Who is the Data Controller with regard to your data?

This privacy policy (hereinafter, the "Privacy Policy") applies to all personal data that any user might provide to MAHOU, S.A., CERVECERA INDEPENDIENTE, S.A., both of registered office at Calle Titán 15, 28045, Madrid, and AGUAS DE SOLÁN DE CABRAS, S.A., of registered office at Paraje de Solán de Cabras s/n, 16893 Beteta, Cuenca (hereinafter jointly referred to as "Mahou") through online forms or by making a purchase on their website (hereinafter, the "Website").

For the purposes of this Privacy Policy, a "User" should be understood as any natural person with an interest in the products and services offered by Mahou via its Website.

As the Data Controller, Mahou will, prior to the presentation of their personal data, request that Users grant their express consent to this Privacy Policy, wherever necessary, in addition to any other aspect requiring the prior authorisation thereof.

Users may contact us by email at consultasprivacidad@mahou-sanmiguel.com in the event of any query or need they may have as regards data protection.

For what purpose do we process your personal data?

Users are hereby informed that Mahou will process any personal data that Users might provide via the contact forms and account registration on the Website for the purposes indicated below, to the extent that a legal basis exists for each process, as explained below:

  • (a) Guarantee access to and usage of the Website by the User.
  • (b) Manage the relationship between the User and Mahou, including the management of any purchases that the User might make in the Mahou store, and involvement by the User in competitions, promotions and websites, computer applications and/or the social media forums of Mahou (hereinafter, the "Content") (including, without being confined to, verification that the User fulfils the necessary requirements in order to be able to receive the promotion or competition prize and to make delivery thereof).
  • (c) Generate statistics and market studies, including analysis as to the behaviour of Users within the context of their browsing and the creation of User profiles by means of integration and combined processing of the information obtained by means of cookies or similar technologies of any Content with the pre-existing information regarding the User in the Mahou databases, or obtained from any social media platforms, including, without being confined to, Facebook, Instagram, YouTube, Twitter, LinkedIn, or other Content, all the above for the purpose of better understanding the User, performing market studies, and for offering more customised content and promotional activities.
  • (d) Inform the User by any means, including the sending of commercial communications to the email address that the User might have provided, regarding Mahou products and services similar to those acquired by the User.
  • (e) Perform promotional activities regarding other products, activities and services of both Mahou and third parties, including the sending of commercial communications by electronic or other channels to the email address that the User might have provided, or that might have been obtained by Mahou from the User's browsing information, in the event that the User grants consent.

What is the legitimate basis for the processing of your personal data?

  • The legal basis for data processing for purposes (a) and (b) is the execution of the service provision and/or sale agreement for the corresponding products.
  • The legal basis for data processing purposes (c), (d) and (e) is the consent requested of the User, although the withdrawals thereof will not under any circumstances affect the execution of the service provision agreement.

In the event that the User has an interest in accessing specific services dependent on prior registration, including, without being confined to, competitions, prize draws, promotions, forums, surveys, purchases or contracting of services, and other activities of Mahou, or taking part in services offered by Mahou, or submitting videos, images or any other type of material, receiving information on promotions or contacting Mahou, they must complete the personal data request forms or any other means by which users can subscribe for any specific services offered in each case via the Content. Notwithstanding the terms of this Privacy Policy, any privacy policy that Mahou might have established and announced to the User when completing registration forms, surveys, competition or promotion terms and conditions and/or any other conditions regarding specific services will in all cases take priority. The terms set out in this policy will apply in such cases on a supplementary basis (in all aspects where they do not contradict said terms, in which case the terms established for the particular case of the promotions/services/competitions in question will in all cases apply).

When you provide your personal data, Mahou will gather and process those that are essential for registration, access to the User's personal area, and contact with the Mahou Customer Service team. Should the User decide to acquire any Mahou product or service, or participate in its promotions and/or competitions, Mahou will gather and process the required data (including full name, address, email address, etc.) in order to manage the purchase process and provide any other services. The User is aware and accepts that failure to complete certain personal data may prevent Mahou from providing all those services linked to said data. Mahou may under no circumstances assign or exploit said data, or use them for any purpose other than that expressly indicated here. During the process of registration and completion of the contact form, the User will be informed that the gathering of certain data is not necessarily required for the provision of Mahou services.

The User may voluntarily provide additional information in certain subsections of the Mahou website. The decision to provide such information is entirely that of the Users themselves. Mahou nonetheless advises Users not to provide any more information than that required in accordance with the purposes for which they may use the services.

Mahou may also process geolocation data in order properly to provide the services offered by the website, including (i) the location of stores, (ii) calculation of delivery costs, and (iii) service customisation. In such cases the User will be notified, allowing this functionality to be accepted or rejected.

How long do we keep your personal data for?

Mahou will keep Users' data during the contractual relationship with the User, and in all cases for a maximum period of seven years from the last time when the User interacted with Mahou, notwithstanding any preservation that might be necessary for the formulation, exercise or defence of potential claims, and/or the terms permitted by the applicable legislation. Upon expiry of the aforementioned period, Mahou undertakes to cease from processing all your data, and duly to block your data in the corresponding Company databases.

Who has access to your personal data?

Optimal provision of the service offered by Mahou via its website may require other third parties that provide Mahou with services to access the User's personal data, acting as data processors. By accepting this Privacy Policy, the User understands that some of the aforementioned service providers are located in countries outside the European Economic Area, or countries that do not offer a level of security equivalent to that in Spain. In particular, the User understands that Mahou has reached an agreement with Salesforce.com, Inc, as data processor, of registered office at The Landmark, One Market Street, San Francisco, CA 94105, USA, to provide the service comprising the management of the relationship between Mahou and its users and customers, and the provision of a platform for advertising and marketing purposes. Salesforce.com, Inc, offers appropriate guarantees as established in the applicable regulations, as it is an organisation that subscribes to the "Privacy Shield", conducting personal data processing in accordance with the provisions established therein.

In addition to the above, the User understands that Mahou may perform assignments or communications of personal data in order to fulfil its obligations regarding Public Authorities in those cases so required in accordance with the legislation in force at the time in question, and also, where applicable, likewise such bodies as Law Enforcement Agencies and Court Bodies.

What rights do Users enjoy?

Mahou informs the User of the possibility that they enjoy free of charge to exercise rights of access, rectification, objection, deletion, portability and limitation of processing, and to reject automated processing of personal data, by means of a signed, written request sent to the legal department at following address: 'Departamento de Asesoría Jurídica', Calle Titán 15, 28045 Madrid, or by means of the Customer Service Department form. The User must for this purpose send written notification, indicating the request or right exercised, full name, address for service, together with a copy of their national identity document or valid document accrediting identity (photocopy of passport). If via a representative, an official document confirming the powers of representation must be provided. Users may likewise exercise their rights by sending a photocopy of their national identity document (or passport), on both sides, by means of the "Contact us" form, if this exists.

Users enjoy the right to object to the processing of their data for promotional purposes for the receipt of commercial communications, simply by notifying Mahou of this wish. To this end, the User may submit a request by means of the procedure described in the paragraph above. The User may likewise cancel the receipt of commercial communications in accordance with the manner indicated in each commercial communication (for example, by means of a link included in each such communication).

In addition to the above rights, the User will be entitled to withdraw the consent granted at any time by means of the aforementioned procedure, without said withdrawal of consent affecting the lawfulness of any processing prior to the withdrawal thereof. Mahou may continue to process the User's data to the extent permitted by the applicable law.

Mahou reminds the User that they enjoy the right to file a complaint with the Spanish Data Protection Agency.

What is the minimum age for a User to access our products and services?

The Website is not intended for those aged under 18, with the sole exception of the website of Aguas Solán de Cabras, S.A. In accordance, access to and registration for the Content is not permitted by those aged under 18. By accepting this Privacy Policy, the User declares and guarantees that they are aged over 18. If the User is under legal age, they must not provide any data. We cannot and do not wish to gather the personal data of any person under legal age, nor conduct any promotion, including the promotion of any type of alcoholic beverage, to persons who are not of the legal age required to purchase such beverages. Should Mahou learn that a person under legal age has provided personal data having falsified the prior requirements (date of birth on access), we will proceed to cancel these personal data in our filing systems. Parents or guardians may contact Mahou in all cases to block the access account of underage individuals for whom they are responsible, if they have registered by falsifying their identity.

Data quality

Mahou advises Users that, except in cases of legally established and accredited representation, no User may use the identity of another person and disclose their personal data, and users must therefore at all times take into account that they may only provide personal data corresponding to their own identity, and where these are appropriate, relevant, current, precise and truthful. To this end, Users will be the sole parties liable as regards any direct and/or indirect damages caused to third parties or to Mahou through the use of the personal data of another person, or their own personal data if they are false, incorrect, out of date, inappropriate or irrelevant. A User giving the personal data of a third party will likewise be liable before said party as to the obligation of information if the personal data were not gathered from the individual concerned, and/or the consequences of having failed to give said information and, where applicable, to obtain consent.

In the event that the User provides any personal data of third parties, the User undertakes to inform said person in advance of the intention to communicate their data to Mahou, and to obtain their prior, express, written consent for said data processing, and any purposes for which the data might be processed, with the User bearing liability if this is not performed.

The User is the sole source of their personal data, and Mahou therefore asks that, in order to keep the data updated and current at all times, in accordance with the principles of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), they serve notice of any modification thereto, at the address Calle Titán 15, 28045 Madrid, or by selecting the corresponding option in the "Contact us" section of the Content, if this exists. Users are reminded that in order to proceed to update their data, they must provide accreditation of their identity by submitting a photocopy of their national identity card or equivalent document.

Use of cookies

Our website uses cookies to distinguish you from other users of our site, helping us to provide a positive experience when you browse our website, while likewise allowing us to make improvements. You may obtain further information as to the use of cookies on this website in the Cookie Policy.

Links

The website may include hyperlinks to other sites that are not operated or controlled by Mahou. Mahou therefore does not guarantee, nor accept any liability for, the lawfulness, reliability, usefulness, accuracy and updating of the content on such websites, or any data processing conducted by them. Before you provide your personal information to such websites outside the control of Mahou, please bear in mind that their data protection compliance may differ from ours.

Modification of the Privacy Policy

Mahou may modify its Privacy Policy in accordance with the applicable legislation at the time in question. We will in all cases inform you of any modification to the Privacy Policy that would have a significant impact on your privacy, and data protection, and if so required by the applicable regulations, we will allow you once again to grant your consent.