Effective Date: 01 September 2024

At Mas de l’Abundància ("we," "us," "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your personal information when you visit or interact with our website, in compliance with the General Data Protection Regulation (GDPR) and other relevant privacy laws in the European Union (EU).

1. Data Controller

For the purposes of this Privacy Policy, Mas de l’Abundància Viticultors S.L. is the "data controller," which means we determine how and why your personal data is processed.

2. Personal Data We Collect

We collect different types of personal data depending on how you interact with our website, including but not limited to:

• Contact Information: Name, email address, phone number, postal address, and other information you provide when you contact us or make a purchase.
• Transaction Data: Details of products you have purchased, including payment and delivery information.
• Technical Data: IP address, browser type, operating system, referring website, and other similar information collected via cookies and other tracking technologies.
• Usage Data: Information on how you use our website, such as pages visited, time spent on the site, and interaction with content.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To process orders: Handling your wine orders, including shipping, payment processing, and customer service inquiries.
• To communicate with you: Responding to inquiries, providing updates on your order, and sending marketing emails (with your consent).
• To improve our website and services: Analyzing usage data to enhance your online experience, personalize content, and optimize website performance.
• To comply with legal obligations: For tax, accounting, or legal requirements as mandated by EU law.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations when you make a purchase or inquiry.
• Consent: When you sign up for our newsletter or agree to cookies, you give us permission to process your data.
• Legitimate Interests: To improve our website, marketing efforts, and services, provided your rights and freedoms are not overridden.
• Legal Obligations: To comply with relevant laws, including tax and data protection regulations.

5. Sharing Your Data

We may share your personal data with the following third parties:

• Service Providers: Payment processors, delivery companies, and IT service providers who assist us in running our website and fulfilling your orders.
• Legal Authorities: If required by law or to protect our legal rights.
• Marketing Partners: With your consent, for sending promotional content and offers related to our winery.

We do not sell or rent your personal data to third parties.

6. International Transfers

If your personal data is transferred outside the European Economic Area (EEA), we will ensure it is protected by appropriate safeguards, such as standard contractual clauses approved by the European Commission or other legally recognized transfer mechanisms.

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including fulfilling legal or accounting obligations. Personal data related to purchases is typically retained for five (5) years, unless a longer retention period is required by law.

8. Your Rights

Under the GDPR, you have the following rights concerning your personal data:

• Access: You can request access to the personal data we hold about you.
• Rectification: You have the right to correct any inaccurate or incomplete personal data.
• Erasure: You can request the deletion of your personal data under certain circumstances.
• Restriction: You may request that we limit the processing of your data.
• Data Portability: You have the right to receive your data in a structured, commonly used format and transfer it to another data controller.
• Objection: You can object to the processing of your data for marketing purposes or based on our legitimate interests.
• Withdraw Consent: If we rely on your consent to process data, you can withdraw it at any time.

To exercise these rights, please contact us at privacy@masdelabundancia.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to collect technical data and enhance your browsing experience. You can control your cookie preferences through your browser settings or by using the cookie consent tool on our website.

For more details, please see our Cookie Policy.

10. Security Measures

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. Despite these efforts, no method of data transmission over the internet is entirely secure. Therefore, we cannot guarantee the absolute security of your data.

11. Children's Privacy

Our website is not intended for children under 18 years old, and we do not knowingly collect personal data from children. If we learn that we have collected such data, we will take immediate steps to delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical, or business developments. When we make changes, we will revise the "Effective Date" at the top of the policy and notify you of any significant updates.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at hola@masdelabundancia.com.