Privacy policy
Update date
October 22, 2025.
Data controller
SERMILITAR, S.L. (hereinafter, “SERMILITAR”), with CIF B72940315, registered office at C/ Pastor Miguel Blanco Ferrer, local 7, C.P. 11100, San Fernando (Cádiz, Spain). Contact email: info@sermilitar.store.
Applicable regulations
SERMILITAR guarantees compliance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI), as amended by Law 11/2023.
We also follow the guidelines of the Spanish Data Protection Agency (AEPD) and the European Data Protection Board (EDPB), including the Guide on the use of cookies in force since January 2024.
Personal data we collect
- Identification and contact data: name, surname, email address, phone number, and postal address.
- Shipping and billing data: delivery address, billing address, order history, and purchased products.
- Transaction data: card or payment method data collected by payment providers (PayPal, SeQura, Redsys, etc.).
- Browsing data and cookies: IP addresses, cookie IDs, and technical device data through our own and third-party cookies (Google Analytics, Facebook Pixel, etc.).
- Commercial preferences: email address and preferences if you subscribe to our newsletter.
- Data in WhatsApp or Telegram groups: phone number (WhatsApp) or username (Telegram).
Purposes and legal bases of processing
| Purpose | Description | Legal basis |
|---|---|---|
| Order management and contractual relationship | Processing purchases, shipments, payments, and claims. | Performance of a contract. |
| Compliance with legal obligations | Tax, accounting, and billing obligations. | Legal obligation. |
| Commercial communications | Information about products, promotions, and surveys. | Consent and legitimate interest. |
| Customer service and support | Responses to inquiries. | Performance of contract or pre-contractual measures. |
| Website usage analysis | Browsing statistics through analytical cookies. | Consent (except for exempt cookies). |
| Improvement of services and user experience | Offering tailored content and services. | Legitimate interest. |
| Fraud prevention and security | Identity verification and access monitoring. | Legitimate interest and legal obligation. |
| Automatic order notifications via WhatsApp | Sending informational messages through WhatsApp Business about the status of the order (confirmation, shipping, delivery). It will not be used for promotional purposes without prior consent. | Legitimate interest and implied consent. |
Order notifications via WhatsApp
In addition to the confirmation email, we use a third-party tool integrated with our e-commerce platform to send you notifications related to your order via WhatsApp Business. These communications include, for example, order number confirmation, shipping status, or delivery information.
The use of this channel is based on SERMILITAR's legitimate interest in keeping you informed during the purchase process, as well as the implicit consent granted by providing your phone number to manage the order. Under no circumstances will WhatsApp be used for promotional purposes without your prior and specific consent.
You can unsubscribe at any time by replying directly to the WhatsApp message with the word STOP or by requesting it via email at info@sermilitar.store. If you later wish to receive notifications again, you can easily resubscribe to this channel.
The tool used complies with European data protection regulations (GDPR and LOPDGDD) and with the privacy policies of WhatsApp Ireland Ltd., acting as data processor in accordance with Article 28 of the GDPR.
Recipients and data processors
We do not share data with third parties except when legally required or to provide logistics, customer service, fraud control, marketing, and analytics services.
If there are transfers outside the EEA, we use:
- Adequacy decisions (e.g., Shopify in Canada).
- Certification in the Data Privacy Framework (DPF).
- Standard Contractual Clauses (SCCs).
Retention periods
We retain data for the duration of the contractual relationship and the mandatory legal periods. Commercial data is kept until objection or withdrawal of consent. Cookies are retained according to the limits set by the AEPD.
Cookie policy
We use necessary cookies (without consent) and analytical/marketing cookies (with consent). You can accept or reject them from the cookie banner or manage them at any time. More information in the Cookie Policy.
Data processing in WhatsApp and Telegram groups
By joining, you agree that others may see your phone number or username. Use must be respectful. It is important that you are aware that, although we are committed to taking action against misuse, SERMILITAR cannot directly control how other individual users use your information once it is visible in the group. Therefore, we ask you to exercise caution when sharing personal data. You can unsubscribe by writing to info@sermilitar.store or by leaving the group.
Minors
We do not collect data from individuals under 18 years of age. If you become aware of this, contact us to delete it.
Exercise of rights
You can exercise your rights of access, rectification, erasure, objection, restriction, portability, and not to be subject to automated decisions by sending an email to info@sermilitar.store or a letter with a copy of your ID/NIF. You can also file a complaint with the AEPD.
Data security
We apply technical and organizational measures to protect your data. Although the Internet is not 100% secure, we work to mitigate risks.
Changes to the privacy policy
We may update this policy due to legal or technical changes. We will notify you of significant changes by email or on the website.