What is and is not done with your personal data on this website can be found here.

This policy expresses how we will treat and protect the personal information of all persons who interact with EL MESÓN DE BRIONES through this website. Please read all sections of the Legal Notice, the cookies policy and this privacy policy before using this website.

In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of 27 April 2016 (RGPD) and the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, María Cruz Díaz Matute, informs you that, by accepting this Privacy Policy, you give your express, informed, free and unequivocal consent for the Data you provide, and on which security, technical and organizational measures apply, as provided in current legislation, you give your express, informed, free and unequivocal consent for the Data you provide, and on which the security, technical and organizational measures provided for in the current regulations are applied, to be processed by María Cruz Díaz Matute, as data controller.

Who is responsible for this website?

Identity of the Responsible Party: María Cruz Díaz Matute
Trade name: EL MESÓN DE BRIONES
NIF/CIF: 16531929N
Address: Travesía de la Estación, 3, 26330 Briones (La Rioja)
E-mail: info@elmesonbriones.es
Contact details of the person in charge or representative, and of the data protection officer.You can contact us by using the contact form or by writing an email to info@elmesonbriones.es.

What personal data is collected on this website?

For the purposes set forth in this Privacy Policy, EL MESÓN DE BRIONES and treats the Personal Data detailed below, which will depend on the different products or services requested in this Web:

Identifying data: first name, last name.

Contact information: mailing address, e-mail address, cell phone number.

Contract data: data of contractual operations, DNI, products and services purchased, financial operations, payment data.

Navigation dataIP address, type and identification of the device, type of browser, domain through which you access the Web Site, navigation data, activity on the Web Site.

On what legal basis is this data processed?

We process your personal data on the following legal bases:

The execution of a contract with EL MESÓN DE BRIONES, to contract services, publish advertisements and manage the services requested.

Consent of the user in relation to the contact, the subscription to contents and the sending of commercial communications, via mail, cookies or messaging systems.

Legitimate interest of the data controller to protect the users of the EL MESÓN DE BRIONES website from abuse and fraud in the use of our services.

For what purposes will we process your data?

In this website, there are different forms, in each of them, the information collected will be used in the following way:

Content subscription forms: there are several forms to activate the subscription. The data provided will be used exclusively to send the Newsletter and keep you updated about news and special offers, exclusive for elmesonbriones.es subscribers.

Contact form: There is also a contact form for queries, suggestions or professional contact. In this case the e-mail address will be used to respond to them and send the information that the user requires through the web.

Registration Form: In this case, we request the following personal data: Name, Email, so that you can create an account in our system and give access to its functionalities.

Time of conservation of personal data

Customer Data: The period of conservation of personal data will vary depending on the service contracted by the Client. In any case, it will be the minimum necessary, and may be kept until:

- 4 years: Law on Infractions and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries...); Arts. 66 et seq. General Tax Law (accounting books...).

- 5 years: Art. 1964 of the Civil Code (personal actions without special term).

- 6 years: Art. 30 of the Commercial Code (accounting books, invoices...).

- 10 years: Art. 25 of the Law for the Prevention of Money Laundering and Financing of Terrorism.

Subscriber dataFrom the time the user subscribes to the time he/she unsubscribes.

Potential customer dataThe data will be kept in any case for the duration of the commercial relationship established and, once concluded, for two years, unless the user requests its deletion beforehand.

What are your rights regarding the use of your data?

Any person has the right to obtain confirmation as to whether or not EL MESÓN DE BRIONES is processing personal data concerning him/her.

Interested persons have the right to:

Request access to personal data relating to the data subject.
Request its rectification or suppression.
Request its cancellation.
Request the limitation of your treatment.
Opposing treatment.
Request data portability.

If you have given your consent for any specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority through its website: https://www.aepd.es/es

To exercise these rights, you may write to info@elmesonbriones.es.

There is a form for exercising your rights, You can order it by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or be accompanied by a photocopy of the ID card.

If you are represented by someone, you must attach a copy of your ID, or it must be signed with your electronic signature.

Forms may be submitted in person, by letter or by mail to the address of the person in charge at the beginning of this text.

Security Notification and Breach Disclosure

At EL MESÓN DE BRIONES we take security measures appropriate to the level of risk to protect personal information against loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of personal information; however, if EL MESÓN DE BRIONES, determines that your service data has been misappropriated (including by an employee of EL MESÓN DE BRIONES, has been exposed by a security breach or improperly acquired by a third party, EL MESÓN DE BRIONES will promptly inform you of such security breach, misappropriation or misacquisition.

To which recipients will your data be communicated?

Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of the activity, EL MESÓN DE BRIONES shares data with the following providers under their corresponding privacy conditions:

Third-party service providers (e.g., payment processing services, order processing, analytics, marketing campaign management, website management, and e-mail distribution and other similar service providers) in order for them to perform business functions on behalf of EL MESÓN DE BRIONES.

The web development and maintenance company or the hosting company may have occasional access to this website. They have signed a service contract that obliges them to maintain the same level of privacy that applies to the processing carried out on this website.

Any international transfer of data derived from the use of tools or service providers will be subject to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies on privacy, secrecy and data security.

Specifically, this website uses the following tools:

Analysis tools: Google Analytics.

Data secrecy and security

elmesonbriones.es is committed to the use and treatment of the user's personal data, respecting its confidentiality, in accordance with the purpose of those; as well as to comply with its obligation to save them and adapt all measures to prevent alteration, loss, treatment or unauthorized access, in accordance with the provisions of current legislation on data protection.

This website includes an SSL certificate. It is a security protocol that makes your data travel in an integral and secure way; that is, the transmission of data between a server and the web user, and in feedback is fully encrypted or encrypted.

elmesonbriones.es cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of the data by means of fraudulent accesses to them by third parties.

With respect to the confidentiality of processing, EL MESÓN DE BRIONES will ensure that any person who is authorized by EL MESÓN DE BRIONES to process the client's data (including its staff, collaborators and service providers), will be under an appropriate obligation of confidentiality (whether a contractual or legal duty).

When any Security Incident occurs, upon becoming aware of it EL MESÓN DE BRIONES shall notify the Customer without undue delay and shall provide timely information related to the Security Incident as it becomes known, or when reasonably requested by the Customer.

Accuracy and veracity of the data

As a user, you are solely responsible for the veracity and correctness of the data you submit to elmesonbriones.es, exonerating María Cruz Díaz Matute (EL MESÓN DE BRIONES) of any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Revocability

The consent given, both for the processing and for the transfer of the data of the interested parties, may be revoked at any time by communicating it to María Cruz Díaz Matute (EL MESÓN DE BRIONES) in the terms established in this Policy for the exercise of ARCO rights. This revocation shall in no case be retroactive.

Changes in the privacy policy

María Cruz Díaz Matute reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as industry practices. In such cases, it will announce on this page the changes introduced reasonably in advance of their implementation.

This privacy policy was last updated on 04/21/2026.