The Data Controller undertakes to comply with the regulations governing the protection of personal data and to respect the privacy of Users. The objective is to provide the best possible service to Users, and for this purpose, it is necessary to process their personal data.
Users may only provide their own personal data and, under no circumstances, the personal data of another person without that person's express consent. Users shall be solely responsible if they do so.
Consejo Regulador de las Denominaciones de Origen “Jerez-Xérès-Sherry”, “Manzanilla-Sanlúcar de Barrameda” and “Vinagre de Jerez”
Tax Identification Number (NIF): Q117102G
Registered Address: Avenida Alcalde Álvaro Domecq, 2, 11402 Jerez de la Frontera, Cádiz, Spain
Telephone: +34 956 332 050
Course Registration: Processing of information provided by Users to express their interest in participating in training courses. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
Event Registration: Processing of information provided by Users to express their interest in registering for events. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR.
Subscription: Processing of information provided by Users to express their interest in participating in activities, including subscribing to newsletters. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR.
Ethics Reporting Channel: Data collected through the Ethics Reporting Channel form, including information about the reporting person and any affected third parties, necessary for managing the organisation's internal reporting system. Individuals using this channel may voluntarily choose whether to identify themselves.
The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR. In the case of third-party data provided through the Ethics Reporting Channel, the legal basis is the performance of a task carried out in the public interest, in accordance with Article 6(1)(e) of the GDPR.
Browsing Data: Data collected through first-party or third-party cookies that may be generated by this Website, provided that the User has been informed about them and has accepted their use. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR.
Marketing Communications: Users who voluntarily accept this option will receive promotions, advertising, offers, news, event invitations and any other commercial information from the Data Controller. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR.
Personalised Marketing Communications: Users who voluntarily accept this option will receive personalised promotions, advertising, offers, news, event invitations and other commercial information determined by the Data Controller based on their behaviour, preferences and personal profile. The legal basis for processing is the User's consent, in accordance with Article 6(1)(a) of the GDPR.
In all cases, Users may subsequently object to receiving marketing communications at any time by sending an email to info@sherry.org from the same email account at which they receive the communications.
An updated list of the processing activities carried out by the Data Controller is available at the following link:
Record of Processing Activities
Personal data will be retained for as long as the relationship with the User remains in place and the User has not requested its deletion. In all cases, data will be retained in accordance with any applicable statutory limitation periods and legal retention requirements.
No disclosure of Users' personal data collected through this Website to third parties is envisaged unless there is a lawful basis that authorises such processing.
The Data Controller uses external service providers that employ cookies to conduct analytical studies of Website usage and to generate advertising, which may include behavioural advertising.
The Data Controller does not have access to the data generated by these cookies.
Users may select which cookies are permitted on this Website before they are activated, may subsequently manage their preferences, and may consult the Cookie Policy at any time.
In connection with the management and provision of services, Users' data may be processed by companies that provide the Data Controller with various services, including shipping, courier services, accounting, consultancy, IT maintenance or any other service for which access to or processing of such data is essential or unavoidable in their capacity as Data Processors.
Such processing shall not, under any circumstances, be considered a disclosure of data to third parties.
Users may exercise the following rights concerning their personal data:
To exercise these rights, Users must submit a request with the subject line "Data Protection" to:
Avenida Alcalde Álvaro Domecq, 2, 11402 Jerez de la Frontera, Cádiz, Spain
Alternatively, requests may be sent by email to info@sherry.org from the same email account previously provided to the Data Controller.
In all cases, Users must provide their contact details.
If Users believe their rights have been violated, they may lodge a complaint with the Andalusian Council for Transparency and Data Protection (Consejo de Transparencia y Protección de Datos de Andalucía):
The contact details of the Data Protection Officer (DPO) are:
Grupo Datcon Sur S.L.U.
C/ Dr. Duarte Acosta 7, 1.24
11500 El Puerto de Santa María, Cádiz, Spain
Email: ejercicioderechos@grupodatcon.com
Any free-text fields made available to Users in forms on the Website are intended solely and exclusively to collect information that will help improve the quality of the Services.
Users must not include, in any areas of the Website designated as "free-text fields", personal data that may be classified as requiring a special level of protection.
Such data includes, but is not limited to, information relating to:
The Data Controller informs Users that providing certain personal data is optional, except where fields are specifically marked as mandatory with an asterisk (*).
However, failure to provide such data may prevent the Data Controller from delivering some or all of the Services associated with that information.
In such cases, the Data Controller shall not be held liable for the non-provision or incomplete provision of those Services.
Users undertake to provide accurate information regarding their personal data and to ensure that the information supplied to the Data Controller is kept up to date.
Users shall, in all cases, be responsible for the accuracy of the information they provide.
The Data Controller reserves the right to exclude from its Services any User who has provided false information, without prejudice to any other legal action that may be appropriate.
The information provided by Users shall be presumed to be correct.
Consequently, if a User submits incorrect personal data, the Data Controller accepts no responsibility for the incorrect execution or failure to execute any associated delivery, nor for the incorrect completion of any necessary administrative procedures.
Any information exchanged between the parties shall also be considered confidential where:
The display of data over the Internet shall not constitute direct access to such data unless the data subject has expressly consented to such access on each occasion.
In accordance with current personal data protection regulations, photographs in which individuals can be identified are considered personal data.
Users are hereby informed that photographs of individuals may appear on this Website for promotional purposes, provided that those individuals have voluntarily consented to their use.
If any individual appearing in a photograph wishes for that photograph to be removed, they are requested to contact the Data Controller, who will arrange for its removal as soon as reasonably possible.
This provision shall not apply to individuals who have provided services in a professional capacity.