Privacy Policy

1. Data Controller

Bodegas Barbadillo, S.L. is the data controller for information collected through this website and ensures its security and confidentiality in accordance with the EU GDPR (Regulation (EU) 2016/679) and the Spanish LOPDGDD 3/2018.

2. Purposes of Processing

• Handling enquiries or requests sent via forms or email.
• Managing communications related to products, events and enotourism, where consent exists.
• Analytics and site improvement through cookies or equivalent technologies (see Cookie Policy).
• Legal compliance arising from our business activity (tax, accounting or regulatory obligations).

3. Legal Basis

• Consent (Art. 6.1.a GDPR) for communications or form submissions.
• Legitimate interest (Art. 6.1.f) to maintain site security and our relationship with users and customers.
• Legal obligation (Art. 6.1.c) where processing is necessary to comply with applicable rules.

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Retention Periods

Data will be kept for as long as necessary to fulfil the purposes described and, thereafter, for the limitation periods required to address potential legal liabilities. For marketing communications, data will be retained until you request erasure.

5. Disclosures & Processors

Data will not be shared with third parties except where required by law or when essential for service provision (web hosting, maintenance, emailing, analytics), always under data processing agreements in accordance with Art. 28 GDPR.

6. International Transfers

No transfers outside the EEA are envisaged. If such transfers become necessary, an adequate level of protection will be ensured via adequacy decisions, Standard Contractual Clauses or other GDPR safeguards, and users will be informed.

7. Your Rights

You may exercise your rights of access, rectification, erasure, objection, restriction and data portability by contacting rgpd@barbadillo.com or by postal mail to the controller’s address, enclosing a copy of your identification document.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you consider your rights have been infringed.

8. Security Measures

We implement appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data (access controls, encryption in transit, backups and internal policies), taking into account the state of the art, implementation costs, and the nature and risks of processing.

9. Cookie Policy

This site uses first-party and third-party cookies for technical and analytical purposes. You can learn more and manage your consent in our Cookie Policy and via the preference panel accessible from the banner when you enter the site.

10. Third-Party Links

This site may link to external pages (e.g., social networks or corporate sites). We are not responsible for their content or privacy practices; please review their terms before providing data.

11. Policy Changes

We may amend this policy to reflect regulatory changes or the evolution of our processing activities. The current version will always be available on this page.

12. Privacy Contact

For any privacy-related matter, please email rgpd@barbadillo.com or call +34 956 385 500.