Privacy Policy
Last update: September 14, 2026
1. Data Controller
| Holder | Emrerdemnet LTD |
| Address | 4 Raven Road, Unit 1C3-1244, London, United Kingdom, E18 1HB |
| info@getpasovia.com | |
| Website | getpasovia.com |
Emrerdemnet LTD is established in the United Kingdom. By directing its offer to individuals residing in Spain, it processes their data in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and Law 34/2002 (LSSI-CE).
2. What data we process
- Identification and contact: full name, postal address, email, phone number.
- Order: purchased products, amount, history, shipping and billing address.
- Payment: managed directly by Shopify Payments. We do not store card numbers.
- Browsing: IP address, browser, device, pages visited, date and time. Obtained via cookies, with your consent when necessary.
- Communications: the content of messages you send us.
- Reviews: text, rating, images, or videos that you voluntarily send us, along with your name and city if you authorize their publication.
We do not request special categories of data (Article 9 GDPR). Pasovia is a product for household use; we do not collect or process health data. We ask that you do not send us medical information in your messages or reviews.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Manage your order, payment, shipping, and returns | Execution of the contract (art. 6.1.b) |
| Handle inquiries and after-sales service | Execution of the contract or legitimate interest (art. 6.1.b and 6.1.f) |
| Comply with tax, accounting, and consumer obligations | Legal obligation (art. 6.1.c) |
| Commercial communications by email | Consent (art. 6.1.a), or legitimate interest regarding similar products if you have already purchased (art. 21.2 LSSI) |
| Publish your review | Consent (art. 6.1.a) |
| Payment fraud prevention | Legitimate interest (art. 6.1.f) |
| Measure site usage | Consent for non-essential cookies (art. 22.2 LSSI) |
We do not use your data for purposes other than those indicated.
You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Each commercial email includes an unsubscribe link.
4. Retention periods
| Data | Period |
|---|---|
| Orders and billing | 6 years from the operation, and applicable tax deadlines |
| Customer account | While active and 3 years after the last interaction |
| Commercial communications | Until you withdraw consent or unsubscribe |
| Customer support inquiries | 3 years from their resolution |
| Published reviews | While the product remains for sale, unless you request its removal |
| Cookie consent log | 24 months |
Afterwards, the data is blocked and made available only to judges, courts, and administrations during the statute of limitations, and subsequently deleted.
5. Who has access to your data
We share data only with providers acting as data processors, with a contract in accordance with Article 28 of the GDPR:
- E-commerce platform and hosting: Shopify Inc.
- Payments: Shopify Payments
- Email and marketing: Klaviyo
- Analytics and measurement: Google Analytics, Meta Pixel, TikTok Pixel
We may also disclose data to tax authorities, law enforcement agencies, and courts when there is a legal obligation.
We do not sell your data or share it for advertising purposes.
6. International transfers
Emrerdemnet LTD is established in the United Kingdom and some providers are located outside the European Economic Area. These transfers are covered by:
- The adequacy decision of the European Commission corresponding to the destination country, when in force; or
- Standard Contractual Clauses approved by the European Commission, along with the necessary supplementary measures.
You may request a copy of these guarantees by writing to info@getpasovia.com.
7. Your rights
- Access — to know what data of yours we process
- Rectification — to correct inaccurate data
- Erasure — to request we delete it
- Restriction — to request that we suspend processing
- Portability — to receive it in a structured format
- Opposition — to object to the processing
- Withdrawal of consent provided
How to exercise them: write to info@getpasovia.com indicating the right you are exercising and attaching a copy of a document verifying your identity. We respond within one month, extendable to two if the request is complex.
Complaint: you may file a complaint with the Spanish Data Protection Agency (AEPD) — C/ Jorge Juan 6, 28001 Madrid — www.aepd.es
8. Security
We apply appropriate technical and organizational measures against destruction, loss, alteration, or unauthorized access, including TLS communication encryption.
If a security breach occurs with a high risk to your rights, we will notify you without undue delay and report it to the AEPD within 72 hours (Articles 33 and 34 GDPR).
9. Card payments
Payment is processed via Shopify Payments through an encrypted gateway. Your card data travels directly to the provider. We do not have access to your full card number nor do we store it.
Never send us card details or passwords by email.
10. Cookies
Necessary technical cookies do not require consent. The rest —analytics, personalization, and advertising— are only installed if you agree in the panel that appears upon entry.
You can change your choice from the "Cookie settings" link in the footer.
11. Minors
The store is not directed to individuals under 14 years of age and we do not knowingly collect their data. If we detect that we have processed data from a minor without authorization, we will delete it.
12. Third-party links
Our site may link to external pages. We are not responsible for their content or their privacy practices.
13. Changes
We may update this policy. We will always publish the date of the last update and, if the changes are substantial, we will inform you by email.
Emrerdemnet LTD — 4 Raven Road, Unit 1C3-1244, London, United Kingdom, E18 1HB — info@getpasovia.com