companies Registry, Volume ______, Folio ______, Sheet ______ [TO BE COMPLETED]

We are at your disposal. Please do not hesitate to contact us.

2. What personal data do we collect through the website?

Depending on how you interact with us, we may process the following categories of data:

  • Data you provide to us: when you fill in a contact or information request form, subscribe to our communications, call us or write to us by e-mail. Normally: first name and surname, e-mail address, telephone number, preferred language and the content of your message.
  • Data needed to enter into a contract: if you go on to rent a safe deposit box, we will ask you for the identification data (identity document, address) and payment data needed to formalise the contract and comply with the applicable regulations.
  • Browsing data: IP address, device and browser type, pages visited, language and data collected through cookies and similar technologies, always in accordance with our Cookie Policy and the preferences you select in the cookie settings panel.

The fields marked as mandatory on our forms are essential in order to deal with your request. If you do not provide them, we will not be able to process it.

You guarantee that the data you provide to us is true, accurate and up to date, and you undertake to inform us of any change.

3. What will we use your data for?

In general, your personal data will be used so that we can interact with you and provide you with our services. Specifically:

  • To deal with and reply to the enquiries, information requests or quotation requests you send us through the website, by telephone or by e-mail.
  • To manage the booking and contracting of safe deposit box rentals, as well as the subsequent contractual relationship (invoicing, notifications, renewals, incidents).
  • To send you, if you authorise us to do so, commercial communications about our products, services and promotions by e-mail, telephone or other electronic means.
  • To analyse the use of our website statistically in order to improve how it works, its content and the browsing experience.
  • To show advertising for our services on third-party platforms and measure the effectiveness of our campaigns, only if you accept marketing cookies.
  • To ensure the security of the website and our forms, preventing automated message submissions (spam) and fraudulent use of the site.
  • To comply with the legal obligations that apply to us, including those arising from tax and anti-money-laundering legislation.

4. Why do we need to use your data? (Legal basis)

The processing of your data is based on the following legal grounds:

  • Performance of a contract or pre-contractual measures: to deal with your information requests and to manage the contracting and provision of our services.
  • Your consent: to send you commercial communications and to use analytics and marketing cookies. On our forms we will provide a series of tick boxes that let you decide clearly and simply how your personal information is used.
  • Our legitimate interest: to ensure the security of the website, prevent fraud and respond to communications that you yourself initiate.
  • Compliance with legal obligations: when a law requires us to process or disclose your data.

5. Who will have access to the information we ask you for?

In general, only duly authorised staff of our company will have access to the information we ask you for.

Likewise, those entities that need access to your information so that we can provide you with our services (data processors) may have access to it. They act on our instructions and under contract. They include:

  • Our web hosting provider and the company responsible for the technical maintenance of the website.
  • Providers of e-mail and communication management tools.
  • Google (Google Analytics, Google Tag Manager, Google Maps and reCAPTCHA), Meta Platforms (Meta Pixel) and Microsoft (Clarity), under the terms described in our Cookie Policy and only if you have accepted the corresponding cookies.
  • Our bank, which will have access to your data if payment for our services is made by card or bank transfer.

In addition, those public or private bodies to which we are legally obliged to disclose your personal data will have access to your information. For example, tax legislation requires us to provide the Spanish Tax Agency with certain information on financial transactions above a given amount.

If, outside the cases described above, we need to disclose your personal information to other entities, we will first ask for your permission through clear options that let you decide.

6. Will we send your data to other countries?

Some countries in the world are safe for your data and others less so. The European Union, for example, is a safe environment for your data. Our policy is not to send your personal information to any country that is not safe from a data protection point of view.

Some of the technology providers mentioned in the previous section (Google, Meta and Microsoft) are based in the United States. These transfers only take place if you accept analytics or marketing cookies, and they are covered by the European Commission adequacy decision on the EU-US Data Privacy Framework or, failing that, by the standard contractual clauses approved by the European Commission.

If, in order to provide you with the service, it is essential to send your data to another country that is not as safe as Spain, we will always ask for your permission first and apply effective security measures to reduce the risks of sending your personal information abroad.

7. How long will we keep your data?

  • Enquiries and information requests: for as long as needed to deal with them and, at most, one year from the last contact, unless you become a customer.
  • Customers: for the whole contractual relationship and, once it has ended, for the limitation periods of the applicable legal obligations (generally between five and ten years under tax, commercial and anti-money-laundering legislation).
  • Commercial communications: until you withdraw your consent or object to receiving them.
  • Browsing data and cookies: the periods stated for each cookie in our Cookie Policy.

Once the applicable legal periods have ended, we will delete your data securely and in an environmentally responsible way.

8. How will we protect your data?

We will protect your data with effective security measures proportionate to the risks involved in using your information. Our website uses a security certificate (HTTPS) that encrypts the information you send us through the forms.

To this end, our company has approved a Data Protection Policy, and annual checks and audits are carried out to verify that your personal data is safe at all times.

9. What are your data protection rights?

You may contact us at any time to exercise the following rights:

  • Access: to know what information we hold about you.
  • Rectification: to correct it if it is inaccurate or incomplete.
  • Erasure: to delete it once our relationship has ended, where this is legally possible.
  • Objection: to object to certain uses of your data, for example the sending of advertising.
  • Restriction of processing: to ask us to suspend the use of your data in certain cases.
  • Portability: to request the transfer of your information to another entity. This right can be useful in certain situations.
  • Not to be subject to automated decisions: including profiling, that produce legal effects concerning you.

To exercise any of these rights, you can send us a written request, together with a copy of your identity document so that we can identify you, to:

  • E-mail: info@barcelonavaults.es, stating “Data protection” in the subject line.
  • Post: Shavo Vaults S.L.U., Carrer Ausiàs March, 6, 08010 – Barcelona, Spain.

At our offices we have specific forms for requesting these rights, and we will help you to fill them in. We will reply to your request within one month at most.

To find out more about your data protection rights, you can consult the website of the Spanish Data Protection Agency (www.aepd.es).

10. Can you withdraw your consent if you change your mind later?

You can withdraw your consent if you change your mind about the use of your data at any time, without this affecting the lawfulness of the processing carried out beforehand.

For example, if at some point you were interested in receiving advertising about our products or services but no longer wish to receive it, you can let us know by writing to info@barcelonavaults.es, by using the unsubscribe link included in every commercial communication, or by means of the objection form available at our offices.

Likewise, you can change or withdraw your consent to the use of cookies at any time from the cookie settings panel on the website.

11. Where can you lodge a complaint if you believe your rights have not been respected?

Before going to the supervisory authority, we ask you to write to us at info@barcelonavaults.es so that we can resolve your complaint. In any event, if you believe our company has not respected your rights, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) through any of the following channels:

  • Online: www.aepd.es
  • Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 – Madrid, Spain
  • Telephone: (+34) 901 100 099 / (+34) 91 266 35 17

Lodging a complaint with the Spanish Data Protection Agency is free of charge and does not require the assistance of a lawyer or court representative.

12. Will we profile you?

Our policy is not to create profiles of the users of our services.

However, there may be situations in which, for service provision, commercial or other purposes, we need to create information profiles about you. One example could be using your service history to offer you products or services suited to your needs, or using marketing cookies to show you relevant adverts on other platforms if you have accepted them.

In such cases, we will apply effective security measures to protect your information at all times from unauthorised persons seeking to use it for their own benefit.

13. Will we use your data for other purposes?

Our policy is not to use your data for purposes other than those we have explained. If, however, we needed to use your data for different activities, we would always ask for your permission first through clear options that let you decide.

14. Cookies

Our website uses first-party and third-party cookies for technical, analytics and marketing purposes. When you first access the site, a panel lets you accept, reject or configure non-essential cookies. You can find full information on which cookies we use, for what purpose and for how long, and change your preferences at any time, in our Cookie Policy.

15. Minors

Our website and services are aimed at adults. We do not knowingly collect data from children under 14. If you become aware that a minor has provided us with personal data without the authorisation of their parents or guardians, please let us know at info@barcelonavaults.es so that we can delete it.

16. Links to other websites

Our website may contain links to third-party sites (for example, maps or social networks). We are not responsible for the privacy policies or practices of those sites, so we recommend that you read them before providing your data.

17. Changes to this Privacy Policy

We may update this Privacy Policy to adapt it to legal changes or new features of the website. We will always publish the current version on this page, stating the date of the last update. If the changes are significant, we will inform you through the contact details you have given us.

Last updated: 22 September 2026

Thank you for your cooperation.