Privacy policy

STELLIO VENTURES S.L. (hereinafter, “MELLER”) provides users who access https://mellerbrand.com (hereinafter, the “Website”) with the following information regarding the processing of their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (the “LOPDGDD”).

 

1. Who is the data controller?

Identity: 

STELLIO VENTURES, S.L.

Tax ID (C.I.F.):

B66279118 

Postal address:

Calle Aragón 247, 08007, Barcelona, España.

Email address: 

privacy@mellerbrand.com 

 

2. Privacy statement

MELLER is fully aware of the importance that the processing of personal data has for users. We are therefore committed to guaranteeing its protection, confidentiality and security, in accordance with the principles of proactive responsibility, transparency and respect for individual rights.

This Privacy Policy is intended to inform you, in a clear and accessible way, about what personal data we collect through the website https://mellerbrand.com, for what purpose we use it, on what legal basis we process it, and what rights data subjects may exercise.

We undertake to process only the personal data strictly necessary for the specific and legitimate purposes described in this policy, and to adopt all appropriate technical and organisational measures to prevent unauthorised access, loss or misuse.


3. When do we collect personal data?

  • Through our available customer service channels: such as our chatbot and our email address info@mellerbrand.com;

  • Through the subscription form for sending our commercial communications;

  • Through the purchase, use and enjoyment of our products;

  • From your interaction when rating our products and services, through reviews; and

  • Through your use and enjoyment of our Website: our web platform installs cookies that collect information about browsing. For further information, you can access the Cookie Policy.

 

4. What categories of personal data do we process?

The data we may process, depending on the corresponding purpose, includes:

  • Identification data: for example, first name and surname.

  • Contact data: for example, telephone number, email address and other contact details provided by the user

  • Data relating to the query or request made by the user: including any information the user voluntarily provides in the content of their message in order to handle their query, request or complaint

MELLER does not request or require special categories of personal data through the Website, and we recommend that users do not provide such information. However, should a user provide special categories of data on their own initiative, such data will only be processed to the extent strictly necessary to handle their request and with the safeguards required by applicable law.


5. For what purpose and on what legal bases do we process personal data? 

At MELLER we process Users’ personal data based on the purposes and legal bases set out below: 

Purposes

Legal basis

  • Properly managing the purchase of our products, including invoicing and delivery, as well as redirecting to the corresponding payment platform. MELLER will not process customers’ financial data, such as credit card numbers.

The application of pre-contractual measures requested by the User and the performance of the contract, in accordance with Article 6(1)(b) GDPR. Where certain processing is necessary to comply with legal obligations, the legal basis will be compliance with a legal obligation, in accordance with Article 6(1)(c) GDPR.

  • Handling incidents, changes, returns, refunds, warranties and claims relating to purchased products.

The performance of the contract, in accordance with Article 6(1)(b) GDPR, and compliance with applicable legal obligations, in accordance with Article 6(1)(c) GDPR. Where necessary to bring, exercise or defend claims, the processing will be based on MELLER’s legitimate interest, in accordance with Article 6(1)(f) GDPR.

  • Preventing, detecting and managing fraudulent transactions, misuse or unlawful acts, and protecting transactions, Users and MELLER’s systems.

MELLER’s legitimate interest in preventing fraud, protecting its systems and ensuring the security of transactions, in accordance with Article 6(1)(f) GDPR. Where the processing is necessary to comply with a legal obligation or respond to a request from a competent authority, it will be based on Article 6(1)(c) GDPR.

  • Compliance with legal obligations applicable to Meller. The processing and retention of data takes place where necessary to comply with legal obligations or requests from competent authorities.

Compliance with the legal obligations applicable to MELLER, in accordance with Article 6(1)(c) GDPR.

  • Providing Users with a customer service through the channels available at any given time, including the AI-based chatbot, email, telephone, social media profiles, among others, in order to attend to and resolve any request for information, incident or query relating to MELLER.

The application of pre-contractual measures or the performance of the contract, where the query relates to a possible purchase or order, in accordance with Article 6(1)(b) GDPR. In other cases, MELLER’s legitimate interest in attending to queries and providing an adequate customer service, in accordance with Article 6(1)(f) GDPR. Where applicable, compliance with legal obligations, in accordance with Article 6(1)(c) GDPR.

  • Keeping Users informed about MELLER’s products, information, news, promotions and events by sending commercial communications by electronic means for advertising and promotional purposes, including managing the newsletter subscription.

The consent of Users (Art. 6(1)(a) GDPR) or MELLER’s legitimate interest in regularly keeping its customers informed about its products, promotions and/or news once they have purchased its products – Article 6(1)(f) GDPR).

  • Improving the quality and service provided by MELLER, by sending customers invitations to rate the products and service received, assigning and verifying that these are genuine reviews, publishing their ratings on the Website and analysing them.

MELLER’s legitimate interest in knowing its customers’ level of satisfaction in order to improve its products and service – Article 6(1)(f) GDPR).

  • Enabling proper browsing of the web application, as well as ensuring its security and adapting it to the personalisation criteria chosen and remembering them; as well as carrying out usage analysis, marketing and/or advertising actions, such as online and social media advertising and enabling reminders to recover abandoned shopping carts (remarketing cookies).

  • See our Cookie Policy.

MELLER’s legitimate interest (Article 6(1)(f) GDPR) in maintaining the security, accessibility and usability of the Website, in the case of technical or preference cookies chosen by the User; and the User’s consent (Article 6(1)(a) GDPR), in the case of cookies for analytics, marketing and/or advertising purposes.

  • Handling contact requests made by persons interested in collaborating professionally or commercially with MELLER, including potential distributors, candidates or other third parties who make contact through the available channels.

The application of pre-contractual measures requested by the user, in accordance with Article 6(1)(b) GDPR, where the request relates to assessing a contractual, commercial or professional relationship; and, where applicable, MELLER’s legitimate interest in attending to and handling the requests received, in accordance with Article 6(1)(f) GDPR.


6. For how long will we keep personal data?

Personal data will be processed for as long as necessary to fulfil the purposes set out in this privacy policy, or until Users withdraw their consent or exercise their right to erasure, as well as for as long as required by the applicable legal and regulatory provisions.

Once the applicable retention periods have ended, the data will be kept duly blocked for the statute-of-limitations period of any actions that may arise from the different processing activities, and for the purpose of bringing, exercising or defending claims.


7. To which recipients may the data be disclosed? Are international transfers carried out?

MELLER may disclose Users’ personal data to:

  • Public Authorities, administrative bodies, courts and law enforcement agencies, where necessary to comply with a legal obligation, respond to a request from a competent authority, or bring, exercise or defend claims.

  • Professionals and advisors, where their involvement is necessary to defend MELLER’s legal, economic or reputational interests.

  • Financial institutions and payment platforms, which will process the data as independent controllers in accordance with their own privacy policies.

  • Transport companies and logistics operators, where necessary to manage and deliver orders.

MELLER may also grant access to personal data to providers acting as processors, following its instructions and solely for the purpose of providing the contracted services. These providers include hosting and technology infrastructure services, e-commerce platforms, customer service tools, including Yuma AI, analytics and digital advertising tools, and other technology providers necessary for the operation of the Website and the management of the relationship with Users.

Some of these providers may process data from countries located outside the European Economic Area, which involves international data transfers. In particular, Yuma AI may process data in the United States to handle certain queries received through the chatbot and the customer service email address. This data transfer is covered by its current adherence to the EU-U.S. Data Privacy Framework. However, should such adherence cease to be in force or fail to cover the processing carried out, MELLER will apply another mechanism recognised under the GDPR, such as the Standard Contractual Clauses approved by the European Commission, supplemented, where necessary, with appropriate additional measures.


8. What rights do Users have?

If we process Users’ data, they should know that their rights are as follows:

  • Right to request access: Users may ask whether MELLER is processing their personal data, and if so, access such data.

  • Right to request rectification: where the data is inaccurate, or to complete data that MELLER holds incompletely.

  • Right to request erasure: that is, to request that all of the User’s data be deleted. However, this does not mean that the data will be entirely eliminated; rather, it will be kept blocked in a way that prevents its processing, without prejudice to it being made available for the handling of any liabilities that may have arisen as a result of the processing, during the statute-of-limitations period for such liabilities, and will be permanently deleted or anonymised once that legal period has elapsed.

  • Right to restriction of processing: in this case, the data will only be kept for the purpose of bringing or defending claims.

  • Right to object to processing: we will stop processing the personal data, except where it must continue to be processed for legitimate reasons or for the purpose of bringing or defending possible claims.

  • Right to withdraw consent previously given. If the User has given their consent for any specific purpose, such as receiving commercial communications, they may withdraw it at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

  • The withdrawal of consent may also be exercised with respect to the use and downloading of cookies, and consent may be withdrawn by adjusting preferences in the cookie management panel or in the settings of the web browser used, as set out in the Cookie Policy.

  • Right to data portability: where the User wishes their data to be processed by another controller, the transfer of the data to the new controller will be facilitated. However, this right may only be exercised where the processing is based on the performance of a contract or on consent, and where the processing is carried out by automated means.

  • Right not to be subject to a decision based solely on automated processing of their personal data.

9. How can users exercise their rights?

Users may exercise their rights by submitting an express request through any of the following channels:

In any event, if you consider that the processing of your personal data infringes applicable data protection law, or if you have not received a satisfactory response in the exercise of your rights, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) through its official website: www.aepd.es.


10. Security measures

MELLER undertakes to process users’ personal data with the utmost confidentiality, at all times observing the duty of secrecy and acting in accordance with the provisions of Article 32 of the GDPR. MELLER will therefore adopt the technical and organisational measures necessary to guarantee its security and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it may be exposed.


11. Additional information

  • Policy on use by minors: We do not knowingly collect information from minors. In any event, if you are a parent or legal guardian and believe that a minor has provided personal data to MELLER, please contact us by email at info@mellerbrand.com.

  • Third-party personal data: If the data provided belongs to a third party, the User guarantees that they have duly informed that third party of the matters set out in this privacy policy and that, where applicable, they have obtained their consent for the processing that requires it.

  • Links: The Website may contain links to other websites that MELLER considers to be of interest to Users. Please note that MELLER is not responsible for the processing of personal data that may be carried out by third parties who own the domains of these links.

  • Updates: The processing of Users’ personal data will be carried out in accordance with the provisions of this privacy policy. Should MELLER make any amendment to its policies, Users will be duly informed.

  • For further information on how the website’s cookies process certain personal data, please see our Cookie Policy.

 


Last updated: 17th August 2026.