Legal information
Privacy policy
What data of yours we process, why we are allowed to, with whom we share it and what you can demand of us at any time. No small print.
Last updated · October 6, 2026
This page is a translation. In the event of any discrepancy, the Spanish version prevails.
Who processes your data
The controller of your personal data — the person you can hold to account — is:
- Controller
- Jorge Luis López Barrio
- Trading name
- Oveja Bohemia
- NIF
- 05298279E
- Address
- Carretera de Ronda, 82
04620 Vera, Almería, España - Telephone
- +34 950 940 201
Our activity does not require us to appoint a data protection officer, so privacy queries are handled directly by the controller at the address above. If you write there, we will reply within a maximum of one month.
What data we process and what for
We process only the data we need for what we do: selling you clothes and getting them to you. This is the complete list, with the purpose and the legal basis for each use.
We do not take automated decisions that produce legal effects concerning you, nor do we build profiles to change your price. The price you see is the same for everyone. If you accept advertising, Google and Meta do use your browsing to decide which of our adverts you will see; that affects neither the price nor the terms of your purchase, and you can withdraw it whenever you wish.
We do not process special categories of data — health, ideology, origin — and we ask that you do not send them to us in the contact form.
Where that data comes from
From you, almost always: you type it in when you buy, create your account, join a waiting list or write to us. We also obtain technical data from your browser when you visit the website, as explained in the cookie policy.
If you link an external account in order to log in without registering, we receive from that provider only the minimum identification data that you authorise at that moment. We do not access your contacts or post anything on your behalf.
With whom we share it
We do need to rely on service providers in order to operate. They work on our behalf, under a data processing agreement (Art. 28 GDPR), with only the essential data and without being able to use it for anything else:
Our providers are in the European Economic Area, except for analytics and advertising, which may involve access from the United States. In that case the transfer is covered by the EU-US Data Privacy Framework, to which Google and Meta adhere, or failing that by the standard contractual clauses approved by the European Commission. Remember that this transfer only takes place if you accept analytics.
How long we keep it
No more and no less than necessary. When the period expires, we keep the data blocked for as long as liabilities may arise and then we delete it.
Your rights
You are in charge of your data. You can exercise the following rights at any time and free of charge:
- Access. To know what data of yours we hold and what we do with it.
- Rectification. To correct whatever is wrong or incomplete. You can change your account and address details yourself directly in My account.
- Erasure. To have us delete your data when it is no longer necessary. Please note that we cannot delete invoices already issued: tax law obliges us to keep them.
- Objection. To object to processing based on our legitimate interest, and always, without needing any reason, to advertising.
- Restriction. To have us freeze the use of your data while we discuss whether it is accurate or whether it should be erased.
- Portability. To receive in a readable file the data you gave us, or to have us send it to another company.
- Withdrawal of consent. At any time, without affecting what we did before you withdrew it.
To exercise them, write to us at protecciondedatos@ovejabohemia.com or at Carretera de Ronda, 82, 04620 Vera (Almería), stating which right you wish to exercise. We will only ask you to prove your identity if we have reasonable doubts that it is you. We reply within a maximum of one month.
Commercial messages
We only write to you with news and offers if you have given us permission. You can withdraw it whenever you wish from the unsubscribe link in every email, or by writing to us at hola@ovejabohemia.com. Unsubscription is immediate.
Unsubscribing from advertising does not stop service emails: the order confirmation, the dispatch notice or the password reset will still reach you, because they are part of the purchase.
How we protect your data
We apply the technical and organisational measures required by Art. 32 GDPR: the entire website is encrypted with HTTPS, passwords are stored encrypted and cannot be recovered in plain text, and access to customer data is limited to those who need it to do their work.
Your card details do not pass through our servers: you enter them in the payment gateway’s form, which complies with the PCI DSS standard.
If, despite everything, a security breach posing a risk to your rights were to occur, we will notify you and notify the supervisory authority within the legal time limits.
Minors
This shop is not aimed at minors. To buy you must be over 18 years of age, and we do not knowingly collect data from children under 14 without the consent of the person exercising parental responsibility or guardianship over them. If we find that we have received data from a minor, we will delete it. If you are a mother, father or guardian and you believe that information about a minor in your care has reached us, write to us at protecciondedatos@ovejabohemia.com.
Changes to this policy
If we change the way we process your data, we will update this page and the date shown above. When the change is significant, we will notify you by email or with a visible notice on the website before it starts to apply.