Privacy Policy

I. PRIVACY AND DATA PROTECTION POLICY

In accordance with current legislation, Ocassion Makers (hereinafter also referred to as the Website) undertakes to implement the necessary technical and organizational measures appropriate to the level of security required by the risk of the data collected.

Legislation included in this privacy policy

This privacy policy complies with current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it observes the following laws:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

• Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

• Royal Decree 1720/2007 of 21 December, approving the Regulations implementing Organic Law 15/1999 on the Protection of Personal Data (RDLOPD).

• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Data Controller Identity

The data controller of personal data collected via Ocassion Makers is: Walkiria Gonzalez, NIF: 000000000 (hereinafter, the Data Controller). Contact details are:

• Address: New York, United States

• Phone: +1 347 707 2563

• Email: hello@ocassionmakers.com

Personal Data Records

In compliance with the GDPR and LOPD-GDD, personal data collected through forms on this Website will be incorporated into our system to facilitate, expedite, and fulfill the commitments between Ocassion Makers and the User, maintain any relationship initiated via forms, or respond to a request or inquiry. A record of processing activities is maintained in accordance with Article 30.5 of the GDPR, detailing processing purposes and related criteria.

Principles applied to personal data processing

Processing will follow the principles outlined in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:

1. Lawfulness, fairness, and transparency

2. Purpose limitation

3. Data minimization

4. Accuracy

5. Storage limitation

6. Integrity and confidentiality

7. Accountability

Categories of personal data

Only identifying information is processed. No special categories of data as defined in Article 9 of the GDPR are collected.

Legal basis for processing

The legal basis is the User’s express and verifiable consent for specific purposes. Users may withdraw consent at any time, as easily as it was given.

Where data is collected via forms, the User will be informed whether providing such data is mandatory.

Purposes of processing

Data is used to manage, fulfill, and maintain the relationship between Ocassion Makers and the User. It may also serve commercial, statistical, and marketing purposes to tailor content, improve services, and enhance the user experience.

The specific purpose(s) of processing will be disclosed at the time the personal data is collected.

Data retention period

Data will only be retained for the minimum time necessary: up to 36 months, or until the User requests its deletion.

The User will be informed of the retention period or, when not possible, the criteria for determining it.

Data recipients

Personal data may be shared with:

• Google Analytics

• Meta

If data is transferred to a third country or international organization, the User will be informed in advance.

Children’s data

Only individuals aged 14 or older may lawfully give consent. For children under 14, parental or guardian consent is required.

Confidentiality and security of data

Ocassion Makers implements appropriate security measures to protect personal data, including SSL encryption for secure transmission.

However, internet security cannot be fully guaranteed. If a personal data breach occurs, the Data Controller will notify the User promptly if it is likely to result in a high risk to their rights and freedoms.

Personal data will be treated as confidential and access will be restricted to authorized personnel only.

User rights

Under GDPR and Organic Law 3/2018, Users may exercise the following rights:

• Right of access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to data portability

• Right to object

• Right not to be subject to automated decision-making, including profiling

Requests must include:

• Full name and ID copy (or legal equivalent)

• Detailed request

• Address for notifications

• Date and signature

• Any supporting documents

Requests can be sent to:

• Postal address: New York, United States

• Email: hello@ocassionmakers.com

Third-party website links

This Website may contain links to third-party websites with their own privacy policies. Ocassion Makers is not responsible for these external policies or data handling.

Complaints to the supervisory authority

If the User believes their data is being misused, they may file a complaint with their local data protection authority. In Spain, this is the Agencia Española de Protección de Datos: https://www.aepd.es

II. ACCEPTANCE AND CHANGES TO THIS POLICY

Users must have read and agreed to this Privacy Policy to allow data processing. Use of the Website constitutes acceptance of this policy.

Ocassion Makers reserves the right to modify this Privacy Policy at any time due to legal changes or its own discretion. Users are advised to review this page regularly.

This Privacy Policy was updated in compliance with GDPR and Organic Law 3/2018.

Effective as of April 13, 2025.