Privacy policy

Privacy Policy

 

This Privacy Policy reflects the commitment of MARQUÉS DE MURRIETA ESTATES & WINES, comprising MARQUÉS DE MURRIETA, S.A., with Tax ID No. A28681393 and registered office at Paseo de la Castellana 126, 28046 Madrid, and PAZO DE BARRANTES, S.A., with Tax ID No. A78093135 and registered office at Pazo de Barrantes, 36636 Ribadumia, Pontevedra —hereinafter jointly referred to as THE COMPANY—, to protecting users’ personal data and privacy. 

Both companies will act as data controllers with regard to data related to their respective activities and services and, where they jointly determine the purposes and means of processing, as joint controllers. 

This Policy explains what personal data we process, how we use it, with whom we may share it and what your rights are. 

Data processing and purposes

Personal data provided through this website will be processed in accordance with applicable regulations and solely for legitimate purposes that have been communicated to the user.

Contact forms and emails

  • Purpose: To respond to enquiries, requests for information, incidents or other requests, and to contact the user when necessary.
  • Legal basis: Taking steps prior to entering into a contract where the enquiry relates to a potential purchase, booking or engagement of services, and THE COMPANY’s legitimate interest in responding to requests received in all other cases.
  • Retention: The data will be retained for as long as necessary to respond to the request and, subsequently, for the periods required to address any potential liabilities.

 

Newsletter subscription and marketing communications

  • Purpose: To send information about our wines, products, experiences, events, news and activities.
  • Legal basis: The user’s consent. Where a prior contractual relationship exists, communications regarding similar products or services offered by THE COMPANY may be sent, provided this is permitted by applicable regulations.
  • Retention: The data will be retained for as long as necessary to respond to the request and, subsequently, for the periods required to address any potential liabilities.

Registration and Club Murrieta

  • Purpose: To manage registration, the user’s account, Club Murrieta services and benefits, order history and the communications required for its operation.
  • Legal basis: Performance of the relationship arising from registration and acceptance of the corresponding terms and conditions.
  • Retention: The data will be retained for as long as the account remains active and, following its cancellation, for the periods required by law.

 

Purchase of products

  • Purpose: To manage orders, payments, invoicing, preparation, shipping, delivery, returns, customer service and any incidents related to the purchase.
  • Legal basis: Performance of the sales contract, compliance with legal obligations and, where applicable, THE COMPANY’s legitimate interest in preventing fraud and ensuring the security of transactions.
  • Retention: The data will be retained for the duration of the contractual relationship and, subsequently, for the periods established by tax, commercial, accounting and consumer regulations, as well as the limitation periods applicable to potential liabilities.

THE COMPANY does not store full bank card details, which are processed directly by the corresponding payment service providers.

 

Visits, bookings, experiences and events

  • Purpose: To respond to requests and manage bookings, payments, attendees, confirmations, amendments, cancellations and incidents related to visits, experiences and events.
  • Legal basis: Taking steps prior to entering into a contract, performance of the contracted service and compliance with legal obligations.
  • Retention: The data will be retained for as long as necessary to manage the activity and, subsequently, for the applicable statutory periods.

 

Mandatory nature of the data

Fields identified as mandatory are required in order to manage the request or provide the corresponding service.
Failure to complete these fields may prevent THE COMPANY from responding to an enquiry, processing an order, creating an account or managing a booking.
The user guarantees that the data provided is true, accurate and up to date.

Recipients of the data

THE COMPANY does not sell or otherwise commercialise its users’ personal data.
However, certain service providers may access the data where necessary to provide their services, including providers of web hosting, e-commerce, IT systems, payment services, email services, customer management systems, analytics, security, transportation, courier services and the organisation of visits or events.
These providers will process the data in accordance with THE COMPANY’s instructions and will be subject to the contractual, security and confidentiality obligations required under applicable regulations.
The data may also be disclosed to financial institutions, transport companies, public authorities, government agencies, courts and tribunals where necessary to manage the service or comply with a legal obligation.

Personal data security

THE COMPANY has implemented appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, use or disclosure.
Our websites use encryption protocols and other measures intended to ensure the security of information.

Use of cookies

When browsing the website, technical data may be processed, such as the IP address, device type, browser used, pages visited and the date and time of access.

Necessary cookies are used to enable the operation and security of the website. Analytics, advertising and personalisation cookies will be used in accordance with the preferences expressed by the user in the settings panel.

You can obtain further information and change your preferences in our Cookie Policy.

User rights

The user may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw their consent at any time, without affecting the lawfulness of any processing carried out prior to its withdrawal.

To exercise these rights, the user must submit a request indicating the right they wish to exercise to:


Where necessary, THE COMPANY may request additional information to verify the identity of the applicant.
The user may also lodge a complaint with the Spanish Data Protection Agency if they believe that their personal data is not being processed correctly.

 

Changes to the Privacy Policy

THE COMPANY may update this Policy to reflect legal, technical or organisational changes, or changes relating to its products and services.
The current version will always be available on this page and will indicate the date on which it was last updated. Where a change requires renewed consent, this will be expressly requested.

For any enquiries relating to this Policy or the processing of your personal data, you may contact us at atencionalcliente@marquesdemurrieta.com or administracion@pazodebarrantes.com