Privacy policy

Data controller

Owner and data controller

Nazarii Pavliuk

Fiscal and professional address

Carrer de la Mare de Déu de la Cabeça, 15, 5º E, 46014 València, España

Trade name

Nazar Autocerrajero VLC

Email

info@autocerrajero.es

Telephone

+34 919 93 93 92

Website

https://www.autocerrajero.es

Legal status

Self-employed professional (individual). Not a limited company.

Activity

Mobile locksmith services: opening of vehicles, homes and premises, cutting, duplication and programming of keys and remotes, safe opening, installation, replacement and repair of locks, door closers and ignition locks.

Service area

Valencia Ciudad, L'Horta Nord, L'Horta Sud, Camp de Túria, Torrent, Gandia, Paterna, Sagunto, Alzira, Manises

Business model

Mobile service, without commercial premises open to the public. The address shown is fiscal and professional only; it is not a shop or a walk-in office.

Data we may process

• Name, telephone number and email address.
• Content of the service request and of the messages sent.
• Location of the vehicle or of the place of service.
• Vehicle make, model, year, registration number and VIN.
• Key and immobiliser information.
• Information needed to confirm ownership, possession or authorisation regarding the vehicle or property.
• Billing and payment information.
• Technical browsing data: IP address, browser, device, language, referrer, visited URL and session identifiers.

Purposes and legal bases

• Handling enquiries and preparing quotations: pre-contractual measures requested by the data subject, Art. 6(1)(b) GDPR.
• Providing the service, managing appointments, payment and invoicing: performance of a contract and legal obligations, Art. 6(1)(b) and 6(1)(c) GDPR.
• Verifying ownership or authorisation and preventing fraud: legitimate interest in protecting customers, vehicles and third parties, Art. 6(1)(f) GDPR.
• Managing complaints and legal claims: legal obligation and legitimate interest.
• Marketing communications: only with separate prior consent where required.
• Non-essential website analytics: consent, Art. 6(1)(a) GDPR, and only after the user accepts analytics technologies.

Automated decisions

No automated decisions producing legal effects or similarly significantly affecting the data subject are made, and no profiling is carried out for that purpose.

Retention periods

• Unsuccessful enquiries and quotations: 12 months after the last communication.
• Customer, service and contractual records: for the duration of the relationship and then blocked for the applicable legal limitation periods.
• Invoices and accounting records: for the legally required tax and commercial period, normally up to six years.
• Marketing data: until consent is withdrawn.
• Images of ownership or identity documents: deleted after verification, unless retention is necessary to document an authorised service, meet a legal obligation or defend a claim.
• Analytics data: kept according to the configuration of the analytics provider used; the exact period will be stated in the cookie policy once confirmed.

Recipients and providers

• Website hosting and publishing provider (Lovable).
• Cloudflare, for content delivery, security and bot protection.
• Google Ireland Limited, as the provider of Google Tag Manager, Google Analytics 4 and Google Ads, only if you accept analytics or advertising. Analytics data is retained for 14 months; advertising conversion data for 90 days.
• The website analytics provider, only if the user accepts analytics.
• WhatsApp Ireland Limited and Meta, when the user chooses to communicate via WhatsApp.
• Accounting and tax advisers, and public authorities where legally required.
• Data is not sold or shared with third parties for commercial purposes.

Google Sheets and Google Drive (request storage)

• Requests sent through the website form are stored in a private Google spreadsheet (Google Sheets / Google Drive), provided by Google Ireland Limited acting as a processor.
• The spreadsheet is not public: only the business owner and authorised persons have access.
• Retention in that spreadsheet: a maximum of 24 months.
• No photographs or file attachments are accepted through the form.
• Purpose: replying to the request, preparing a quote and providing the service. This purpose is separate from Google Analytics and Google Ads.

International transfers

Some of these providers may process data outside the European Economic Area. Where that happens, transfers rely, as applicable, on adequacy decisions, the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

WhatsApp

• WhatsApp is an optional communication channel. If you choose to write via WhatsApp, your information is also processed by WhatsApp Ireland Limited and Meta under their own privacy terms.
• As an alternative you can use the telephone number or email address given in this policy.

Your rights

• You may exercise the rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time without affecting the lawfulness of prior processing.
• To do so, write to the email address indicated or to the professional postal address, proving your identity.
• You may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es

Security and updates

Reasonable technical and organisational measures are applied to protect the data. This policy may be updated when services or applicable legislation change.

Request form

• The details you enter in the form (service, name, vehicle details, approximate address and problem description) are stored in our private database and copied to a private Google Sheets spreadsheet so we can handle your request.
• Purpose: answering your enquiry and providing the requested service. Requests are kept for a maximum of 24 months.
• To protect the form against spam we use an encrypted technical identifier (hash) derived from your connection. We do not store your raw IP address, and the identifier is deleted within 24 hours.
• The website form no longer accepts photo attachments. If you send photos inside the WhatsApp chat, that transfer happens through the WhatsApp/Meta service and not through the website form.