Privacy policy

1. Data controller

Inou Contract Solutions, S.L.U. (tax ID B88486212), Calle Darwin 18, Portal 2, 2.º A · 18100 Armilla (Granada), España. Email: ricardo@ricardomartinez.es. This is the entity providing services under the “Ricardo Martínez · Sumiller” brand.

2. What data we process and why

• Contact form: name, email, phone and the content of your message, to answer your enquiry and prepare a quote or booking. Legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).
• Newsletter (“The sommelier's letter”): email address, to send you recommendations, wineries and open tastings, at most once a month. Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time via the unsubscribe link in every email.
• Gift vouchers: buyer's name and email, recipient's name and email, the voucher message and amount, to issue and send the voucher and manage its redemption. Card details are processed exclusively by Stripe; this site never receives them. Legal basis: performance of a contract (art. 6.1.b GDPR) and tax obligations (art. 6.1.c GDPR).
• Open tasting bookings are made on the Ticket Tailor platform, which processes your data under its own privacy policy.

3. How long we keep your data

• Contact enquiries: for the duration of the relationship and afterwards for as long as needed to deal with potential liabilities (maximum 3 years).
• Newsletter: until you unsubscribe.
• Voucher purchases: for the validity of the voucher and the periods required by tax and commercial law (up to 6 years).

4. Who we share data with

We do not sell or transfer your data to third parties. Only the technology providers essential to deliver the service access it, as data processors under contract:

• Vercel Inc. (website hosting and cookie-free analytics).
• Resend, Inc. (delivery of contact, newsletter and voucher emails).
• Stripe Payments Europe, Ltd. (gift voucher payment gateway).
• Ticket Tailor Ltd. (open tasting bookings).
• Alture Digital, S.L. (technical maintenance of the website).

5. International transfers

Some of these providers are established in the United States. Transfers are covered by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to ricardo@ricardomartinez.es, stating the right you wish to exercise and attaching proof of identity. We will reply within one month.

If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect your data: HTTPS encryption across the site, restricted access to mailboxes and providers with recognised security certifications.