Here we explain what personal data we collect on aceiteslamatilla.com, what we use it for and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Data controller
- Owner: Aceites La Matilla, S.L.
- Tax ID (NIF): B90407362
- Address: Polígono Industrial Brenes, C/ D, Parcela 106, 41410 Carmona (Sevilla), Spain
- Email for privacy matters: info@aceiteslamatilla.com
What data we process and why
| Purpose | Data | Legal basis | How long |
|---|---|---|---|
| Preparing, charging, shipping and invoicing your orders, and handling returns and guarantees | Name, address, email, phone number, tax ID (NIF) if you request an invoice, products and payment details (we never see or store your card number) | Sales contract (Art. 6.1.b GDPR) and tax and accounting obligations (Art. 6.1.c) | For as long as the relationship lasts and then for the legal periods: 6 years for accounting (Commercial Code) and those set by tax regulations |
| Managing your customer account | Name, email, encrypted password, addresses and order history | Your request when you register (Art. 6.1.b) | Until you delete the account or ask us to delete it |
| Replying to your enquiries | The data you give us when you write to us | Your request and our legitimate interest in replying to you (Art. 6.1.f) | The time needed to resolve it |
| Publishing your review of a product you have bought | The name you choose, your rating and comment | Your consent when you send it (Art. 6.1.a) | Until you ask us to withdraw it |
| Measuring use of the website with Google Analytics | Browsing data and a cookie identifier | Your consent in the cookie notice (Art. 6.1.a) | As set out in the cookie policy |
We do not make automated decisions or build profiles with your data, and we will not send you advertising by email without your permission.
Who we share your data with
Only with those who need it to provide the service, with a data processing agreement where applicable:
- Payment: Redsys and our bank, which process card payments on their own secure gateway.
- Shipping: Packlink and the carrier delivering your order, which receive your name, delivery address and phone number.
- Web hosting: Hostinger, our server provider.
- Statistics: Google Ireland Limited, only if you accept statistics cookies. Google may transfer data to the United States under the EU-US Data Privacy Framework.
- Tax and accounting advisers and public authorities, when required by law.
Your rights
You can ask us to access your data, correct it, delete it, restrict its use, object to our processing it or receive it in a portable format. You can also withdraw your consent at any time, without affecting anything done before. Write to us at info@aceiteslamatilla.com stating which right you wish to exercise; we may ask you to prove your identity.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
Minors
To create an account or make a purchase you must be over 14, and over 18 to buy wine.
Security
The website uses an encrypted connection (HTTPS), passwords are stored encrypted and only staff who need the data can access it.
Last updated: [PENDING: publication date]
