This policy explains how the personal data of those who visit the website, contact the owner, or request and engage professional services is processed.
| Controller | Ulrich Malsch |
|---|---|
| Tax ID/NIE | X1460755W |
| Address | C/ Ali Bei 37, 1st 2nd, 08010 Barcelona, Spain |
| ulrich@ulrichmalsch.com | |
| Phone | +34 670 05 05 24 |
| Website | www.ulrichmalsch.com |
Please refrain from providing particularly sensitive data that is not necessary for the enquiry or assignment. Where professional documentation contains third-party data, the person submitting it must be entitled to do so and must limit it to what is strictly necessary.
| Purpose | Legal basis | Usual data |
|---|---|---|
| Responding to enquiries, requests for information, availability or quotes. | Application of pre-contractual measures requested by the data subject and, depending on the case, legitimate interest in handling professional communications. | Contact details and content of the enquiry. |
| Preparing, managing and carrying out the contracted services. | Performance of a contract or application of pre-contractual measures. | Contact details, assignment data and necessary documentation. |
| Managing invoicing, payments, accounting and tax or legal obligations. | Compliance with legal obligations and contract performance. | Identification, tax, banking and financial data. |
| Managing complaints, preventing misuse and defending rights. | Legitimate interest and, where applicable, compliance with legal obligations. | Communications, contractual data and necessary evidence. |
| Analysing use of the site through non-essential cookies, only when enabled. | User consent. | Online identifiers and technical data indicated in the Cookie Policy. |
No newsletters or periodic commercial communications will be sent unless that service is expressly implemented and separate consent is requested, or another valid legal basis exists. The data subject may object to commercial communications at any time.
Data marked as necessary in a form or request are essential in order to respond or provide the service. The absence of that data may prevent the enquiry from being processed, a quote from being prepared, or the assignment from being carried out.
When data are no longer necessary, they will be deleted or kept blocked for as long as legal liabilities may arise from them.
Data will not be sold or transferred for commercial purposes. Providers offering services necessary for the professional operation, such as web hosting, email, IT maintenance, storage, video conferencing, administrative management, accounting or invoicing, may access it. These providers will act as data processors where applicable and will be subject to confidentiality and data protection obligations.
Data may also be disclosed to banks and payment providers to manage payments, to professional advisors, to public authorities, courts, tribunals or law enforcement when there is a legal obligation or it is necessary to bring, exercise or defend claims.
Some technology providers may process data outside the European Economic Area. In such cases, mechanisms recognised by the regulations will be used, such as adequacy decisions, the EU-US Data Privacy Framework where applicable, standard contractual clauses or other appropriate safeguards. The specific information will depend on the providers actually used at any given time and may be requested from the controller.
You may request access to your data, its rectification, erasure, portability, restriction of processing, or object to it. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, send a request to ulrich@ulrichmalsch.com, indicating the right you wish to exercise and providing the information necessary to verify your identity. A copy of an identity document will only be requested when strictly necessary to prevent third-party access to the data.
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): www.aepd.es
The controller applies appropriate technical and organisational measures to protect data against loss, alteration, unauthorised access, use or disclosure, taking into account the nature of the information and the risks of processing. Those involved in providing professional services will be subject to confidentiality duties where applicable.
The website and professional services are not specifically directed at minors. Personal data of minors should not be sent without the involvement and authorisation of those holding parental responsibility or guardianship, unless a sufficient legal basis exists.
The site may link to third-party services. Each third party is responsible for its own privacy practices. It is recommended to review their policies before providing them with information.
Last updated: 3 August 2026. This policy may be amended to reflect legal, technical or processing-related changes. The current version will be available on the website.