INSTRUCTIONS FOR USE
This Privacy Policy is intended to replace in its entirety the one used on the following website: https://www.mahou-sanmiguel.com/
The Privacy Policy should be accessible through a link that is visible in any section of the Website, as well as on any form for entering data.
PRIVACY POLICY
This Privacy Policy refers to the processing of personal data obtained through this Website, or any of the channels provided for this purpose, carried out by the Data Controller.
1.- WHO IS THE DATA CONTROLLER?
Data Controller: MAHOU, S.A., Spanish Tax ID Code (CIF) A-28078202, CERVECERA INDEPENDIENTE, S.A., Tax ID Number (NIF) A-78908027, both headquartered at c/ Titán 15, 28045, Madrid. and AGUAS SOLAN DE CABRAS, SA, Tax ID Code (CIF) A-23205289 and headquartered at c/ Paraje de Solán de Cabras s/n, 16893 Beteta, Cuenca (hereinafter jointly as “Mahou”)
E-mail: consultasprivacidad@mahou-sanmiguel.com
2.- MANDATORY NATURE OF PROVIDING THE DATA
The data requested through any of the channels provided are generally mandatory (unless the form indicates otherwise for the field in question) for fulfilling the purposes for which they are being collected. Therefore, if they are not provided or not provided correctly, this will not be possible
3.- FOR WHAT PURPOSES AND WITH WHAT BASE OF LEGITIMACY WILL THE DATA CONTROLLERS PROCESS THE USER’S DATA?
Mahou shall process the personal data submitted by the User or any which Mahou might obtain directly (for example, browsing data) through any of the channels provided for this, for the purposes indicated below, in conformity with the base of legitimacy applicable in each case:
To guarantee that the User is able to access and use the Website:
The User’s personal data shall be processed, when applicable, in order to enable browsing on the Website, thereby allowing the User to access the information and content established for this purpose. Although it is true that merely visiting the Website does not require the User to provide personal information, certain functionalities do depend on the use of cookies, as explained in the Cookies Policy. In this case, the base of legitimacy is the consent explicitly given when accepting the Website’s cookies, if applicable.
To guarantee security in the use of the Website and in the purchase of products by the User:
Mahou has implemented security measures for managing the security of the Website.
The base of legitimacy for the security of the systems is the legitimate interest of the Data Controller recognized by regulations.
This legitimate interest shall consist of minimization of the risks assumed by Mahou.
Compliance with regulatory obligations:
Mahou shall process Users’ data in order to comply with the provisions of the applicable regulations on data protection.
The base of legitimacy for this processing shall be compliance with the corresponding regulatory obligations.
4.- WHAT PARTIES WILL THE USER’S DATA BE SHARED WITH?
The personal data submitted by the User through the Website may be disclosed when necessary to third-party service providers of Mahou who access the personal data of the User as parties entrusted with processing the data. Mahou has entered into the corresponding agreements with these parties covering the provision of services with access to data.
In addition to the above, the User understands that Mahou may transfer or disclose personal data to meet its obligations to governments in cases where it is required to do so in accordance with the laws in force at any given time and, if applicable, also to other bodies such as state security forces and agencies and judicial authorities.
5- INTERNATIONAL TRANSFERS OF DATA
Mahou may disclose User’s personal data or make it known to third party entities located outside the EU for any of the purposes indicated above. In cases where there is no adequacy finding in effect, Mahou guarantees that said international transfer of data shall be carried out in compliance with the applicable data protection regulations and, in any case, by means of the granting of the adequate guarantees. Specifically, through the signing of contract clauses of the type approved by the European Commission and, when necessary, through the adoption of all additional security measures deemed appropriate.
6.- RETENTION OF THE DATA
Mahou will retain Users’ data for as long as necessary to fulfil the purposes indicated above, without prejudice to any retention that might be necessary for the formulation or exercise of, or defense against potential claims and/or provided that this is allowed by the applicable laws. Once the aforementioned period has finished, the COMPANY shall proceed to delete these data.
7.- USER’S RESPONSIBILITY
The User guarantees that they are above eighteen (18) years of age and that the data provided to Mahou are truthful, accurate, complete, and current. For these purposes, the User is responsible for the truthfulness of all the data submitted and shall keep the information provided up to date so that it corresponds to their real situation.
If the User is not of legal age, they should not provide any data. We cannot and do not wish to collect personal data from any person under the age of 18 or aim any promotion, including promotions for any type of alcoholic beverage, to persons under the legal age for purchasing it. If Mahou has knowledge that a minor has provided personal data, having made false declarations in the previous requirements (date of birth for accessing), we will proceed to delete these personal data from our files. The parents or guardians may, in any case, contact Mahou to block the accounts of minors under their care who have registered by misrepresenting their identity. Likewise, the User guarantees that they have informed any third parties whose data has been provided, if applicable, of the aspects contained in this document. Likewise, they guarantee that these third parties have given their authorization for their data to be provided Mahou for the indicated purposes.
In this sense, the User is informed that they shall be held liable for any false or inaccurate information they provide through the contact channels provided, and for any damages, direct or indirect, that this might cause to Mahou or to third parties.
8.- EXERCISE OF RIGHTS
Mahou informs the User regarding the possibility of freely exercising their rights of access, rectification, objection, erasure, portability and limitation of processing, as well as to reject automated processing of personal data by sending a signed written request to the following address: Legal Affairs Department, c/Titán 15, 28045, Madrid, or to consultasprivacidad@mahou-sanmiguel.com. To this end, the User must send this written communication indicating their request or the right being exercised, first name and surname(s) and the address for notifications.
The user has the right to oppose the processing of their data for promotional purposes and the reception of commercial communications by simply notifying Mahou of their wishes. To do so, the User may send their request using the procedure described in the previous paragraph. Likewise, the User may cancel the reception of commercial communications in the manner provided in each commercial communication (for example, by means of the link included in each one).
In addition to the abovementioned rights, the User has the right to withdraw consent at any time by means of the procedure described above. Such withdrawal of consent shall not affect the legitimacy of processing prior to its withdrawal. Mahou shall be able to continue to process the User’s data to the extent permitted by law.
Likewise, the User may file a claim related to the protection of their personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001, Madrid, when the interested party feels that the processing carried out by Mahou has violated the rights recognized in the applicable data protection regulations.
9.- SECURITY PRACTISES
User data shall be processed at all times by Mahou with the utmost confidentiality and observing the required duty of secrecy with respect to same, in conformity with the provisions of the applicable regulations, adopting for this purpose all the technical and organizational measures necessary to guarantee the security of the data and avoid their alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.
10.- CHANGES
Mahou reserves the right to revise this Privacy Policy whenever it considers it appropriate, in which case it shall communicate this to Users. For this reason, we request that you check this privacy statement regularly to read the most recent version of Mahou’s Privacy Policy, available on this Website.
Last update: March, 2024.