Privacy policy

Casa de Mali (Carrer Mallorca, 342 ,08013 Barcelona, mail:, processes the personal data collected or generated as a result of access, use and browsing by users of this website (the “Website”), as well as the control of the Website, in its capacity as data controller in accordance with the provisions of the applicable regulations and, in particular, Regulation (EU) 2016/679 of the Parliament and of the Council, of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and Organic Law 3/2018 of 5 December on the protection of personal data and guarantees of digital rights or any others that may replace or amend them in the future.

In general, the mere fact of visiting and browsing the Website does not automatically record data that would allow users (“Users” or, individually, “User”) to be identified by name.

Without prejudice to the foregoing, in order to access certain information or to use certain content or services on the Website (for example, to register or to use the contact form available to the User), Casa de Mali may require certain personal data from Users, which may include, fundamentally, name, surname, telephone number and e-mail address. In these cases, Casa de Mali will provide Users with the necessary information before proceeding to process their data.

Users, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to meet their request, by Casa de Mali, being voluntary the inclusion of data in the remaining fields. In the event that all the necessary data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

The User guarantees that the personal data provided are truthful and is responsible for communicating any changes to them. Your data will be treated with the utmost confidentiality in order to manage requests for information, content or services expressly requested by Users or with their consent. Likewise, Casa de Mali has a legitimate interest in using the information collected or generated to (i) improve the Website, its management and security, (ii) carry out studies to analyse the relevance and use of the Website, and (iii) when permitted by the applicable regulations, inform Users about products or services in our commercial relationship.

The legal basis that allows Casa de Mali to process Users’ data is (i) the voluntary access and browsing of the Website by Users, (ii) the request by Users for information or certain content or services, (iii) the fulfilment by Casa de Mali of its legal obligations, (iv) the legitimate interest of Casa de Mali in improving the Website and its security and (v) in the event that a User consents or the legitimate interest of Casa de Mali applies, the sending of commercial information.

The data will be kept for as long as there are contractual obligations derived from the services or contents requested by the Users and, subsequently, until the extinction of legal or contractual responsibilities that require them to be kept (e.g., until the extinction of the responsibility derived from data protection or cybersecurity regulations). In the event that data is processed for the purpose of sending commercial information, it may be kept as long as the User does not object to receiving information by any of the various free and simple means made available to him/her.

The data will not be passed on to third parties except in cases where there is a legal obligation to do so.

Users may exercise their rights of access, rectification, deletion and portability of their data, limitation or opposition to its processing, and any other rights recognised by law by writing (with proof of identity) to You may lodge a complaint with the competent supervisory authority for data protection (normally the Spanish Data Protection Agency – more information at if you consider that the processing does not comply with the regulations in force.