Data Protection Policy

Before providing your personal data and if is it necessary give your consent for us to process them, it is recommended that you read and understand this data protection policy.
Below there is information about certain processing of personal data that VINS I LICORS GRAU, SA performs, in accordance with the provisions of Regulation (EU) 679/2016, regarding the protection of individuals with regard to the processing of personal data and the free circulation of these data (GDPR) , and the Spanish Organic Law 3/2018, on Data Protection and Digital Rights Guarantee .

Users are informed that their data will be processed confidentially with the purposes indicated in each case.
When accessing the different forms of the web, you must fill in the required fields being a necessary requirement so that in each case we can process the request or provide the requested service.
Prior to the registration and sending of the contact form of the web with your personal data, it will be necessary to tick the check box provided for that purpose, meaning that you have read, including information about personal data and that you consent to processing of your data.
VINS I LICORS GRAU, SA is not responsible for compliance with data protection regulations of third parts owners of other webs to which webs can be linked through this web or who have been able to establish links to it, so that the User is the person in charge of the personal data that can provide them.


- Identity: VINS I LICORS GRAU, SA CIF: CIF: A-17127630
- Postal address: C. Torroella, 163 , Apt. 4 -17200- Palafrugell- (Girona)- Spain-
- Telephone: +34 972 301835
- Email: info@grauonline.com


The data that solicit him and treat can have distinct purposes and save during distinct periods of time:
When you accept to receive commercial communications or you submit the online form "Subscribe for free and receive our offers", the information we can provide is your name, surname and email address, in order to be able to send you through electronic means, newsletters , commercial communications, promotions, offers, information of interest related to our products and services, to invite you to events organized by the person in charge. Your data will be stored until you request the cessation of the activity, and for the duration of determining any liability and claims arising from the data protection law.
When by any means included through the online form "Customer Service", you communicate doubts, suggestions or ask us for any type of information about our products and services, we will process the data that we request, name surnames and email, with the purpose to attend and respond to those requests. Out of the online form, we can also process with those purposes, your postal address, telephone number, and DNI / NIF, especially if you ask us to prepare a quote for our products and services. The data will be stored until the purpose pursued has been achieved or when the cessation of the activity is requested, and for the duration of determining any liability and claims arising from the data protection law
When you are interested in publishing a comment on the "Blog" of the web, the data that we will process will be your name and your e-mail address, with the purpose of being able to attend your publication request and be able to identify you as the author of it. We reserve the right to review the content of the comment and the decision on its publication. The data will be stored until you request the cessation of the activity, and for the duration of determining any liability and claims arising from the data protection law.
When you buy our products or contract the provision of any of our services, we can request the following identification data, necessary to formalize the contract: age, date of birth, name, surname, ID / nif, postal address, phone, email .
When it is the first time you make a purchase online with us, through the online form "New customer", we will ask you enter a username and password. We will process this data in order to create an account and easily identify you as a customer.
Whichever means used for the purchase or contracting of our products and services, we will process your data to manage the business relationship including billing, answer questions, incidents and claims regard to the order you have made, manage the return of products.
Your data will be stored until you request the cessation of the activity for the case that you do not want to continue as a registered client and in another case, at least the duration of the business relationship with you; In any case, the data will be stored during the time periods stipulated in each case for the prescription of claims and responsibilities, according to the civil legislation, of consumers and users, as the case may be, trade and tax law.
In order to maintain the safety of the web against malicious attacks, we record the IP address of the last access (identification number of the device's Internet access, which allows devices, systems and servers to recognize and communicate with each other). For the last log in, the data will be stored until you request the cessation of the activity. In the case of detecting a brute force attack or injection of malicious code, the IP will be stored for thirty minutes.


The legal basis to process your data in order to send you commercial communications, to respond any doubts and suggestions you may have, requests of information of any kind, including the preparation of budgets, as well as the publication, where appropriate, of your comments on the blog of the web, is the consent that we request and you give us by ticking the boxes for that purpose.
You have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
In no case the withdrawal of your consent conditions the execution of the contract that in your case could be formalized or service that had requested.
At any time you can object to the processing of your personal data for promotional purposes, by sending a written notice to this effect to the following email info@grauonline.com and we will cease to process your data for that purposes.
The legal basis for the processing of your data when you register and create an account as a customer in our online store, or contracts the purchase of our products and services through any other means, even in person, is the execution of a contract in accordance with its terms and conditions.
The legal basis for the registration of IP is the legitimate interests pursued by the controller.


For the case that we decide to publish a comment of yours in the blog of the web, your name will also be disclosed to the users of the web.
When you have indicated that the products you buy must be delivered together with the dedication that you may have written, to a third person, your name and surnames will also be disclosed to this person in order to inform that you are the one who requested the delivery. In another case, we couldn't provide this service.
Beyond the assumptions described above, your personal data will be processed only by the data controller, only being disclosed when processing is necessary to fulfil a legal obligation to which the controller is subject.


If you want us to send your order to another address, you can provide the name, surname, postal address and telephone number of a third person. If it is a gift, you can also include a dedication.
By providing this information, you warrant and at your own risk, that it is a legitimate data communication, that the data is accurate and certain, that you have obtained the prior consent of that person to communicate it to us, and that you have been informed of this privacy policy, in order to make delivery of the products you have purchased and, where appropriate, the dedication that you wrote if it is a gift.


Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information. You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data. You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you will have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
You have the right to ask us to restrict the processing of your personal data in certain circumstances. You also have the right to obtain from the controller, for certain grounds, the erasure of personal data concerning you without undue delay and your personal data will be erased without undue delay.
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data.
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. The controller will stop using your data for that purpose unless there are strong and legitimate reasons to continue using your data despite your objections.
You will also have the right to portability in certain circumstances, receive the personal data concerning, which you have provided to the controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
For the effective exercise of the rights indicated, you must send a letter to the effect addressed to the person in charge, to the following postal address: C. Torroella, 163, Apt. 4 -17200- Palafrugell- (Girona)- Spain- or sending an email to info@grauonline.com .
We will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims. We also inform you that you have the right to lodge a complaint with a supervisory authority such as the Spanish Agency for Data Protection, especially when you have not obtained satisfaction in the exercise of your rights, you can contact at address c. Jorge Juan, 6, -28002-Madrid-.

© All rights reserved.