Privacy Policy
Basic information about data protection
At Vivers Sala Graupera SL (hereinafter, “Sala Graupera”), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPDGDD).
Data Controller
Identity: Vivers Sala Graupera SL Tax ID: B08646889 Postal address: Carretera N-II, km 650-800, P.O. Box 88, 08392 Sant Andreu de Llavaneres, Barcelona, Spain Phone: +34 93 795 21 39 Email: asala@salagraupera.com
What data do we collect?
Depending on the purpose for which you provide your personal data, we will collect the following information:
Contact form
- Full name
- Email address
- Phone (optional)
- Message or inquiry
Visit requests
- Full name
- Email address
- Phone
- Tax ID (for billing, optional)
- Billing address (optional)
- Number of participants
Newsletter subscription
- Email address
- Name (optional)
Purchases and services
- Full name
- Tax ID
- Billing and delivery address
- Phone
- Payment data (managed by secure payment gateways)
Browsing data
- IP address
- Browser type
- Pages visited
- Browsing time
- Cookies (see Cookies Policy)
What do we use your data for?
The personal data you provide will be processed for the following purposes:
Inquiry management
Purpose: Respond to your inquiries and requests Legal basis: Consent of the data subject Retention: Until you request deletion or for the time necessary to comply with legal obligations
Service provision
Purpose: Manage visits, orders, reservations and requested services Legal basis: Performance of a contract Retention: During the contractual relationship and, subsequently, during legal limitation periods
Sending commercial communications
Purpose: Send newsletters, offers and information about products and services Legal basis: Consent of the data subject (you can unsubscribe at any time) Retention: Until you request unsubscription
Compliance with legal obligations
Purpose: Comply with tax, accounting and legal obligations Legal basis: Legal obligation Retention: During the periods established by applicable legislation
To whom do we disclose your data?
Your personal data will not be disclosed to third parties, except:
- When there is a legal obligation
- When necessary for the provision of a service (e.g., courier companies, banking entities, management agencies)
- When you have given your express consent
Service providers
We may share your data with service providers who help us operate our business:
- Web hosting services: To host our website and databases
- Email services: To send communications and newsletters
- Payment gateways: To process payments securely
- Courier services: For order delivery
All these providers have signed confidentiality agreements and comply with GDPR.
What are your rights?
As the owner of personal data, you have the following rights:
Right of access
You can request information about the personal data we hold about you.
Right of rectification
You can request the correction of inaccurate or incomplete data.
Right of erasure
You can request the deletion of your personal data when:
- They are no longer necessary for the purposes for which they were collected
- You withdraw consent and there is no other legal basis
- You object to processing and there are no legitimate grounds to continue
- The data has been processed unlawfully
Right to object
You can object to the processing of your personal data for reasons related to your particular situation.
Right of restriction
You can request the restriction of processing of your data in certain cases.
Right to data portability
You can request to receive the data you have provided to us in a structured, commonly used, machine-readable format, as well as transmit it to another controller.
Right to withdraw consent
When processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
How to exercise your rights
To exercise any of these rights, you can send an email to asala@salagraupera.com or a letter to our postal address, indicating:
- Full name
- Copy of ID document
- Right you wish to exercise
- Date and signature
We will respond to your request within a maximum period of one month from receipt.
Right to lodge a complaint
If you consider that the processing of your personal data violates the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
Data security
We have implemented appropriate technical and organizational security measures to protect your personal data against:
- Accidental loss or destruction
- Unauthorized access
- Misuse or alteration
- Unauthorized processing
These measures include:
- Encryption of sensitive data (SSL/TLS)
- Regular backups
- Restricted access control to data
- Staff training in data protection
- Regular security audits
Data retention
Your personal data will be retained for the time necessary to fulfill the purpose for which it was collected and, subsequently, during the applicable legal limitation periods (typically between 5 and 6 years for tax and accounting obligations).
Once these periods have ended, the data will be securely deleted.
Children’s data
This website is not intended for children under 14 years of age. If you are under 14 years old, you need your parents’ or guardians’ consent to provide us with personal data.
If we detect that we have collected data from minors without proper consent, we will delete it immediately.
Modifications
We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with the date of the last update.
We recommend that you periodically review this Policy to stay informed about how we protect your data.
Last updated: January 2025