This Privacy Policy describes how Abadía Retuerta, S.A. (“Abadía Retuerta”, “we”, “us”) with registered address at Carretera N-122, Km 332,5 Sardón del Duero, 47340 (Valladolid) collects and processes information about you that directly or indirectly identifies you (“Personal Data”), either alone or in combination with other available information, through interactions with us (including www.abadia-retuerta.com) or through any other Abadía Retuerta web site, application or other service (both online and offline) that links to, incorporates or provides you with a copy of this Privacy Policy (collectively the “Services”).
Abadía Retuerta, S.A., is responsible for the processing of your personal data, as it decides why and how it is processed, and therefore acts as “Data Controller”. The Privacy Policy covers how we respect your data protection rights with respect to the processing of your data in connection with the Services and/or for the purposes described in this Privacy Policy.
While this Privacy Policy is intended for individuals interacting with the Services, you may be asked to consult additional privacy policies or other privacy notices on our country-specific web pages if you reside in a particular location or if you use certain applications or web pages not covered under the Services. Where required, we will also provide you with specific privacy notices for purposes related to activities not covered by this policy, including, but not limited to, recruitment, employment or management of third parties.
Please note that if you access a third party website or link from our Services, you may need to consult the data protection policies of such third parties. Abadía Retuerta does not endorse and is not responsible for the information or data protection practices of websites or services owned by third parties.
By continuing to use the Services, you agree to this Privacy Policy. We consider the protection of your personal information and privacy to be a matter of the utmost importance. As such, we encourage you to read this Privacy Policy carefully.
If you have any questions regarding the processing of your personal data or this Policy, please refer to the section entitled: Contact us.
We may change or update this Privacy Policy in the future by posting a new privacy policy on this website. Please continue to review this policy regularly to be aware of any changes.
How do we handle information from children under 14 years of age?
Our services are not directed to children. We do not knowingly collect any personal data about children under the age of 14 on our website or for the purposes mentioned in this Privacy Policy. If we have been provided with personal data about children in error and you would like to request deletion of such personal information, please see our section entitled Contact Us.
What personal data do we process and for what purposes?
Most of our Services do not require any registration or registration to access them.
However, depending on how you interact with us, we may collect and process personal data that directly identifies you, such as your name, contact details and email address. We may also collect certain personal data that does not directly identify you, but which makes identification possible through the combination of other information or identifiers, such as your company name, position in your company or tax identification number. Personal data may also include information such as computer or device serial numbers, IP addresses or information relating to a company (“legal entity”). If you submit personal data relating to other individuals either to us or to our service providers in connection with the Services, you represent that you have sufficient authority to do so and to permit us to use the data in accordance with this Privacy Policy.
A. Information you voluntarily provide to us
A.1 User registration
To use some Services (or part of them) you may be required to create a user account by registering in advance. When registering, you must provide your name, email address, login ID, security questions and answers, encrypted passwords, mailing address, phone number.
We process and store the personal data you provide during registration exclusively to enable you to access content specifically relevant to you. The legal basis for processing your personal data may be the fulfillment of obligations under an agreement with you or your consent.
A.2 Requests for contact, customer service or comments
For inquiries through our contact form, you must provide your name, mailing address, email address, phone number, the reason for contact and your message. You may provide your social media profile information, including name, email address, contact details, comments and feedback when you interact with us on social media platforms or use your social media login credentials to authenticate on our website.
We process and store the personal data you provide in the contact request only to process and respond to your request about our products and services and to contact you.
The lawful basis for processing your personal data is to fulfill our contractual obligations to communicate with you in relation to any relevant concerns by virtue of which you have contacted us.
A.3 Bulletins and/or Newsletter
When subscribing to our newsletter service, you must provide your name, e-mail address and/or mailing address.
To the extent that you have given us your consent to data processing when registering for the newsletter service, we process and store the personal data you provide when subscribing to the newsletter only to provide the newsletter service in connection with the newsletter service you have subscribed to in order to inform you about Abadía Retuerta events, products, services and/or promotions.
If you have given your consent by subscribing to the newsletter, we may also analyze your user behavior when opening the respective newsletter and process the collected data for the personalization of future newsletters and other promotional communications.
The legal basis for the processing of your personal data is your consent.
A.4 Orders and services
When ordering products and services through the website (such as placing an order, making hotel reservations, purchasing experiences etc,….), you must provide your name, email address and mailing address and, if applicable, your payment details.
We process and store the personal data provided when you place an order to provide you with the products and services you requested and for our business purposes, including improving our products and services and personalizing your experience when interacting with the Services. The legal basis for processing your personal data is the performance of contractual obligations and our legitimate interests.
B. Automatically collected information
B.1 Website usage analytics
We may also collect and process information about your visit to this website, such as the pages you visit, the website you came from and the searches you perform. We may use such information to help improve the content of the website and compile aggregate statistics about the people who use our website for our internal usage statistics and market research purposes. In doing so, we may set “cookies” or similar technologies that collect the user’s domain name, Internet service provider, operating system, and date and time of access. Cookies are created and stored on the user’s computer, phone or other devices when the user’s browser loads a particular web page. Each time the user returns to the same web page, the browser retrieves and sends this cookie file back to the web page. Cookies are useful because they serve key purposes, such as helping a website remember your preferences and settings, performing analytics to improve services, providing you with relevant content or advertisements, and authenticating you to websites. Cookies do not harm your computer. You can set your browser to notify you when you receive a cookie, allowing you to decide whether or not to accept it. You can also refuse cookies altogether. However, if you do not accept our cookies, you may not be able to use the full functionality of our website. When you visit our web pages, you may be presented with a cookie settings banner that allows you to manage your settings and accept or decline cookies. It is legally permissible to store cookies on your machine if they are essential to the operation of the website, but for all other types of cookies we need your permission to do so. On the Abadía Retuerta website, you have the option to accept the use of cookies by using the banner <Cookie settings> that appear when you first visit the website or you can manage these settings at any time thereafter. This cookie policy gives you the option to accept or refuse consent for each category of cookies (with the exception of necessary cookies). See our <Cookie settings> to learn more about what types of cookies we use (the purpose for which they are used, their lifetime and where they come from) and how you can manage your preferences.
Some of our Services, including web pages, may use the web analytics service “Google Analytics” of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to optimize them. Google uses this information obtained by the cookie to store a profile of the pages you have visited within a session. The information generated by the cookie about your use of the Services is transmitted to and stored on Google servers. To increase the security of your personal data, we use the “IP anonymization” function or other functions provided by Google to anonymize you. For more information on how IP anonymization works, please click https://support.google.com/analytics/answer/2763052.
Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity for us and provide us with other services related to website activity and internet usage. Abadía Retuerta uses the data received from Google Analytics for business planning, for its own business activities and for marketing measures to better understand how to improve the content of our web services and the associated experience.
Some of our web pages also use OneTrust cookies to allow you to manage cookies easily and to help us obtain your consent to our placement and use of cookies on your device. We need these cookies to remember the choices you have made regarding your cookie settings.
The legal basis for processing your personal data when we perform web analytics is your consent or our legitimate business interests.
B.2 Other tracking technologies
We may use cookies or other tracking technologies (also known as action tags, single-pixel GIFs, clear GIFs, invisible GIFs and 1-for-1 GIFs) provided by third-party advertising companies to serve you relevant ads (interactive or non-interactive) based on your interests or browsing history. We generally use the services of social media companies and other third party advertising companies to collect information such as your browser details, unique customer ID, etc. so that we can show you ads on our websites and on other websites you may use. Please see our <Cookie settings> to learn more about our marketing or advertising cookies and manage your preferences.
Our Services, including web pages, may use Google Tag Manager (“GTM”), which is a tag management system operated by Google to manage JavaScript and HTML tags used for tracking and analytics on web pages. Tags are small pieces of code that, among other things, are used to measure traffic and visitor behavior: to understand the effect of online advertising and social channels; to establish remarketing and targeting; and to test and optimize web pages. GTM makes it easy for us to integrate and manage our tags.
We may use other technologies, including tags that may collect some of your information, such as IP address, to support website analytics offered by vendors, including but not limited to those listed below:
The legal basis for processing your personal data is your consent or our legitimate business interests.
B.3 Web Page Preferences and Security
We may collect certain information about you, such as your IP address, unique device identifiers such as Media Access Control (MAC) address, computer type (Windows or Mac), browser type and version, screen resolution, operating system name and version. We can also deduce your location information from your IP address. We use this information to protect our websites and network systems, as well as to improve our services by recording your preferences, maintaining service levels, diagnosing and troubleshooting technical problems.
The legal basis for processing your personal data is our legitimate business interests.
We may combine, aggregate or anonymize Personal Data with data we may collect from or about you from other sources, such as public databases, demographic information providers, marketing partners, public social media platforms (data made public by you) and other third parties.
We may use your data for our business purposes, including audits, to monitor and prevent fraud, infringements and other potential misuses of our products and services, and to modify our services.
We may also use your Personal Information:
Generally, we do not collect Sensitive Personal Data. You are requested not to disclose your Sensitive Personal Data to us unless we specifically ask you to do so in connection with the Services (e.g., health data in case you use any spa treatment, etc…).
When and to whom may we provide your Personal Information?
This Privacy Policy describes the circumstances under which we may share your personal data. We may share your personal data with other subsidiaries and affiliates of the Novartis Group around the world to exchange information and maintain databases in different countries. We may also transfer personal data to third parties acting on our behalf, for further processing in accordance with the purposes for which the data was originally collected or for which it may be lawfully processed, such as providing services, evaluating the usefulness of our Services, marketing, advertising, data management or technical support.
We will not sell, share or transfer your personal information to third parties other than as described in this Privacy Policy.
In the course of our business and for the same purposes as those listed in this Privacy Policy, the following categories of recipients may access or transfer your personal data as necessary to achieve those purposes:
These third parties have contracted with us to use your personal data only for the agreed purpose, and not to sell your personal data to third parties or disclose it to third parties, except as permitted by us, as required by law, or as stated in this Privacy Policy.
We may disclose your personal data to a third party in the event that the business or a part of the business and related customer data is sold, assigned or transferred, in which case we would require the buyer, assignee or transferee to process the personal data. Information in accordance with this Privacy Policy.
In addition, we may disclose your personal data to a third party if we are required to do so by applicable law, requests from public and government authorities (including court orders, subpoenas or government regulations), including outside your country of residence; if we need to enforce our terms and conditions; when we believe in good faith that disclosure is necessary to protect the legal rights, safety or integrity of this website; to protect your safety or the safety of others; as part of any criminal or legal investigation or proceeding in your country or other countries; or to third parties, advisors and other entities to the extent reasonably necessary to develop or proceed with the negotiation or completion of a corporate or commercial transaction.
Your personal data may also be processed, accessed or stored in countries outside Spain. These countries may offer a different level of data protection.
If we transfer your personal data to external companies in other jurisdictions, we will ensure that we protect your personal data by applying the level of protection required by the applicable data protection laws by implementing appropriate technical and organizational measures. In the event that your personal data is transferred to a service provider based in a third country (countries outside the European Union that do not have a level of data protection comparable to European Union data protection regulations, as determined by a competent data protection authority) and processed there, Abadía Retuerta ensures the protection of your personal data by means of standard contractual clauses or European Union model clauses or otherwise in accordance with applicable law. In the event that these Standard Contractual Clauses are declared null and void in the future and/or are reviewed by the European Commission, we will adopt other applicable and/or approved instruments to provide the appropriate safeguards required for transfers to third countries and such agreed instruments will be carried out in writing and in a legally binding manner.
For transfers of personal data between Abadía Retuerta subsidiaries and affiliates, the Novartis Group has adopted Binding Corporate Rules, a system of principles, rules and tools, authorized by European law, to govern the transfer of Personal Information outside the European Economic Area and Switzerland. More information about the Novartis Binding Corporate Rules can be found on the home page of our website in the footer under the section entitled: “Data Protection”.
How do we protect your Personal Data?
We have implemented appropriate technical and organizational measures designed to provide an adequate level of security and confidentiality of your personal data.
The purpose of these measures is to protect personal data against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.
How long will we keep your personal data?
We will only retain your personal data for as long as necessary to fulfill the purpose for which it was collected or to comply with legal or regulatory requirements.
What are your rights and how can you exercise them?
Whenever we process personal data, we take reasonable steps to keep your personal data accurate and up-to-date for the purposes for which it was collected. We will provide you with the possibility to exercise the following rights under the conditions and within the limits established by law.
If you have any questions or wish to exercise the above rights, you may send an e-mail to our data protection officer at global.privacy_office@novartis.com or a letter to Abadía Retuerta at your local address with your identity document scanned for identification purposes.
If you are not satisfied with the way we handle your personal data, please contact our Data Protection Officer privacy@abadia-retuerta.es who will review your complaint.
In any case, you also have the right to lodge a complaint with the competent data protection authorities, in addition to your previous rights.
How often do we update this privacy policy?
We periodically review this Privacy Policy. This policy was last updated in February 2022.
If you wish to contact us regarding how we use your personal data or if you wish to exercise your data protection rights, please send us an e-mail to privacy@abadia-retuerta.es or write to us at the following address:
Abadía Retuerta
Carretera N-122, Km 332,5
Sardón del Duero, 47340 (Valladolid)
SPAIN
In order to respond efficiently, please provide the following information:
Some states (including, but not limited to, California, Nevada and Texas) have specific rights for their residents. Click here for more information on these state-specific rights.
+34 983 687 600
SARDÓN DE DUERO, 47340 VALLADOLID (SPAIN)
º 2025 ABBEY RETUERTA LEDOMAINE
