Privacy Policy

This privacy policy applies to the processing of personal data of clients and/ or users of website www.gonzalezbyass.com the Data Controller of which is GONZALEZ BYASS, S.A.

CONFIDENTIALITY AND DATA PROTECTION

The purpose of this Privacy Policy is to provide information on the rights you are granted by the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27th of April 2016 relating to the protection of individuals in terms of the processing of their personal data and the free circulation of such data, which derogates Directive 95/46/EC (General Data Protection Regulation) and Organic Law 3/2018.  Information on your personal data according to article 13 of section 2 of the said Regulation and Organic Law 3/2018. 

When you provide your data as a client and/ or user, you declare that you have read and are aware of this Privacy Policy, and thus that you provide your unequivocal and express consent to the processing of your personal data according to the purposes and terms hereby expressed. 

GONZALEZ BYASS, S.A. is entitled to amend this Privacy Policy in order to adapt it to any new laws, jurisprudence or interpretations made by the Spanish Data Protection Agency.  Such privacy terms may be supplemented by the Legal Notice, Cookie Policy, and the General Terms and Conditions that may apply to certain products or services, if applicable, where such access implies certain sensitivity in terms of personal data protection.

BASIC INFORMATION ON DATA PROTECTION

  • Website: www.gonzalezbyass.com.
  • Data Controller: GONZALEZ BYASS, S.A. (the “Company”).
  • Purpose: The Company will process your personal data exclusively for specific, explicit and legitimate purposes, and will not process them in a manner incompatible with those purposes. Primarily, the Company may process your data to manage your registration as a user of this website, to manage your purchases, handle your enquiries, comply with its legal obligations, improve our services and products and, where you so request, send you personalised communications.
  • Lawful basis: The Company will only process your data if one of the following conditions is met:
    • You have given your consent for one or more specific purposes.
    • Processing is necessary for the performance of a contract to which you are a party.
    • Processing is necessary for compliance with a legal obligation to which the Company is subject.
    • Processing is necessary for the purposes of the legitimate interests pursued by the Company (or a third party), provided such interests are not overridden by the user’s interests or fundamental rights and freedoms. +info
  • Legal age for consent: By accessing this website, you certify that you are over 18 years of age and have the legal capacity to give consent for the processing of your personal data, in accordance with this Privacy Policy and the Terms of Use of this website.

  • Recipients: Data will be communicated to third parties or to companies within the González Byass Group that provide services to the Company, which may be located inside or outside the European Union, in order to carry out the purposes described in this Privacy Policy.

    If the User gives express consent, data may be transferred to companies within the González Byass Group and to Pedro Domecq, S.A. de C.V. for the purposes described in this Privacy Policy.

    Under no circumstances will data be transferred to third parties for purposes other than those described in this document.

  • Rights: To access, rectify and erase data, as well as other rights, as explained in the additional information in our Privacy Policy.
  • Additional information: You can consult the additional and detailed information about our Privacy Policy. +info

 

INTRODUCTION

In this document you will find detailed information regarding the following aspects:

  • Who owns this website
  • Who is responsible for processing your data
  • How we collect your personal information
  • For what purpose we will process your data
  • How long we will keep your data
  • The legal basis that applies in each case
  • To whom we will disclose your data and any possible international transfers
  • What rights you have

INFORMACIÓN ADICIONAL SOBRE PROTECCIÓN DE DATOS

ADDITIONAL INFORMATION ON DATA PROTECTION

1.1. Who owns this website?

Identity: GONZALEZ BYASS, S.A.
Postal address: Calle Manuel María González (P.O. Box 1710), 12 – 11403 Jerez de la Frontera (Cádiz).
Telephone: 956357000.
Email: lopd@gonzalezbyass.es

1.2. Who is responsible for processing your personal data?

Data Controller: GONZALEZ BYASS, S.A. (the “Company”).
Address / Contact: same postal address, telephone, and email as in section 1.1.

1.3. How do we collect your personal information?

The Company may collect information about you through different means:

  • Information provided by the user through the website when contracting a service, making a purchase, submitting an enquiry, completing a form, sending a CV to express interest in working for the Company, or other interactions. At the time of collecting your data, you will be informed about the identity of the data controller, the purpose of the processing, the recipients, and how to exercise your rights.
    Generally, the information you provide includes: name and surname, address, tax identification number (NIF), date of birth, email address, contact telephone number and payment details. In specific cases, additional data relating to personal characteristics, academic or professional background may also be collected.
  • Information collected from the user when browsing the website: when you are browsing our website, the Company obtains limited personal information that allows us to understand how the website is used, improve its performance and provide a better service to the user. In certain cases, we may display advertising based on your browsing habits. This information includes: the Internet Protocol (IP) address of your device, the browser you use, operating system, date and time of access, and information on how you use our website. This information is collected through cookies. For more details, please refer to our Cookies Policy.


1.4 For what purpose will we process your personal data and for how long will we retain it?

  • The Company will process your personal data exclusively for specific, explicit, and legitimate purposes, and will not process it in a manner incompatible with those purposes.
  • Below are the main uses we may make of your personal information:

Purposes

  • Purpose 1: If you browse the Website → analysis of user behaviour while using the website.
  • Purpose 2: If you register as a user of the Website → statistical analysis and market studies of user profiles.
  • Purpose 3: If you make an enquiry, complaint, or request for information → management, review, and resolution of enquiries and complaints; provision of the information requested.
  • Purpose 4: If you make a purchase or contract a service → (this purpose is set out in the table; full details are provided in the form-related sections below).
  • Purpose 8: If you use the Company’s app → (i) geolocation data to provide you with services or information based on your location; (ii) access to the camera and/or gallery if you upload images in enabled sections.
  • Purpose 9: If you register as a member of the wine club → to manage your registration and keep you informed about club activities, news, products, and services.
  • Purpose 10: If you consent to the transfer of your data to companies within the González Byass Group and to Pedro Domecq S.A. de C.V. → (a) market research/prospecting, consumer habits and statistical analysis; (b) sending communications about the company, its activities, news, and products/services of interest.

The Company will retain your personal data for as long as necessary in accordance with the information provided and the retention periods set out in the applicable regulations.

GONZALEZ BYASS, S.A. will process the personal data provided by users through the electronic forms available on the website www.gonzalezbyass.com for the following purposes:

a) Regarding the “Contact Form”:
Purpose: Management, review, and resolution of enquiries submitted, as well as sending commercial communications about our services, provided the data subject has consented to the processing of their personal data for this purpose.
Legal basis: Consent of the data subject, which may be withdrawn at any time.

b) Regarding the “CV Submission Form”:
Purpose: Management of recruitment processes, as well as sending commercial communications about our services, provided the data subject has consented to the processing of their personal data for this purpose.
Legal basis: Consent of the data subject, which may be withdrawn at any time.

c) Regarding the “Newsletter Subscription Form”:
Purpose: Management of newsletter subscriptions, as well as sending information about the company, its activities, news of interest, and keeping you informed about products and services, provided the data subject has consented to the processing of their personal data for this purpose.
Legal basis: Consent of the data subject, which may be withdrawn at any time.

d) Regarding the “Order Form”:
Purpose: Management of registration requests to place online orders, accounting, tax, and administrative management, carrying out satisfaction surveys to improve our products and services, conducting market research and commercial prospecting, reports on consumer habits, statistical data and market trends, with the aim of offering products and/or services that may be of interest, and compliance with legal obligations, provided the data subject has consented to the processing of their personal data for this purpose.
Legal basis: Consent of the data subject, which may be withdrawn at any time.

When the data requested in the electronic forms are necessary to access specific functionalities of the website, GONZALEZ BYASS, S.A. will indicate this requirement at the time of collection, and failure to provide such data will mean that the corresponding request cannot be processed.

1.5 What is the legal basis for processing your data?

  • Legitimate interest of the Company: If you browse the Website → analysis of user behaviour when using the website.
  • Legitimate interest of the Company: If you register as a user of the Website → statistical analysis and market research on user profiles of the website.
  • Legitimate interest of the Company: If you contact us to make an enquiry, request information, or submit a complaint → management, review, and resolution of enquiries and complaints made through the website.
  • User consent/Performance of a contract/Legitimate interest of the Company/Legal obligation: If you make a purchase or contract a service → accounting, tax and administrative management; conducting satisfaction surveys to improve our products and services; statistical analysis and market research on customer profiles; conducting market research and commercial prospecting, reports on consumer habits, statistical data and market trends, with the aim of offering you products and/or services that may be of interest; compliance with legal obligations.
  • User consent/Legitimate interest: If you send us your CV → management of recruitment processes if you send us your CV.
  • User consent: If you agree to receive communications including news, events, contests, and commercial communications about products and services → keeping you informed about products, services, offers, etc.
  • User consent: If you subscribe to the Newsletter → sending information about the company, its activities, news of interest, and keeping you informed about products and services.
  • Legal obligation/Legitimate interest/Contest or promotion management: If you participate in a contest or promotion → management of your participation in promotions or contests and communication of results; delivery of prizes; management of the promotion’s publicity and results by any means, which may include the name and image of winners and, in some cases, of all participants.
  • User consent: If you expressly agree that your data may be transferred to companies of the González Byass Group and to Pedro Domecq S.A. de C.V.: these companies may exclusively use them to:
    a) carry out market research and commercial prospecting, consumer habit reports, statistical analysis and market trends;
    b) send you communications about the company, its activity, news, and about products and/or services that may be of interest to you.

 

1.6 Who will your data be shared with?

To fulfil the purposes described in this Privacy Policy, the data may be communicated to companies of the González Byass Group and to third-party service providers who provide services to the Company in the ordinary course of business and in relation to the services provided to the User, such as:

  • Technology service providers: IT systems, website development and hosting, data hosting, communication delivery.
  • Marketing and advertising service providers.
  • Advisory service providers.
  • Financial institutions.

Where required by applicable law and in compliance with its obligations, the Company may also communicate the data to public administrations and authorities.

Only when the User gives express consent will their data be communicated to the González Byass Group companies listed below and to Pedro Domecq S.A. de C.V. (registered office: Presidente Masaryk 275, Polanco 11560, Mexico City, Mexico; RFC PDO 170316574; main activity: production and marketing of wines and spirits), who will use them exclusively for the following purposes:

  • carrying out market research and commercial prospecting, consumer habit reports, statistical analysis and market trends;
  • sending commercial communications about products and/or services that may be of interest.

The González Byass Group companies are as follows:

  • GONZÁLEZ BYASS S.A. – SPAIN – Calle Manuel Mª González, 12; 11403 Jerez de la Frontera (Cádiz) NIF A11605276 – Production and marketing of wines and spirits. Organisation of Tío Pepe Festival.
  • GONZALEZ BYASS DISTRIBUCION SL – SPAIN – Calle Alcalá, 21, 6º; 28014 Madrid NIF B-83631226 – Marketing of wines and spirits.
  • BODEGA GONZALEZ BYASS JEREZ SL – SPAIN – Calle Manuel Mª González, 12; 11403 Jerez de la Frontera (Cádiz) NIF A11605276 – Production and marketing of wines and spirits.
  • FINCA CONSTANCIA SL – SPAIN – Calle Camino del Bravo s/n; 45543 Otero (Toledo) NIF B-45035359 – Production and marketing of wines.
  • A. PAZOS DE LUSCO SL – SPAIN – Calle Alxen-Girxo s/n; 36450 Salvaterra de Miño (Pontevedra) NIF B-83055418 – Production and marketing of wines.
  • CATERING LA BUNGAVILLA SL – SPAIN – Calle Manuel Mª González, 12; 11403 Jerez de la Frontera (Cádiz) NIF B-11887312.
  • BODEGAS Y VIÑEDOS ORTEGA FOURNIER S.LU – SPAIN – Finca El Pinar, s/n; 09316 Berlangas de Roa (Burgos) NIF B-83400358 – Production and marketing of wines.
  • BODEGAS BERONIA SA – SPAIN – Ctra. de Nájera (Km 1,800), 26220 Ollauri, La Rioja NIF A26012773 – Production and marketing of wines.
  • VIÑAS DEL VERO SA – SPAIN – Ctra. Barbastro a Naval, Km 3.7, 22300 Barbastro (Huesca) CIF A50155910 – Production and marketing of wines.
  • Vin Divino LTD. (dba GONZALEZ BYASS USA) – USA – 3921 N. Lincoln Ave. 60613 Chicago, Illinois – Marketing of wines and spirits.
  • GONZALEZ BYASS UK LTD – UK – C/o Rayner Essex LLP, Tavistock House South, Tavistock Square, WC1H 9LG London. Company number: 5036529 – Marketing of wines and spirits.
  • ALTO DE CASABLANCA SA – CHILE – Ruta 68 Km 66 s/n, Casablanca UniqueTax Rol No. 96.762.990-1 – Production and marketing of wines.

Data will not be disclosed to third parties for purposes other than those described in this document.

In some cases, some of the data recipients (service providers or González Byass Group companies) may be located outside the European Union. In such cases, your data will be transferred with appropriate safeguards to ensure the security of your data:

  • Either because the recipients are located in third countries with an adequacy decision approved by the European Commission,
  • Or because the Company has signed Standard Contractual Clauses with the recipients, approved by the Commission.

European Commission SCC information link

 

1.7 What are your rights when you provide us with your data?

The Company guarantees the exercise of your rights.

To this end, you may contact the Company at its postal address or the email address provided in this document in order to exercise the following rights:

a) Right to request access to personal data relating to the data subject.
b) Right to request rectification or erasure.
c) Right to request restriction of processing.
d) Right to object to processing.
e) Right to data portability.

You may request the forms necessary to exercise these rights by sending an email to the address provided in this document.

Given the highly personal nature of exercising any of these rights, you must attach a copy of your identity card or equivalent proof of identity to your request.

You may also contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos) for additional information regarding your rights or to file a complaint, particularly if you have not obtained satisfaction in exercising your rights. All necessary information is available via the website www.agpd.es.

 

1.8 What security measures are applied?

GONZALEZ BYASS, S.A. adopts the security levels required by the GDPR appropriate to the nature of the data being processed at any given time. Notwithstanding the above, the User should be aware that system security is not impregnable and malicious acts by third parties may occur. However, GONZALEZ BYASS, S.A. uses all means at its disposal to prevent such acts.

You may request further information about our security measures by contacting lopd@gonzalezbyass.es.