QUELMI BCN

Purchase Now

Privacy Policy

Effective Date: October 18, 2026

1. Introduction

Welcome to the privacy policy of QUELMI BCN SL, operating the travel essentials e-commerce website accessible at www.quelmibcn.com. As a small, travel-focused team based in Barcelona, Spain, we curate practical, space-saving travel essentials designed to make every journey smoother, from weekend coastal getaways to long cross-continent adventures across Europe. We are fully committed to protecting the personal data and privacy rights of all our website visitors, customers, and users, in full compliance with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law on Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and the Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

This policy outlines clearly how we collect, use, store, share, and protect your personal information when you interact with our website, purchase our products, or engage with our brand services. We design all our data processing activities to align with the principles of legality, fairness, transparency, data minimization, storage limitation, accuracy, integrity, and accountability as required by applicable data protection laws.

2. Data Controller Information

For all personal data processing activities described in this policy, the data controller is:
‌QUELMI BCN SL‌
Contact Address: Carrer de Muntaner 193, Planta Baja, 08036 Barcelona, Spain
Contact Email: [email protected]
Contact Phone: +34 931 373 393

If you have any questions, concerns, or requests related to your personal data or this privacy policy, you can reach out to our dedicated data protection team at any time via the contact details provided above.

3. Types of Personal Data We Collect

We only collect personal data that is relevant, accurate, and limited to what is strictly necessary to deliver our travel essential products and associated services to you. The categories of personal data we may process include:

  • ‌Identity and contact information‌: Your full name, email address, phone number, and delivery address that you provide when placing an order, creating a user account, or contacting our customer support team.
  • ‌Transaction and payment data‌: Details related to your purchases on our website, including order history, billing information, payment method details, and transaction records. We do not store your complete credit or debit card details, all payment processing is completed through secure, encrypted payment gateways.
  • ‌Website usage data‌: Anonymous or pseudonymized information about your interaction with [www.quelmibcn.com], including your IP address, browser type, device information, page visit timestamps, navigation paths, and preference settings collected through necessary cookies and similar analytical tools.
  • ‌Voluntarily provided user content‌: Any information you submit when submitting a contact form, leaving a product review, signing up for our marketing newsletter, or participating in our brand interactive activities.

We will never collect any special categories of sensitive personal data (such as racial origin, religious beliefs, health data, or biometric information) from you intentionally, unless you voluntarily provide such information and explicitly consent to its processing for a clearly specified purpose.

4. Legal Bases for Data Processing

All our personal data processing activities strictly follow the legal requirements of GDPR Article 6, with clear and legitimate legal basis for every processing scenario:

  1. ‌Performance of a contract‌: Processing your identity, contact, and transaction data is necessary to fulfill the sales contract we enter into with you when you place an order on our website, including handling payment, arranging product shipment, processing after-sales services such as refunds and returns, and communicating order status updates to you.
  2. ‌Legitimate interest‌: We process limited website usage data through trusted analytical tools for our legitimate interest to improve our website functionality, optimize user shopping experience, prevent fraudulent transactions, and ensure the security of our online service system. We always conduct strict necessity tests to ensure these interests do not override your fundamental privacy rights.
  3. ‌Legal obligation‌: We process your transaction and billing data to comply with the applicable legal obligations we are subject to under Spanish tax, accounting, and consumer protection regulations, which require us to retain relevant records for the statutory retention period required by local authorities.
  4. ‌Explicit consent‌: For any activities that require your separate voluntary agreement, including sending you marketing communications about new travel essential product launches, exclusive offers, and travel tips, as well as storing non-essential cookies on your device, we will only conduct such processing after we obtain your free, specific, informed, and unambiguous consent. You retain the full right to withdraw your consent at any time, with no negative impact on your ability to use our website services or make purchases.

5. How We Use Your Personal Data

We only process your personal data for the specific, explicit, and legitimate purposes that we notify you of at the point of data collection, and will not process the data in any way that is incompatible with these original purposes. The core usage scenarios include:

  • Processing and fulfilling your product orders, including verifying transaction information, arranging shipment of your selected travel essentials such as toiletry bags, passport covers, luggage tags, and collapsible cups, and providing timely updates about your delivery status.
  • Managing your user account on [www.quelmibcn.com], allowing you to access your order history, save preferred shipping addresses, track pending purchases, and manage your personal settings conveniently.
  • Responding to your inquiries, feedback, and support requests submitted through our “Contact” page, and resolving any issues you encounter with our products or services in a timely manner.
  • Sending you service-related mandatory notifications, such as updates to our terms of service, shipping policy, refund policy, or important security alerts related to your account.
  • Conducting anonymized statistical analysis of website usage trends to optimize our product catalog, improve website navigation, and curate more practical travel essentials that better meet the needs of travel lovers.
  • Preventing fraud, unauthorized access, and other illegal activities that may threaten the normal operation of our e-commerce platform and the security of our users’ information and property.
  • With your separate explicit consent, sending you personalized marketing content about our new product launches, limited-time discount offers, and exclusive travel-related tips that we believe may be of interest to you.

6. Cookie and Similar Technology Usage

In compliance with LSSI-CE requirements, our website [www.quelmibcn.com] uses cookies and similar tracking technologies to enhance your browsing experience. You have full control over your cookie preferences, and can adjust your browser settings to reject non-essential cookies at any time.

  • ‌Strictly Necessary Cookies‌: These cookies are essential for the normal operation of our e-commerce website, enabling basic functions such as maintaining your shopping cart status, completing secure checkout processes, and remembering your login session. They cannot be disabled in our systems, and do not store any personal identifiable information.
  • ‌Analytical Cookies‌: These cookies help us understand how visitors interact with our website pages, collect anonymous statistical data to identify popular product categories, detect page loading issues, and continuously optimize the usability of our shopping platform.
  • ‌Marketing Cookies‌: These cookies are used to track visitor activity across websites, to display relevant product advertisements of our travel essentials to users on third-party platforms, and measure the effectiveness of our marketing campaigns. We will only deploy these non-essential cookies after we obtain your explicit opt-in consent.

7. Data Sharing with Third Parties

We will never sell, rent, or trade your personal personal data to any third parties for unrelated marketing purposes, under any circumstances. We only share your necessary personal data with strictly vetted third-party recipients, exclusively for the limited purposes required to deliver our complete services to you:

  • ‌Shipping Companies‌: We share your full name, delivery address, and contact phone number with trusted logistics and shipping partners, solely for the purpose of delivering your ordered travel essentials to the designated address accurately and on time.
  • ‌Payment Providers‌: All payment transactions on our website are processed through secure, industry-standard encrypted payment gateways, including Visa/Mastercard and Klarna. We only share the necessary transaction information with these payment service providers to complete your payment, and we never store your complete card details on our own servers.
  • ‌Authorized Technology Service Providers‌: We work with carefully selected service providers that assist us in operating our website, including web hosting providers, website analytics tool vendors, and virtual assistant service partners. All these third parties are bound by strict data processing agreements that require them to protect your personal data in full compliance with GDPR requirements, and they are prohibited from processing your personal data for any purposes other than the explicit instructions we provide.
  • ‌Public Competent Authorities‌: We may only disclose your personal data when we are legally obligated to do so, in response to valid and legally enforceable requests from competent public authorities such as the Spanish Tax Agency, law enforcement agencies, or the Spanish Data Protection Agency (AEPD), in full compliance with applicable local laws.

8. International Data Transfers

Our core data processing and storage activities are conducted within the territory of the European Economic Area (EEA). In the very rare event that we need to transfer your personal data to a destination outside the EEA, we will take all necessary measures to ensure that the recipient country provides an adequate level of data protection as recognized by the European Commission, or we will implement appropriate safeguards such as using the European Commission-approved standard contractual clauses to guarantee the security and integrity of your personal data, in full compliance with GDPR requirements.

9. Data Retention Period

We will not retain your personal data for any longer than is strictly necessary to fulfill the specific purposes for which the data was originally collected:

  • For order-related transaction, shipping, and billing data: We retain these data for the period required by applicable Spanish tax, accounting, and commercial laws, which is generally 10 years after the completion of your order transaction, to comply with our legal record-keeping obligations.
  • For user account data: We retain your account personal information for as long as you keep your account active on our website. You can request to delete your account and associated personal data at any time, and we will complete the deletion process within the legal required timeline.
  • For marketing contact information: If you have subscribed to our marketing newsletter with your consent, we retain your email address for as long as you do not opt out of our marketing communications. You can unsubscribe from our marketing emails at any time via the unsubscribe link included in every marketing message.
  • For website usage and analytical data: We retain this pseudonymized data for a maximum period of 24 months, after which we will fully anonymize the data so that it can no longer be linked back to any specific individual user.

After the applicable retention period expires, we will securely delete or anonymize your personal data completely, in line with our internal data security policies.

10. Your Data Subject Rights

Under GDPR and LOPDGDD, you are granted a comprehensive set of rights over your personal data, which are sometimes grouped under the Spanish acronym ARSOPOL. You can exercise any of these rights at any time free of charge by submitting a request to us via the contact methods provided in this policy:

  1. ‌Right of Access‌: You have the right to obtain confirmation from us whether we are processing your personal data, and to access a copy of all the personal information we hold about you, along with detailed information about the processing purposes, categories of data, and third parties we may have shared your data with.
  2. ‌Right to Rectification‌: If you find that any of your personal data we hold is inaccurate or incomplete, you have the right to request us to correct and update that information without undue delay.
  3. ‌Right to Erasure (Right to be Forgotten)‌: You have the right to request us to delete all your personal data from our systems, when the data is no longer necessary for the original purposes for which it was collected, when you withdraw your consent for the processing, or when the processing is no longer supported by any legitimate legal basis. We will comply with your request unless we are legally required to retain certain specific data for statutory compliance purposes.
  4. ‌Right to Restriction of Processing‌: You have the right to request us to suspend the processing of your personal data in specific scenarios, for example when you contest the accuracy of your data, when the processing is unlawful but you do not wish us to delete the data, or when we no longer need the data but you require it for the establishment, exercise, or defense of legal claims.
  5. ‌Right to Data Portability‌: You have the right to receive all the personal data that you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data directly to another data controller without any obstruction from our side, for all processing activities that are based on your consent or on the performance of a contract.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal data at any time, for any processing activities that are based on our legitimate interest. If you object to processing for direct marketing purposes, we will immediately stop all processing of your personal data for such marketing activities.
  7. ‌Right to Withdraw Consent‌: For any processing activities that you have previously given your explicit consent to, you retain the full right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of any processing activities that were carried out before you submitted your withdrawal request.

When you submit a rights request, we will first verify your identity to ensure that the request is submitted by the legitimate data subject, and we will respond to your request within one month as required by GDPR. If your request is complex or involves a large volume of data, we may extend the response period by up to two additional months, and we will notify you of this extension within one month of receiving your request. If we are unable to fulfill your request for legally permitted reasons, we will explain the justification to you clearly in writing. You also have the right to lodge a complaint related to our data processing activities with the Spanish Data Protection Agency (AEPD) at any time.

11. Data Security Protection

We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure. All data transmitted between your browser and our website uses TLS 1.3 encrypted connections, all our servers are protected by industry-standard firewalls and access control systems, and only a limited number of authorized employees who need to access your data to perform their job duties are granted restricted access to your personal information, under strict internal confidentiality agreements. All our team members receive regular data protection compliance training to ensure the security of your personal data at all times.

In the extremely unlikely event of a personal data breach that poses a high risk to your rights and freedoms, we will notify the relevant supervisory authority (AEPD) within 72 hours after we become aware of the breach, and we will communicate the details of the breach and the recommended protective measures directly to all affected individual users without undue delay, in full compliance with GDPR breach notification requirements.

12. Updates to This Privacy Policy

We may update and revise this privacy policy from time to time to reflect changes in our business operations, new regulatory requirements, or adjustments to our data processing practices. When we make material changes to this policy, we will update the “Effective Date” at the top of this page, and we will post a prominent notification on the homepage of [www.quelmibcn.com] to inform you of the upcoming revisions before the changes take effect. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

13. Contact Information

If you have any questions, comments, or concerns about this privacy policy, or if you wish to exercise any of your data subject rights described above, please do not hesitate to contact us at:
QUELMI BCN SL
Carrer de Muntaner 193, Planta Baja, 08036 Barcelona, Spain
Email: [email protected]
Phone: +34 931 373 393