Privacy policy

Data Protection Controller

Cerveza SanFrutos (Cervezas Segovia S.L.), with tax identification number (CIF/NIF) B40252991, and registered office at Avenida de Hontoria nº27, Hontoria (40195), Segovia, with email info@cervezasanfrutos.com and phone number 921309974.

The owner is the controller of the personal data collected through the browsing and use of this website in accordance with the requirements established by REGULATION (EU) 2016/679 regarding the protection of natural persons, as well as in accordance with Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

By using this website, we understand that you have read and understood the information presented regarding the processing of your personal data.

Data Protection Policy

Cerveza SanFrutos applies the principle of proactive responsibility in the processing of personal data, maintaining constant updating and promoting the continuous improvement of the data protection system in accordance with applicable legal requirements, guaranteeing in any case:

• Respect for the fundamental rights and freedoms of natural persons
• That data is processed in a lawful, fair, and transparent manner
• That the processed data is accurate, adequate, relevant, and limited to what is necessary in relation to the purposes for which it is collected
• That the purposes for which it is collected are explicit and legitimate and that it is not processed in a manner incompatible with those purposes

The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights that assist them, as well as all the necessary legal information established by current regulations.

Data collected, purpose, and lawfulness

The personal data processed is that provided by users through the forms available on this website and is the minimum required in order to:

• Send you information about our products and services
• Answer inquiries
• Process orders, as well as issue the corresponding invoices, report on the status of orders, handle complaints, and manage any other administrative task derived from the provision of the service carried out through this website

These purposes are based on legal principles for data processing set out in current regulations: for the execution of a contract or the provision of a service to users, for compliance with legal obligations, for legitimate interest, and with the users' consent.

Web forms

Personal data collected through the contact web form is used to answer any inquiries the user makes through it.

Personal data collected in the order form has the purpose of processing the necessary data for the correct management of your orders.

Data processing is legitimized by the consent you give us by expressly accepting the processing conditions informed through this privacy policy.

Data recipients

Personal data obtained through web forms is recorded and stored on electronic media controlled and supervised by the data controller.

Your personal data will not be communicated to third parties, unless such communication is covered by a legal obligation or when, for the correct provision of the service or execution of the contract, it is necessary to communicate your data to third parties to process payment (payment gateways), as well as to manage product deliveries (carriers).

• Redsys Servicios de Procesamiento, S.L. ("Redsys"), with registered office in Madrid, calle Francisco Sancha, número 12, and with C.I.F. number B-85955367, which fully complies with current legislation on personal data protection and with the confidentiality commitments inherent to its activity. You can view its privacy policy at: https://www.redsys.es
• PayPal (Europe) S.à.r.l. et Cie, S.C.A. (R.C.S. Luxembourg B 118 349), whose privacy policy establishes appropriate security measures for the correct processing of users' personal data. You can view its privacy policy at: https://www.paypal.com

For cases where data communication to third parties is not covered by the legal bases established above, such communication will only be made if the user has given their express consent.

Cerveza SanFrutos maintains strict selection criteria for data processors and a contractual commitment with each of them to comply with and enforce the obligations established regarding data protection. In the event of international data transfers, Cerveza SanFrutos will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that the necessary contractual, technical, and organizational measures are applied, such as the standard contractual clauses approved by the European Commission.

You can obtain more information about the processing of personal data by requesting it at info@cervezasanfrutos.com or by accessing the following link: Record of processing activities

Technical and organizational data protection measures

The storage media systems have the necessary technical and organizational measures to guarantee the confidentiality and preservation of the personal data obtained through the website.

Personal data collected from the website is processed via HTTPS protocol with a valid SSL certificate.

The personnel involved in data processing operations are trained, educated, and committed to this data protection policy.

Data retention

Personal data obtained through the contact form will be retained for the time necessary to address the request or inquiry made.

Personal data obtained through the order form will be retained as long as there is a contractual and/or commercial relationship with you, or until you exercise your right to erasure, cancellation, and/or limitation of the processing of your data.

Once the contractual relationship has ended, we will keep the information duly blocked, without making any use of it, as long as it may be necessary for the exercise or defense of claims or if any type of judicial, legal, or contractual responsibility may arise from its processing.

In the event that you have expressly accepted the sending of commercial communications, we will retain your contact details until you inform us of your decision to cancel such communications.

Information on automated decision-making (including profiling)

We do not normally make automated decisions, but when we do, we will clearly indicate it. However, Cerveza SanFrutos includes several sections dedicated to the personalization of services in order to show personalized advertising and to send personalized communications.

Cerveza SanFrutos acknowledges the possibility of profiling to improve its product offering, personalize the sending of commercial offers, or provide a more personalized customer treatment.

Objection to data processing for advertising purposes

If you gave your consent for your data to be used for advertising purposes and no longer wish to receive advertising, you can revoke your given consent at any time by sending an email to info@cervezasanfrutos.com.

Changes to the Privacy Policy

We may modify the information contained in this Privacy Policy when we deem it appropriate. If we do so, we will notify you through various means via the platform (for example, through a banner, a pop-up, or a push notification), or we may even communicate it to your email address when the change is significant. In any case, we suggest you review this Privacy Policy from time to time in case of minor changes or improvements.