Privacy policy

Last updated: November 2026

1. Data controller

SEBOXA SL, with tax ID (NIF) B88750831 and registered address at Calle Andrea Doria 15, 07014 Palma (Illes Balears). Email: ibervaults@gmail.com.

2. Data we process

Identification and contact details (first name, surname, ID card/NIE/passport, telephone, email, address), billing details, service access data (personal code and fingerprint, processed as biometric data with your explicit consent) and browsing data.

3. Purposes and legal basis

To manage the booking and provision of the safe deposit box service (performance of the contract); to verify your identity and control access to the vault (performance of the contract and explicit consent for biometrics); to handle your enquiries (legitimate interest or consent); to comply with legal obligations, in particular on anti-money laundering and private security; and, if you authorise it, to send you commercial communications (consent).

4. Retention

Data is retained for the duration of the contractual relationship and, thereafter, for the periods required by applicable law to address any potential liabilities. Biometric data is deleted when the contract ends.

5. Recipients

No data is passed on to third parties except where required by law or court order. The web hosting, payment gateway, security and advisory providers working for Ibervaults under contract may access the data as data processors.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to ibervaults@gmail.com or to the controller's postal address, enclosing a copy of your identity document. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. CCTV

Our premises are equipped with CCTV cameras for security reasons. Footage is kept for a maximum of one month, unless requested by the authorities.