Privacy Policy

At Vinclass Castlexperience, S.L., we work to ensure the privacy of your personal data. We have updated our Privacy Policy to clearly explain how we collect, use, and safeguard the data of individuals who contact our organization.

Data Controller

Individuals providing personal data to Vinclass Castlexperience, S.L. through our website or other means (e.g., social media) are hereby informed that their data will be processed by:

Vinclass Castlexperience, S.L.
CIF: B-65655276
Registered address: Gran Vía de les Corts Catalanes, 734, Local 2, 08013 Barcelona
Phone: +34 93 310 05 09
Email: info@castlexperience.com

Data Protection Officer (DPO)

We also inform you that we have a Data Protection Officer (DPO) responsible for ensuring compliance with data protection regulations. The contact details of our DPO are:

Email: szamora@icab.cat

Purposes of Data Processing

At Vinclass Castlexperience, S.L., data processing is carried out for the following purposes, depending on the reason for which the data has been provided:

To contact the sender of the information, respond to their request, inquiry, or consultation, and provide follow-up.
To manage, if applicable, the contracting of services requested by the USER, including billing and payment.
To manage data transfers, if applicable, as described in forms, contracts, or collaborations necessary for service execution.
All purposes are related to and limited to the core business of the company, which involves contracting tourism services such as a variety of cultural, gastronomic, and wine tours for businesses, individuals, groups, and other related services.

Data Source

The data originates from the data subject or their legal guardian. Generally, the processed data pertains to basic or identifying information. Economic data may also be processed in certain transactions.

Duration of Data Processing

Data used for managing client relationships, billing, and service payments will be retained as long as the contract or relationship remains in effect. Once terminated, data may be retained as required by applicable law and until any contractual liabilities expire.
Data related to inquiries and requests will be retained as long as necessary to respond, with a maximum period of one year or as established by law.
Data for sending marketing communications about our services or offers will be retained indefinitely unless there is no mutual interest or you object to its processing.

Legal Basis for Data Processing

The legal basis for processing your data for the above purposes is the execution of the corresponding service or contract.
Data will be retained while a mutual legitimate interest exists, either through the validity of the contract or consent. Additionally, data will be retained to comply with legal obligations until statutory deadlines expire.
The unequivocal provision of consent.
Satisfaction of a legitimate business interest to offer products or services to our clients and ensure their loyalty. This legitimate interest is recognized by applicable regulations (General Data Protection Regulation), explicitly allowing data processing for direct marketing purposes. (Specific consent is required for this processing.)
You are reminded that you have the right to object to this data processing by using any of the means described in this Policy.

Data Sharing

Data may be shared with the following entities:

Collaborators necessary for the execution of the requested service.

Regular collaborators for services not directly provided by us but recommended for their expertise and professionalism.
Financial entities to facilitate payment and collection processes.
Competent public administrations, as required by law for specific purposes.
Subcontractors to implement security measures and ensure the availability and integrity of the stored information.

Your Rights

Anyone providing their data has the following rights:

Access, rectification, opposition, or deletion of data via the contact address provided at the beginning of this document, our website, or by email. Affected individuals also have the right to data portability and to limit processing if the purpose no longer applies or to object to specific processing activities.
The right to withdraw consent at any time.
The right to file a complaint with the Spanish Data Protection Agency (AEPD) or other competent authority if you believe your rights have been violated. Visit their website at www.aepd.es for more information.

International Data Transfers

Your data will not be transferred outside the European Union. If such a transfer is required, explicit consent will be sought.

Third-Party Data

If you provide third-party data, you assume the responsibility of informing them beforehand of all provisions in Article 14 of the General Data Protection Regulation, under the conditions set forth therein.

Data Updates

If any changes occur to your data or you notice any inaccuracies, please inform us so that we can correct them and maintain updated records.