Store
Store

Privacy policy

Who is the Data Controller with regard to your data?

This privacy policy (hereinafter, the "Privacy Policy") applies to all personal data that any user might provide to MAHOU, S.A., CERVECERA INDEPENDIENTE, S.A., both of registered office at Calle Titán 15, 28045, Madrid, and AGUAS DE SOLÁN DE CABRAS, S.A., of registered office at Paraje de Solán de Cabras s/n, 16893 Beteta, Cuenca (hereinafter jointly referred to as "Mahou") through online forms or by making a purchase on their website (hereinafter, the "Website").

For the purposes of this Privacy Policy, a "User" should be understood as any natural person with an interest in the products and services offered by Mahou via its Website.

As the Data Controller, Mahou will, prior to the presentation of their personal data, request that Users grant their express consent to this Privacy Policy, wherever necessary, in addition to any other aspect requiring the prior authorisation thereof.

Users may contact us by email at consultasprivacidad@mahou-sanmiguel.com in the event of any query or need they may have as regards data protection.

For what purpose do we process your personal data?

Users are hereby informed that Mahou will process any personal data that Users might provide via the contact forms and account registration on the Website for the purposes indicated below, to the extent that a legal basis exists for each process, as explained below:

  • (a) Guarantee access to and usage of the Website by the User.
  • (b) Manage the relationship between the User and Mahou, including the management of any purchases that the User might make in the Mahou store, and involvement by the User in competitions, promotions and websites, computer applications and/or the social media forums of Mahou (hereinafter, the "Content") (including, without being confined to, verification that the User fulfils the necessary requirements in order to be able to receive the promotion or competition prize and to make delivery thereof).
  • (c) Generate statistics and market studies, including analysis as to the behaviour of Users within the context of their browsing and the creation of User profiles by means of integration and combined processing of the information obtained by means of cookies or similar technologies of any Content with the pre-existing information regarding the User in the Mahou databases, or obtained from any social media platforms, including, without being confined to, Facebook, Instagram, YouTube, Twitter, LinkedIn, or other Content, all the above for the purpose of better understanding the User, performing market studies, and for offering more customised content and promotional activities.
  • (d) Inform the User by any means, including the sending of commercial communications to the email address that the User might have provided, regarding Mahou products and services similar to those acquired by the User.
  • (e) Perform promotional activities regarding other products, activities and services of both Mahou and third parties, including the sending of commercial communications by electronic or other channels to the email address that the User might have provided, or that might have been obtained by Mahou from the User's browsing information, in the event that the User grants consent.

What is the legitimate basis for the processing of your personal data?

  • The legal basis for data processing for purposes (a) and (b) is the execution of the service provision and/or sale agreement for the corresponding products.
  • The legal basis for data processing purposes (c), (d) and (e) is the consent requested of the User, although the withdrawal thereof will not under any circumstances affect the execution of the service provision agreement.

In the event that the User has an interest in accessing specific services dependent on prior registration, including, without being confined to, competitions, prize draws, promotions, forums, surveys, purchases or contracting of services, and other activities of Mahou, or taking part in services offered by Mahou, or submitting videos, images or any other type of material, receiving information on promotions or contacting Mahou, they must complete the personal data request forms or any other means by which users can subscribe for any specific services offered in each case via the Content. Notwithstanding the terms of this Privacy Policy, any privacy policy that Mahou might have established and announced to the User when completing registration forms, surveys, competition or promotion terms and conditions and/or any other conditions regarding specific services will in all cases take priority. The terms set out in this policy will apply in such cases on a supplementary basis (in all aspects where they do not contradict said terms, in which case the terms established for the particular case of the promotions/services/competitions in question will in all cases apply).

When you provide your personal data, Mahou will gather and process those that are essential for registration, access to the User's personal area, and contact with the Mahou Customer Service team. Should the User decide to acquire any Mahou product or service, or participate in its promotions and/or competitions, Mahou will gather and process the required data (including full name, address, email address, etc.) in order to manage the purchase process and provide any other services. The User is aware and accepts that failure to complete certain personal data may prevent Mahou from providing all those services linked to said data. Mahou may under no circumstances assign or exploit said data, or use them for any purpose other than that expressly indicated here. During the process of registration and completion of the contact form, the User will be informed that the gathering of certain data is not necessarily required for the provision of Mahou services.

The User may voluntarily provide additional information in certain subsections of the Mahou website. The decision to provide such information is entirely that of the Users themselves. Mahou nonetheless advises Users not to provide any more information than that required in accordance with the purposes for which they may use the services.

Mahou may also process geolocation data in order properly to provide the services offered by the website, including (i) the location of stores, (ii) calculation of delivery costs, and (iii) service customisation. In such cases the User will be notified, allowing this functionality to be accepted or rejected.

How long do we keep your personal data for?

Mahou will keep Users' data during the contractual relationship with the User, and in all cases for a maximum period of seven years from the last time when the User interacted with Mahou, notwithstanding any preservation that might be necessary for the formulation, exercise or defence of potential claims, and/or the terms permitted by the applicable legislation. Upon expiry of the aforementioned period, Mahou undertakes to cease from processing all your data, and duly to block your data in the corresponding Company databases.

Who has access to your personal data?

An optimal execution of the service that Mahou offers through the present website may require that Mahou’s trustworthy providers access the User's personal data as data processors, to the extent that it is strictly necessary for the provision of the services contracted with them. Such data processors operate under a service contract in the terms, conditions and guarantees contained in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). In addition, Mahou carries out the corresponding controls, inspections and audits in accordance with said GDPR to verify that such data processors strictly comply with the contracts signed to for this purpose and the applicable regulations. By accepting this Privacy Policy, the User understands that some of the aforementioned service providers are located in countries outside the European Economic Area and that, therefore, they do not offer the same level of protection of personal data as in the European Union. In particular, the User understands that Mahou has concluded a services contract with Salesforce.com, Inc., located in the United States, for the provision of the service consisting on the management of Mahou's relationships with its users and clients, as well as the provision of a platform for advertising and marketing purposes. In these cases, Mahou has adopted the appropriate measures and guarantees established in accordance with the GDPR, including data transfer agreements based on the Standard Contractual Clauses approved by the European Commission. For more information on international transfers of personal data and the above guarantees, you can contact Mahou by the means established in the following section. In addition to the abovementioned, the User understands that Mahou may communicate personal data to the extent it is obliged by law, with Public Administrations and, where appropriate, also to others bodies such as the State Security Forces and the Judicial bodies. .

What rights do Users enjoy?

Mahou informs the User of the possibility that they enjoy free of charge to exercise rights of access, rectification, objection, deletion, portability and limitation of processing, and to reject automated processing of personal data, by means of a signed, written request sent to the legal department at following address: 'Departamento de Asesoría Jurídica', Calle Titán 15, 28045 Madrid, or by means of the Customer Service Department form. The User must for this purpose send written notification, indicating the request or right exercised, full name, address for service, together with a copy of their national identity document or valid document accrediting identity (photocopy of passport). If via a representative, an official document confirming the powers of representation must be provided. Users may likewise exercise their rights by sending a photocopy of their national identity document (or passport), on both sides, by means of the "Contact us" form, if this exists.

Users enjoy the right to object to the processing of their data for promotional purposes for the receipt of commercial communications, simply by notifying Mahou of this wish. To this end, the User may submit a request by means of the procedure described in the paragraph above. The User may likewise cancel the receipt of commercial communications in accordance with the manner indicated in each commercial communication (for example, by means of a link included in each such communication).

In addition to the above rights, the User will be entitled to withdraw the consent granted at any time by means of the aforementioned procedure, without said withdrawal of consent affecting the lawfulness of any processing prior to the withdrawal thereof. Mahou may continue to process the User's data to the extent permitted by the applicable law.

Mahou reminds the User that they enjoy the right to file a complaint with the Spanish Data Protection Agency.

What is the minimum age for a User to access our products and services?

The Website is not intended for those aged under 18, with the sole exception of the website of Aguas Solán de Cabras, S.A. In accordance, access to and registration for the Content is not permitted by those aged under 18. By accepting this Privacy Policy, the User declares and guarantees that they are aged over 18. If the User is under legal age, they must not provide any data. We cannot and do not wish to gather the personal data of any person under legal age, nor conduct any promotion, including the promotion of any type of alcoholic beverage, to persons who are not of the legal age required to purchase such beverages. Should Mahou learn that a person under legal age has provided personal data having falsified the prior requirements (date of birth on access), we will proceed to cancel these personal data in our filing systems. Parents or guardians may contact Mahou in all cases to block the access account of underage individuals for whom they are responsible, if they have registered by falsifying their identity.

Data quality

Mahou advises Users that, except in cases of legally established and accredited representation, no User may use the identity of another person and disclose their personal data, and users must therefore at all times take into account that they may only provide personal data corresponding to their own identity, and where these are appropriate, relevant, current, precise and truthful. To this end, Users will be the sole parties liable as regards any direct and/or indirect damages caused to third parties or to Mahou through the use of the personal data of another person, or their own personal data if they are false, incorrect, out of date, inappropriate or irrelevant. A User giving the personal data of a third party will likewise be liable before said party as to the obligation of information if the personal data were not gathered from the individual concerned, and/or the consequences of having failed to give said information and, where applicable, to obtain consent.

In the event that the User provides any personal data of third parties, the User undertakes to inform said person in advance of the intention to communicate their data to Mahou, and to obtain their prior, express, written consent for said data processing, and any purposes for which the data might be processed, with the User bearing liability if this is not performed.

The User is the sole source of their personal data, and Mahou therefore asks that, in order to keep the data updated and current at all times, in accordance with the principles of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), they serve notice of any modification thereto, at the address Calle Titán 15, 28045 Madrid, or by selecting the corresponding option in the "Contact us" section of the Content, if this exists. Users are reminded that in order to proceed to update their data, they must provide accreditation of their identity by submitting a photocopy of their national identity card or equivalent document.

Use of cookies

Our website uses cookies to distinguish you from other users of our site, helping us to provide a positive experience when you browse our website, while likewise allowing us to make improvements. You may obtain further information as to the use of cookies on this website in the Cookie Policy.

Links

The website may include hyperlinks to other sites that are not operated or controlled by Mahou. Mahou therefore does not guarantee, nor accept any liability for, the lawfulness, reliability, usefulness, accuracy and updating of the content on such websites, or any data processing conducted by them. Before you provide your personal information to such websites outside the control of Mahou, please bear in mind that their data protection compliance may differ from ours.

Modification of the Privacy Policy

Mahou may modify its Privacy Policy in accordance with the applicable legislation at the time in question. We will in all cases inform you of any modification to the Privacy Policy that would have a significant impact on your privacy, and data protection, and if so required by the applicable regulations, we will allow you once again to grant your consent.