1. Basic information
| Controller | Campos de Seralba Sociedad Limitada |
|---|---|
| Tax identification number (CIF) | B01696079 |
| Purposes | Responding to enquiries and managing accounts, orders, payments, deliveries, invoicing, customisations, incidents and website security. |
| Legal basis | Consent, pre-contractual measures, performance of a contract, compliance with legal obligations and legitimate interests. |
| Recipients | Providers required to deliver the service and authorities where there is a legal obligation. |
| Rights | Access, rectification, erasure, objection, restriction, portability and withdrawal of consent. |
2. Data controller
- Controller: Campos de Seralba Sociedad Limitada
- Tax identification number (CIF): B01696079
- Registered address: Calle Martos, 5, 23485 Pozo Alcón, Jaén, Spain
- Email: info@camposdeseralba.com
- Telephone: 674 603 718
3. Data processed, purposes and legal bases
- Enquiries and contact: name, email, telephone and message to respond to requests. Basis: consent and pre-contractual measures.
- Purchases: identity, contact, billing, delivery, order, transaction and incident data to manage the sale. Basis: performance of the contract and legal obligations.
- Customer account: login details, preferences and history to provide the requested features. Basis: performance of the contract.
- Personalised bottles: event details, quantities, text, files and design instructions to prepare and carry out the proposal. Basis: pre-contractual measures and contract.
- Marketing communications: email and preferences where expressly requested. Basis: consent, which may be withdrawn at any time.
- Security and operation: IP address, technical logs, device and browsing data to prevent fraud, protect accounts and maintain the website. Basis: legitimate interests and legal obligations.
4. Source of data and requirement to provide it
Data is obtained from the data subject, their use of the website or providers involved in a requested transaction. Fields marked as mandatory are required to process the request or order. Failure to provide this data may prevent the service from being delivered.
5. Retention
- Enquiries: for the time required to respond and defend against potential liability.
- Orders, invoices and accounting records: for the applicable tax, commercial and consumer-law periods.
- Accounts: while active and subsequently for the periods required to address potential liability.
- Marketing communications: until consent is withdrawn or an objection is made.
- Technical logs: for the proportionate period required for security, fraud prevention and incident resolution.
6. Recipients and processors
Data may be processed by providers of hosting, website maintenance, forms, email, payments, financial services, transport, messaging, support, authorised analytics, fraud prevention, advisory and administrative services. They will receive only the data required and will act under contract or in accordance with their own legal responsibilities. Data may also be disclosed to public authorities, courts and other authorities where there is a legal obligation.
7. International transfers
Where a provider processes data outside the European Economic Area, an adequacy decision, standard contractual clauses or another valid safeguard under the General Data Protection Regulation will be used.
8. Rights
You may request access, rectification, erasure, objection, restriction and portability, and may withdraw consent without affecting the lawfulness of prior processing. Send your request to info@camposdeseralba.com or to the address stated above, identifying the right and providing only the information needed to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency.
9. Minors
The store is not intended for minors who lack the legal capacity to enter into a contract. Children under 14 must not provide personal data without authorisation from a parent or guardian.
10. Security
Campos de Seralba applies technical and organisational measures proportionate to the risk to protect data against loss, alteration, unauthorised access or disclosure. No system connected to the Internet can guarantee absolute security.
11. Updates
This policy may be updated to reflect regulatory, technical or commercial changes or changes in processing activities. The current version will be the one published on this page.
Last updated: 01/09/2026.