Last updated: September 23, 2025

1. Data controller

The entity responsible for processing your data is:

PASALY SHOP, SL (“ Pasaly ”)

• NIF: ES-B75901728

• Address: Carrer de la Química, 24, 08450 Llinars del Vallès (Barcelona), Spain

• Contact email: hello@pasalyshop.com

• WhatsApp: +34 611 421 149

Ownership of the website www.pasalyshop.com corresponds to Pasaly.

2. Recommendations

• Keep your devices protected with updated antivirus software to prevent unauthorized access.

• Please read this Privacy Policy and the other legal texts available on our website carefully.

3. Data we process

We may process the following categories of data:

• Identification and contact information: name, surname, email, telephone number, shipping and billing address.

• Account and transactions: purchase and sales history, consigned items, communications.

• Seller information: IBAN and bank account, garment information (brand, condition, estimated value).

• Payments and billing: data required to process payments, refunds, and comply with tax obligations.

• Customer service: messages sent via email, WhatsApp, form, or social media.

• Technical browsing data: IP, logs, device, cookies (see our Cookie Policy).

• Marketing and communications: preferences, newsletter subscriptions, campaign interactions.

We do not collect particularly sensitive data (health, ideology, religion, etc.).

4. Purposes and legitimacy

We process your data for the following purposes and on these legal bases:

1. Manage purchases and sales in Pasaly (including posting, shipping, and paying the seller).

• Legal basis: execution of the contract.

2. Answer queries, support and after-sales.

• Legal basis: execution of the contract / legitimate interest.

3. Comply with legal obligations in tax, accounting, and consumer matters.

• Legal basis: legal obligation.

4. Ensure authenticity and prevent fraud.

• Legal basis: legitimate interest / legal obligation.

5. Sending commercial communications (newsletter, WhatsApp, email).

• Legal basis: express consent; for customers, legitimate interest in similar products (opt-out).

6. Web analytics and service improvement.

• Legal basis: consent (analytical/marketing cookies).

You can withdraw your consent at any time by writing to hello@pasalyshop.com .

5. Retention periods

• Account and transaction data: for as long as your account is active and for up to 6 years after its closure due to commercial obligations.

• Deposit/payment details: contract term and up to 5–6 years for legal obligations.

• Support communications: up to 24 months .

• Marketing: until you revoke your consent or unsubscribe.

• Security/fraud: up to 24 months .
  
  

6. Recipients

We only share your data when necessary:

• Service providers (hosting, messaging, logistics, payment gateways, ERP, email marketing, analytics), who act as data processors .

• Financial institutions to manage collections and payments.

• Public authorities and security forces , in case of legal obligation (e.g. counterfeiting).

• External consultancies (tax, legal, accounting).

We do not sell your data to third parties.

7. International transfers

Some providers (e.g., WhatsApp, Meta, Stripe, Klaviyo) may be located outside the EEA. We ensure transfers using standard contractual clauses (SCCs) or other mechanisms permitted by the GDPR.

8. Rights

You can exercise your rights to:

• Access, rectification, deletion.

• Opposition and limitation of processing.

• Portability of your data.

• Withdrawal of consent.

Write to hello@pasalyshop.com with your request and proof of identity.

If you are not satisfied with the response, you can file a complaint with the Spanish Data Protection Agency ( www.aepd.es ) .

9. Security

Pasaly implements appropriate technical and organizational measures (encryption, access controls, backups) to protect your data. No system is infallible, but we will notify you of any relevant security breaches in accordance with the GDPR.

10. Minors

Our services are not directed to children under the age of 16. We will delete any data received without valid parental/guardian consent.

11. External links

Our website may contain links to third parties. Pasaly is not responsible for the privacy practices of those websites; we recommend you review their policies.

12. Changes in policy

We may update this Privacy Policy. We will always post the date of the most recent version and, if there are substantial changes, we will notify you.

13. Contact

For any privacy questions:
hello@pasalyshop.com
PASALY SHOP, SL – Carrer de la Química, 24, 08450 Llinars del Vallès (Barcelona), Spain
WhatsApp: +34 611 421 149