Legal

Privacy policy

The processing of users' personal data on this website is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data protection and guarantee of digital rights (LOPDGDD).

Last updated: September 2026

1. Data controller

Owner: Passeig de Gràcia Consulting S.L.
CIF: B21625504
Address: c/ Josep Calvet 28, 08302 Mataró (Barcelona)
Email: hola@dresscodehouse.com

2. Purpose and legal basis

The data provided through the contact form and WhatsApp is processed for the purpose of handling enquiries, managing information requests and maintaining the professional relationship with the interested party.

The legal basis is the express consent of the interested party when sending the form or starting the conversation and, where applicable, the controller's legitimate interest in responding to the request and the pre-contractual basis for preparing a commercial proposal.

3. Data retention

Data will be retained for as long as necessary to handle the request and subsequently for the legally required periods. If no commercial relationship is formalised, data will be retained for as long as necessary to respond to potential enquiries and then deleted.

4. Recipients

Data will not be transferred to third parties except by legal obligation. Processors necessary for the provision of the service (hosting, tool and messaging providers) may access the data under the corresponding data processing agreements.

5. Data subject rights

The user may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by contacting hola@dresscodehouse.com, indicating the right they wish to exercise. A complaint may also be filed with the Spanish Data Protection Agency (www.aepd.es).

6. International transfers

If processors are located outside the European Economic Area, appropriate safeguards shall be ensured in accordance with the GDPR, through standard contractual clauses or adequacy decisions.

7. Security measures

The controller has adopted the necessary technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, processing or unauthorised access.