Privacy Policy

Last updated: February 5, 2026.

1. Data Controller

The owner of this website and the data controller is Mollach (hereinafter, the Service), with registered office at Av. Conde Sallent, nº. 17, First Floor, 07003, Palma, Balearic Islands, Spain.

Data Controller: Joan Toni Blanco Bisellach
Tax ID: E56458557

Email: info@mollach.com

2. Data Protection

2.1. Information We Collect

The personal and non-personal information we collect varies depending on your use of the website and its features.

This information comes to us in two ways: 1) information collected automatically, 2) information you provide voluntarily, and 3) information provided by third parties.

2.1.1. Automatically Collected Data

· Information stored on your device through cookies or similar mechanisms, always with your prior consent. See our Cookie Policy for more details.

· The IP address from which the connection is made, the type of device used and its characteristics, the operating system version, the browser type, language, date, country, time of the request, the referring URL, and the mobile network used, among other things.

· Website data and any errors detected during its use, such as pages not found or display errors.

· Mollach uses Facebook pixels, a service provided by Facebook Ireland Ltd. These pixels facilitate personalized advertising and campaign evaluation. More information about Facebook cookies can be found here.

· Mollach HubSpot, a service provided by HubSpot Inc. Ireland Limited, uses functional, analytical, and advertising cookies to better understand your behavior. This processing is based on our legitimate interest in direct marketing. Learn more about HubSpot cookies here.

· Mollach also uses Google Analytics, a service provided by Google LLC. These cookies collect information—including the user's IP address—which Google processes and stores as described at www.google.com. You can disable Google Analytics cookies here.

2.1.2. Data You Voluntarily Provide

· Information provided through a message sent via the contact channels established by the Service, such as name, surname, email address, telephone number, and message.

· Data required by the Service to complete your registration: name, email address, and password.

2.1.3. Information provided by third parties

This information will consist of:

· Information provided by social networks or similar services.

· Analytics and statistics providers (Google Firebase, Google Analytics for Firebase). The use of Google Analytics, an analytics service provided by Google, Inc., located in the United States with headquarters at 1600 Amphitheatre Parkway, Mountain View, California 94043, involves the use of cookies that collect information, including the user's IP address, which will be transmitted to, processed by, and stored by Google under the terms set forth on the website www.google.com. This includes the possible transfer of such information to third parties when required by law or when such third parties process the information on Google's behalf. In any case, you can disable Google Analytics cookies from the website.

2.2. Rights

Please note that completing the forms is voluntary. However, if you do not provide the required information (marked with an asterisk), the use of certain website functions will be unavailable or limited.

The personal data you provide will be incorporated into and processed by the Service for the purpose of responding to your requests.

You may exercise your rights of access, rectification, erasure, restriction of processing, objection, and data portability at any time by sending an email to info@mollach.com or by writing to the following postal address: Av. Conde Sallent, nº. 17, First Floor, 07003, Palma, Balearic Islands, Spain.

In both cases, you must identify yourself with your full name and provide a copy of your national identity document or equivalent, if necessary.

Here you can find the different forms for exercising these rights.

If you have given your consent for a specific purpose, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

Furthermore, if you believe there is a problem with how we are handling your data, you can address your complaints to the relevant data protection authority, which in the case of Spain is the Spanish Data Protection Agency.

2.3. Use of Data

The Service will use the collected data to:

· Manage and update the service (legal basis: our legitimate interest in keeping the service up-to-date and in good working order).

· Respond to your requests (legal basis: consent).

· Manage your registration and provide the requested service (legal basis: the contractual relationship).

· Better understand our users' interests and adapt the services to their preferences and needs (legal basis: our legitimate interest in providing the most personalized service possible).

· Conduct studies on the effectiveness of the website, marketing, advertising, and sales using cookies (legal basis: our legitimate interest in improving the service or your consent, as applicable).

· Maintaining the security of the Service, investigating illegal activities, enforcing our terms, and cooperating with law enforcement agencies (legal basis: our legitimate interest in ensuring the security of the Service and its users and compliance with a legal obligation).

If the legal basis is your consent, you may withdraw it at any time without affecting the lawfulness of the processing carried out beforehand. If the legal basis is legitimate interest, you may object to the processing at any time for reasons related to your particular situation.

The Service does not make automated decisions, although it may create basic user profiles based on our legitimate interest in direct marketing and for the purpose of offering personalized offers.

The Service may use aggregated and anonymized user information to display to third parties, as well as share statistics and demographic data, without allowing for individual identification.

2.3.1. In emails and contact forms

The website uses TLS encryption, which allows users to securely submit their personal data through the contact forms.

The personal data collected will be processed automatically and incorporated into the Service's corresponding Record of Processing Activities.

In this regard:

· Your IP address will be collected to verify the message's origin, offer appropriate recommendations (e.g., presenting information in the correct language), and detect potential irregularities (e.g., cyberattack attempts), as well as data related to your Internet service provider.

· You may also provide us with your data by telephone, email, and other indicated means of communication.

2.3.2. On Social Media

We maintain profiles on some of the main social media platforms, and the Service is responsible for processing the data published on these platforms (for example, photos uploaded by the Service that include people's faces).

This data will be processed according to the social media platform's regulations for corporate profiles. Therefore, when not prohibited by law, we may inform our followers through any means permitted by the social media platform about our activities or offers, as well as provide personalized customer service.

We do not extract data from social media platforms under any circumstances unless we have obtained the user's explicit and specific consent to do so.

When, due to the nature of social media platforms, exercising your rights depends on modifying your profile, we will assist and advise you to the best of our ability.

2.4. Data Retention

Personal data will be retained for the periods indicated below:

· Anonymized data will be retained indefinitely.

· User data will be retained for a maximum of 12 months to process requests.

· User data will be retained for the minimum period necessary, which may be up to:

- 5 years, in accordance with Article 1964 of the Civil Code (personal actions without a specific limitation period).

- 6 years, according to Article 30 of the Commercial Code (accounting records or invoices, for example).

3. Data Shared with Third Parties

The Service requires these third parties to comply with this Privacy Policy where applicable and to maintain their own policies. However, the Service is not responsible for compliance with those policies.

In certain circumstances, the Service may share, use, retain, or disclose the personal information collected with third parties:

· To provide the Service: providers acting on our behalf (payment services, web hosting, statistical analysis, etc.). These providers may access the information necessary to perform their functions, but may not share or use it for any other purpose.

· To cooperate with competent authorities when we reasonably believe it is necessary to comply with the law, a legal process, or a legitimate interest. In any case, we will only provide the information strictly required.

· To transfer personal data to recipients located outside the EEA/UK: when data is transferred to countries that do not offer an adequate level of protection according to the European Commission, we will ensure that your rights are adequately protected through Standard Contractual Clauses or other appropriate safeguards, unless an exception under Article 49 of the GDPR applies.

Where necessary, we will agree on additional measures with the recipients. Copies of the safeguards and the list of recipients are available upon request (trade secrets or confidential information may be omitted).

4. Modifications

The Service reserves the right to make any modifications it deems appropriate to its website without prior notice, and may change, delete, or add to both the content and services provided through it, as well as the way in which they are presented.

Furthermore, these terms and conditions may change at any time. Modifications will take effect upon publication.

5. Cookies

See our Cookie Policy to learn how we use them. This website uses its own cookies, which are obtained and collected as set out in the following provisions. We invite you to consult our Cookie Policy.

6. Security Measures

The Service takes all necessary technical and organizational measures to protect the security and integrity of the personal and non-personal information collected, both against unauthorized access and accidental alteration, loss, or destruction.

However, the Service cannot guarantee the absolute security of the information collected, so you must cooperate and use common sense at all times regarding the information you share.

You understand and acknowledge that, even after deletion, personal and non-personal information may remain visible in caches or if other users have copied or stored it.

7. Accuracy and Truthfulness of Personal Data Provided by Users

Users agree that the data provided on the website is correct, accurate, and up-to-date, and are obligated to keep it updated.

Users are solely responsible for the truthfulness and accuracy of the personal data they enter on the website.

8. Exclusion of Warranties and Liability

The Service will exercise due diligence in providing the Service, including ensuring the accuracy, completeness, and timeliness of the content, as well as the availability and continuity of the Service's operation.

In any case, the user understands that the Service may contain errors and omissions, which will be corrected as soon as they are detected or reported. Furthermore, the Service will endeavor to provide sufficient advance notice of any service interruptions.

Furthermore, the Service excludes all liability for damages of any kind that may arise from the use of the Service and its content by users, clients, or professionals, or that may arise from the lack of truthfulness, validity, or authenticity of the information that users provide to others about themselves. In particular, the Service excludes all liability for damages of any kind that may arise from the impersonation of a third party by a user in any type of communication carried out through the Service. It also excludes liability for website unavailability and the transmission of malicious software within the content, despite having taken all reasonable technological measures to prevent it.

9. Modifications and Severability

Furthermore, these terms and conditions may change at any time. Modifications will take effect upon publication.

If any of these clauses is declared, in whole or in part, null or ineffective, it will only affect that specific provision or the part thereof that is null or ineffective. The remaining terms and conditions will remain in full force and effect, and the affected provision, or the part thereof, will be deemed not to have been included.

10. Acceptance and Consent

As a user of this website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to its processing by the data protection officer in the manner and for the purposes indicated in this Privacy Policy.

11. Contact

If you need more information, you can contact us at:
Email: info@mollach.com.

Privacy Policy

Last updated: February 5, 2026.

1. Data Controller

2. Data Protection

​