Privacy Policy

Effective Date: June 01 2025

At Forum, we are committed to protecting your privacy and ensuring a safe online experience. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or book a stay with us.

1. Purpose of
Data Processing

1. Purpose of
Data Processing

1. Purpose of
Data Processing

The personal data collected through this website is processed for specific, explicit, and legitimate purposes. One of the main purposes is to manage and respond to user inquiries submitted through contact forms, email communications, or telephone calls. This includes handling requests for information about, its services, and its tenants.


Another purpose is the management of newsletter subscriptions. Users who voluntarily provide their email address may receive periodic communications related to Forum Marbella, including news, promotional campaigns, events, and special offers. These communications are designed to enhance user engagement and provide relevant updates.


Additionally, personal data may be used to ensure the proper functioning, maintenance, and security of the website. This includes preventing misuse, improving user experience, and analyzing general usage trends to optimize services offered through the platform.

2. Legal Basis for Processing

2. Legal Basis for Processing

2. Legal Basis for Processing

The processing of personal data is carried out based on one or more legal grounds as established by the GDPR. In cases where users subscribe to newsletters or provide their information voluntarily, the legal basis is the explicit consent of the user. This consent may be withdrawn at any time without affecting the lawfulness of prior processing.

In situations where users contact the shopping centre through available communication channels, processing is based on the legitimate interest of the Data Controller in responding to inquiries and maintaining effective communication with users. This ensures that requests are handled efficiently and professionally.

Furthermore, certain processing activities may be necessary to comply with legal obligations applicable under Spanish or European Union law. In such cases, personal data will be processed strictly within the limits required by the relevant regulations.

3. Data Collected

3. Data Collected

3. Data Collected

The website may collect personal data that users voluntarily provide when interacting with its features. This typically includes identification and contact information such as email addresses, telephone numbers, or other details submitted through contact forms or communications.

In addition, any information included in messages, inquiries, or requests sent by users may be processed insofar as it is necessary to respond appropriately. Users are encouraged to provide only the data that is strictly necessary for the purpose of their request.

Technical data related to website usage may also be collected automatically, such as browsing behavior, where applicable. This data is primarily used for security and performance purposes and is handled in accordance with applicable cookie and privacy regulations.

4. Data Retention

4. Data Retention

4. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected. In the case of contact inquiries, data will be stored for the duration required to respond to the request and for any necessary follow-up actions.

For users subscribed to the newsletter, personal data will be retained until the user decides to unsubscribe. Once consent is withdrawn, the data will be deleted or appropriately blocked in accordance with legal requirements.

In certain cases, data may be retained for longer periods where required to comply with legal obligations or to address potential liabilities. In all cases, retention periods will be limited to what is strictly necessary and proportionate.

5. Data Sharing

5. Data Sharing

5. Data Sharing

As a general rule, personal data will not be shared with third parties without the user’s prior consent. However, data may be disclosed when required by law or when necessary to comply with legal obligations or requests from competent authorities.

The Data Controller may also engage third-party service providers who process data on its behalf, such as hosting providers, IT service providers, or email marketing platforms. These providers act as data processors and are contractually bound to ensure confidentiality and compliance with data protection regulations.

Where such providers are located outside the European Economic Area, appropriate safeguards will be implemented to ensure an adequate level of data protection, in accordance with GDPR requirements.

6. User Rights

6. User Rights

6. User Rights

Users have the right to obtain confirmation as to whether their personal data is being processed and, if so, to access such data. They may also request the rectification of inaccurate data or the completion of incomplete information.

Additionally, users have the right to request the erasure of their personal data when it is no longer necessary for the purposes for which it was collected. They may also request the restriction of processing or object to processing under certain circumstances.

Users may exercise their rights by contacting info@forum.es, providing proof of identity where necessary. If they believe their rights have not been properly addressed, they have the right to file a complaint with the Data Protection Authority (AEPD).

7. Newsletter
Communications

7. Newsletter
Communications

7. Newsletter
Communications

Users who subscribe to the newsletter will receive periodic communications related to the activities of Forum Marbella. These may include updates on events, promotions, new store openings, and other relevant information. Subscription to the newsletter is entirely voluntary and requires the user’s explicit consent. Users will only receive communications if they have actively opted in through the appropriate mechanisms provided on the website.


Each newsletter communication will include a clear and accessible option to unsubscribe. Users may also request removal from the mailing list at any time by contacting the Data Controller directly.

8. Security Measures

8. Security Measures

8. Security Measures

The Data Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures are designed to protect personal data against unauthorized access, accidental loss, alteration, or disclosure.

Security practices include controlled access to data, use of secure servers, and regular monitoring of systems to detect potential vulnerabilities. The objective is to safeguard the integrity and confidentiality of personal data at all times.


While every effort is made to ensure data security, users are reminded that no system is completely immune to risks. Therefore, users are encouraged to exercise caution when sharing personal information online.

9. Third-Party Services
and Tenants

9. Third-Party Services
and Tenants

9. Third-Party Services
and Tenants

Forum Marbella hosts a wide range of independent businesses, including retail stores, restaurants, and service providers. Each of these tenants operates independently and is responsible for its own data processing activities.


This Privacy Policy applies solely to personal data collected through Forum’s official website. It does not extend to data collected directly by tenants through their own channels, whether online or offline.
Users are encouraged to review the privacy policies of individual businesses within Forum Marbella when interacting with them directly, as they may have their own data protection practices.

10. Cookies

10. Cookies

10. Cookies

This website may use cookies and similar technologies to enhance user experience, analyze website traffic, and ensure proper functionality. Cookies are small text files stored on the user’s device when visiting the website.


Users will be informed about the use of cookies through a dedicated cookie banner and will have the option to accept, reject, or configure their preferences. Only strictly necessary cookies will be activated by default.


For more detailed information about the types of cookies used and how to manage them, users are encouraged to consult the Cookies Policy available on the website.

11. Changes to This Policy

11. Changes to This Policy

11. Changes to This Policy

The Data Controller reserves the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, or website functionality.


Any updates will be published on this page and will become effective upon publication. Users are encouraged to review this Privacy Policy periodically to stay informed about how their personal data is being handled.


Where significant changes are made, users may be notified through appropriate means, such as website notices or direct communication, where applicable.

12. Data Controller

12. Data Controller

12. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the entity responsible for processing your personal data is identified below. This entity determines the purposes and means of processing the personal data collected through this website.


The Data Controller is Forum Marbella, owner and operator of Forum Marbella, located at Av. Bulevar Príncipe Alfonso de Hohenlohe, 7, 29602 Marbella, Málaga. This entity is responsible for ensuring that personal data is processed lawfully, fairly, and transparently.


For any questions related to data protection or the processing of personal data, users may contact the Data Controller via email at info@forum.es. All communications will be handled with due diligence and in accordance with applicable data protection regulations.