Privacy policy
Last updated: 2 October 2026
Your privacy is important to us.
At Cerrajería Merafex, S.L. we are committed to protecting your privacy and to complying with the General Data Protection Regulation (GDPR) and the Organic Law on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Identity: Cerrajería Merafex, S.L.
- Tax ID number (NIF): B88741087
- Address: Pl. de la Universitat, 3, 08007 Barcelona
- Telephone: 611 37 54 95
- Email: info@merafex.es
- Data Protection Officer (DPO): dpo@merafex.es
2. Principles applicable to data processing
Your personal data will be processed in accordance with the following principles:
- Lawfulness, fairness and transparency: We will process your data lawfully, fairly and transparently.
- Purpose limitation: Data will be collected for specified, explicit and legitimate purposes.
- Data minimisation: We will only collect the data that is necessary.
- Accuracy: Data will be accurate and kept up to date.
- Storage limitation: We will keep data only for as long as necessary.
- Integrity and confidentiality: We will ensure the security of your data.
3. Personal data we collect
3.1. Data you provide to us directly
- Contact form: Name, telephone number, email address and message.
- Telephone calls: Name, telephone number, service address.
- WhatsApp: Telephone number, name and enquiries.
- Email: Email address, name and content of the communication.
3.2. Data collected automatically
- IP address
- Browser type
- Operating system
- Pages visited
- Date and time of access
- Cookies (see Cookie Policy)
4. Purposes of processing
Your personal data will be processed for the following purposes:
- Provision of services: Handling your requests for locksmith services.
- Commercial communications: Sending you information about our services (only with your consent).
- Administrative management: Issuing quotes and invoices.
- Legal compliance: Complying with legal and tax obligations.
- Service improvement: Analysing the use of the website in order to improve the experience.
- Advertising: Measuring the effectiveness of our Google Ads campaigns and showing you personalised advertising (only if you accept advertising cookies).
- Customer service: Responding to enquiries, questions and complaints.
5. Legal basis for processing
The processing of your data is based on:
- Performance of a contract: To provide the services requested.
- Consent: For commercial communications and the use of non-essential cookies.
- Legitimate interest: To improve our services and security.
- Legal obligation: To comply with tax and legal regulations.
6. Data retention period
- Customer data: For the duration of the business relationship and for 6 years thereafter (tax obligation).
- Enquiries and quotes: 1 year if you do not become a customer.
- Commercial communications: Until you withdraw your consent.
- Cookies: As set out in our Cookie Policy.
7. Recipients of the data
Your personal data will not be disclosed to third parties, except in the following cases:
- Legal obligation: When required by the competent authorities.
- Service providers: Hosting, email marketing and payment management providers (with data protection safeguards).
- Lock suppliers: Only the data necessary for the provision of the service.
- Google Ireland Limited: Only if you accept advertising cookies, as the provider of Google Ads (see our Cookie policy).
All providers comply with the GDPR and have signed confidentiality agreements.
8. International transfers
As a general rule, we do not transfer data outside the European Economic Area (EEA). The exception is Google Ads advertising cookies: only if you accept them, Google may process data in the United States under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission.
Should we make any other transfers, we will ensure that the destination country offers an adequate level of protection or will apply appropriate safeguards (standard contractual clauses approved by the EU).
9. Data subjects' rights
You are entitled to exercise the following rights in relation to your personal data:
- Right of access: To know what personal data we process about you.
- Right to rectification: To request the correction of inaccurate data.
- Right to erasure: To request the deletion of your data.
- Right to object: To object to the processing of your data.
- Right to restriction of processing: To request that processing be restricted.
- Right to data portability: To receive your data in a structured format.
- Right to withdraw consent: At any time.
- Right to lodge a complaint: With the Spanish Data Protection Agency (AEPD) (www.aepd.es).
How can you exercise your rights?
To exercise any of these rights, you may contact us by:
- Email: info@merafex.es or dpo@merafex.es
- Telephone: 611 37 54 95
- Post: Pl. de la Universitat, 3, 08007 Barcelona
You must enclose a copy of your national ID card (DNI) or equivalent identity document.
10. Security measures
We have implemented appropriate technical and organisational measures to ensure the security of your personal data and to prevent its alteration, loss, or unauthorised processing or access:
- SSL/TLS encryption in all communications
- Firewalls and intrusion detection systems
- Regular backups
- Restricted access control to personal data
- Staff training in data protection
- Regular security audits
11. Data of minors
Our services are not directed at children under the age of 14. We do not knowingly collect personal data from minors. If we discover that data has been collected from a minor without parental consent, we will delete it immediately.
12. Updates to this policy
This Privacy Policy may be amended. We recommend that you review it periodically. The date of the last update is shown at the beginning of the document. We will notify you of any substantial change.
13. Contacting the Data Protection Officer
For any matter relating to the protection of your personal data, you may contact our Data Protection Officer:
- Email: dpo@merafex.es
- Telephone: 611 37 54 95
14. Supervisory authority
If you consider that the processing of your personal data is not appropriate, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
- Website: www.aepd.es
- Address: C/ Jorge Juan, 6, 28001 Madrid
- Telephone: 901 100 099 / 912 663 517