Last updated: August 2026
This Privacy Policy explains how Nómadas 24/7 collects, uses, stores, and shares the personal data of individuals who visit www.nomadas247.com, make a purchase, create an account, subscribe to the newsletter, or contact us.
1. DATA CONTROLLER
Controller: Iván Fandiño Dovalo
Trade name: Nómadas 24/7
Tax ID: 77407349K
Address: Avenida de Portugal, n.º 2B, 36980 O Grove, Pontevedra, Spain
Email: nomadas247@gmail.com
Phone: +34 698 150 978
Website: https://www.nomadas247.com
2. PERSONAL DATA WE PROCESS
Depending on how you interact with the store, we may process the following categories of data:
- First and last name.
- Billing and shipping address.
- Email and phone number.
- Information related to orders, purchases, exchanges, returns, and incidents.
- Data required to issue invoices.
- Customer account information, if you choose to create one.
- Communications you have with Nómadas 24/7.
- IP address, device, browser, and technical browsing data.
- Cookie and commercial communication preferences.
- Information necessary to prevent fraudulent operations.
Full credit card and payment account details are processed directly by payment platforms. Nómadas 24/7 does not have access to your full card details.
3. ORIGIN OF DATA
We may obtain your data:
- Directly from you when you make a purchase, create an account, complete a form, request a return, or contact us.
- Automatically through cookies and technologies necessary for the store's operation.
- From Shopify and the providers involved in managing orders, payments, billing, or deliveries.
- From PayPal when you choose this platform as your payment method.
4. PURPOSES AND LEGAL BASES
Order management and contractual relationship
We use your data to:
- Process the order and payment.
- Prepare and ship products.
- Issue invoices.
- Inform you about the order status.
- Manage exchanges, returns, refunds, and incidents.
- Maintain your customer account, when applicable.
The legal basis is the execution of the sales contract and the application of pre-contractual measures requested by the user.
Handling inquiries
We process the data provided through forms, email, phone, or WhatsApp to answer questions, prepare quotes, handle requests, or resolve incidents.
The legal basis is the application of pre-contractual measures, the execution of the contractual relationship, or our legitimate interest in properly handling received communications, as applicable.
Billing and legal obligations
We process and retain the necessary information to comply with our tax, accounting, commercial, consumer, and other applicable legal obligations.
The legal basis is compliance with a legal obligation.
Newsletter and commercial communications
When you subscribe to the newsletter, we use your email to send you news, product launches, promotions, and content related to Nómadas 24/7.
The legal basis is your consent. You can withdraw it at any time using the unsubscribe link included in each communication or by writing to nomadas247@gmail.com.
Withdrawing consent will not affect the lawfulness of processing carried out previously.
Security and fraud prevention
We may process technical, transactional, and identification data to protect the store, detect fraudulent operations, prevent misuse, and ensure the security of payments and services.
The legal basis is our legitimate interest in protecting the business, customers, and website security, as well as complying with legal obligations where applicable.
Cookies
Strictly necessary cookies are used to enable the operation of the store, cart, session, payments, and security.
Non-necessary cookies will only be used when you have given your consent through the settings panel. You can find more information in the Cookie Policy.
5. MANDATORY DATA
Fields marked as mandatory are necessary to process the order or handle the corresponding request.
If you do not provide the necessary data, we may not be able to process the purchase, issue the invoice, make the delivery, or respond to your request.
6. RECIPIENTS AND PROVIDERS
We may communicate or allow access to certain personal data to the following recipients, when necessary:
- Shopify, as an e-commerce platform, hosting, customer and order management, and newsletter service.
- Shopify Payments and its payment providers, to process and protect transactions.
- PayPal, when the customer selects this payment method.
- Billin, for generating and managing invoices.
- Correos (Spanish postal service), for managing transport, delivery, and, when applicable, incidents related to shipments.
- Banking entities and payment service providers.
- Technical, IT, hosting, or security providers necessary to maintain the store.
- Tax, accounting, or administrative advisors when necessary to comply with legal obligations.
- Public administrations, courts, tribunals, and other authorities when there is a legal obligation.
These providers will only receive the data necessary to provide the corresponding service and must process it in accordance with applicable regulations.
Nómadas 24/7 does not sell personal data to third parties.
7. SHOPIFY
The store is hosted on Shopify, which processes certain personal data to provide, maintain, protect, and improve its platform and the services used by Nómadas 24/7.
In certain functions, Shopify may act as a data processor and, in others, as an independent controller.
You can find more information in Shopify's Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers
You can also use Shopify's privacy portal:
8. INTERNATIONAL TRANSFERS
Some technology or payment providers, especially Shopify and PayPal, may process data from countries outside the European Economic Area.
When international transfers occur, they will be carried out using mechanisms recognized by regulations, such as adequacy decisions, standard contractual clauses of the European Commission, or other legally valid guarantees.
9. DATA RETENTION
We will retain personal data for the following periods:
- Order and billing data: for the time necessary to execute the purchase and for the periods required by tax, accounting, commercial, and consumer regulations.
- Inquiry data: for the time necessary to address them and, subsequently, for the applicable periods to determine possible liabilities.
- Customer account data: as long as the account remains active or until its deletion is requested, unless there is a legal obligation to retain it.
- Newsletter data: until you withdraw your consent or request to unsubscribe.
- Data related to exchanges, returns, or claims: during their processing and the necessary periods to address possible liabilities.
- Data associated with cookies: for the periods indicated in the Cookie Policy.
When the data is no longer necessary, it will be deleted or blocked for the legally required periods.
10. USER RIGHTS
You can exercise the following rights:
- Access: know what personal data we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data when appropriate.
- Objection: object to certain processing.
- Restriction: request that processing be limited in certain circumstances.
- Data portability: receive your data in a structured format or request its transmission to another controller when applicable.
- Withdrawal of consent: withdraw previously granted consent at any time.
- Not to be subject to exclusively automated decisions that produce legal effects or significantly affect you, where applicable.
To exercise these rights, please write to nomadas247@gmail.com, indicating "Data Protection" in the subject line and specifying the right you wish to exercise.
We may request additional information to verify your identity. We will respond within the legally established deadlines.
If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency:
11. COMMERCIAL COMMUNICATIONS
We will only send promotional communications when there is consent or another valid legal basis.
You can unsubscribe at any time using the link included in each email or by writing to nomadas247@gmail.com.
Even if you cancel commercial communications, we may continue to send you necessary messages related to orders, payments, accounts, incidents, or returns.
12. MINORS' DATA
The store is not intended for minors, and we do not knowingly collect data from minors without legally required authorization.
If a parent or guardian believes a minor has provided personal data without the necessary authorization, they can request its deletion by writing to nomadas247@gmail.com.
13. SECURITY
Nómadas 24/7 implements reasonable technical and organizational measures to protect data against loss, alteration, unauthorized access, disclosure, or improper processing.
However, no system connected to the Internet can guarantee absolute security. Users should avoid sending particularly sensitive data through unsecured channels.
14. LINKS AND THIRD-PARTY SERVICES
The website may contain links to social networks, payment services, or other pages managed by third parties.
When you access these services, the processing of your data will also be governed by the privacy policies of the respective third party. Nómadas 24/7 does not control the privacy practices of external pages.
15. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect legal, technical, or service-related changes.
The current version will always be available on this website and will indicate the date of the last update.
When changes are significant, users will be informed in accordance with applicable regulations.
16. CONTACT
For any questions related to this Privacy Policy or the processing of your data:
Iván Fandiño Dovalo — Nómadas 24/7
Email: nomadas247@gmail.com
Phone: +34 698 150 978
Address: Avenida de Portugal, n.º 2B, 36980 O Grove, Pontevedra, Spain