1. Who is responsible for processing your personal data?
Identity: Drinksandco Marketplace, S.L.U. (hereinafter, “DRINKS&CO” or the “Company”)
Address: C/Arequipa 1, 28043 Madrid, España
Telephone: (+44) 20 3322 2677
Contact details of the Data Protection Officer: firstname.lastname@example.org
2. For what purpose do we process your personal data?
At DRINKS&CO we process the information provided by interested parties for the following purposes:
I. To manage the registration of users and to control the development and fulfilment of the contractual relationship with them and, in this respect, to provide the service of on-line sale of the products offered through the website https://www.drinksandco.co.uk. In particular, DRINKS&CO will process the following categories of data and for the purposes specified below:
Categories of personal data Purposes of treatment Basic information required for registration, the provision of online sales services and the management of the user's profile (access data, registration information, name, address, date of birth, user and password). Validation of the user, creation of an account in DRINKS&CO and provision of the services by DRINKS&CO. Basic contact information (telephone number and e-mail address). Customer contact for performing the contractual relationship; advertising (if applicable). Additional contact information (additional identification data, e.g. ID card or passport). Verification of the customer's identity and fraud prevention. Information on transactions, as well as on invoicing and delivery address. Payment processing and fulfilment of the contractual relationship. Usage data, in particular technical and device-related information and data transmission (IP address, functional and web monitoring data, login and web usage data). Customisation of offers; error resolution, fraud prevention, service improvement, improved user interface and, if applicable, marketing. Voice and additional data provided in calls made to DRINKS&CO or made by DRINKS&CO to the user. Improvement of quality and compliance with protocols by operators handling the calls.
II. to manage complaints, as well as to respond to queries that may be submitted by users in relation to the website or services;
III. to send commercial communications, including by electronic means, about our products and services that we think may interest you;
IV. to manage your participation in competitions and promotional activities carried out by DRINKS&CO;
VI. To comply with the legal obligations applicable to DRINKS&CO, such as those derived from tax regulations and the prevention of money laundering.
3. What is the legitimacy of the processing of your data?
The legal basis for the processing indicated in sections (I) and (II) is the execution of the Conditions of Use and of the Contract.
With regard to sections (III), (IV) and (V), the legal basis is the consent given by the user, which he may revoke at any time without affecting the provision of the service. You may withdraw your consent at any time by contacting the following e-mail address: email@example.com.
Notwithstanding the electronic and non-electronic commercial communications sent when we have your consent as cited above, we may also send you communications when you are our customer. In this case, we will only send you information that is linked to us and that is related to products and/or services of ours that are identical or similar to those you have contracted. In these cases, we have a legitimate interest in processing your contact details and keeping you informed about any of our products and services, and this interest takes precedence over your rights in view of the non-sensitive nature of the data in question and the fact that the contractual relationship created with our customers results in the reasonable expectation of receiving this type of communication.
Finally, the legal basis for the treatment indicated in section (VI) is compliance with the regulations applicable to the Company (as is the case with Law 58/2003, of 17 December, on General Taxation; and Law 35/2006, of 28 November, on Personal Income Tax and partially amending the laws on Corporation Tax, Non-Resident Income Tax and Wealth Tax, and their respective implementing regulations, and other regulations that may be applicable).
4. How long will we keep your data?
The personal data provided will be kept for as long as you are a customer or registered user of our website. The personal data will be kept after the termination of the contractual relationship, duly blocked, for the periods established by law to meet the responsibilities that may arise from it. In particular, the personal data necessary to send you electronic commercial communications will be processed until you revoke the consent you have given and, once this has been withdrawn, for the time strictly necessary to respond to any liabilities that may have arisen. In any case, when the personal data is not necessary for the purpose for which it was collected and until it is definitively deleted, it will be kept blocked.
5. To which recipients will your data be communicated?
No data will be communicated to third parties unless legally obliged to do so or when strictly necessary to defend the rights and legitimate interests of DRINKS&CO. Without prejudice to the above, personal data will be accessible to those third parties to whom DRINKS&CO has entrusted a service in their capacity as data processors (e.g. technical and IT support providers), both with regard to the operation of the business and the administration of the Company. The Company shall enter into written agreements with the third parties participating in the provision of the services, which shall include the safeguards and guarantees required by the GDPR.
6. What are your rights when you provide us with your data?
Everyone has the right to obtain information about whether or not DRINKS&CO is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as the right to request the rectification of inaccurate data (and to complete those that are insufficient), to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected and to request its portability.
In certain circumstances, data subjects may request that their data be limited in their processing, in which case we will only keep them for the exercise or defence of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, DRINKS&CO will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
You may exercise your rights by sending an e-mail to firstname.lastname@example.org, duly identifying yourself and indicating the specific right you wish to exercise.
If you have given your consent for any specific purpose, you are entitled to withdraw the consent given at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
In the event that you feel your rights have been infringed with regard to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights vis-à-vis the Company, you may file a complaint with the competent Data Protection supervisory authority (in the UK, Information Commissioner's Office: https://ico.org.uk/).
7. More information about the processing of your data
The processing of the data collected through the data collection forms on the website or other means will be incorporated into the Processing Activities Register for which DRINKS&CO is responsible.
DRINKS&CO treats the data confidentially and adopts the appropriate technical and organisational measures to guarantee the appropriate level of security for the processing, in compliance with the requirements of the GDPR, Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights and other applicable regulations on data protection.
Nevertheless, it cannot guarantee the absolute invulnerability of the systems, therefore, and to the maximum extent permitted by the applicable legislation, it does not assume any responsibility for damages derived from alterations that third parties may cause in the computer systems, electronic documents or files of the user. If you choose to leave our web site through links to web sites that do not belong to our entity, DRINKS&CO shall not be responsible for the privacy policies of those web sites or for the cookies that they may store in the user's computer.