Privacy policy

Varietats d’Alçada, S.L. (hereinafter, “varietal500”) as the owner of the page and the associated iOS / Android mobile applications (hereafter referred to as the “Portals”) is aware of the value of your personal information, so constantly worries and strives to protect the privacy of its users. This document has been prepared in accordance with art. 13 of the EU Regulation 2016/679 (hereinafter, the “GDPR”) in order to allow you to know our privacy policy, understand how your personal information is treated when you browse our Portals and, where appropriate, give your consent for the treatment of your personal data expressly and informed. The information and data provided by you will be treated in accordance with the provisions of the GDPR and the confidentiality obligations that inspire the activity of VARIETAL500.

In accordance with the rules of the GDPR, the treatment carried out by VARIETAL500 will be based on the principles of legality, fairness, transparency, limitation of the purpose of the treatment, data minimization, accuracy, integrity and confidentiality.


  1. Responsible for the treatment
  2. Personal data processed
  3. Navigation data
  4. Special categories of personal data
  5. Data provided voluntarily by the interested party
  6. cookies
  7. Purpose of the treatment
  8. Recipients of personal data
  9. Conservation of personal data
  10. Rights of the interested party
  11. Modifications


1. Responsible for the treatment

The data controller is Varietats d’Alçada, S.L. with registered office in Masía La Fàbrega, Carretera TV 244 Km 14,2 – 43714 El Pla de Manlleu (Aiguamúrcia) – Tarragona – Spain.

2. Personal data processed

We inform you that VARIETAL500 will only treat the personal data that is strictly necessary for the correct navigation through the Portals and for the purposes described in the following point 3 “Purposes of the treatment” (hereinafter, “Personal Data”).

The Personal Data processed through the Portals are the following:

Navigation data

The computer systems and software procedures used for the operation of the Portals acquire, during normal operation, some Personal Data whose transmission is implicit in the Internet communication protocols. This information is not collected to be associated with identified users. However, by its very nature it could, through the treatment and association with data held by third parties, allow the identification of such users. This category of data includes the IP addresses or domain names of the computers used by the users that connect to the Portals, the URI (Uniform Resource Identifier) ​​of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code that indicates the status of the server response (correct, error, etc.) and other parameters related to the operating system and the computing environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Portals and to check their correct functioning, to identify anomalies and / or abuses, and are eliminated immediately after their treatment. The data could be used to determine responsibility in case of hypothetical computer crimes against the Portals or against third parties.


The Portals use third-party analytical cookies to offer you services that fit the preferences you have expressed when surfing the web. You can find specific information about this section by accessing the Cookies policy link.

3. Purposes of the treatment

The treatment we intend to carry out, with your express consent when necessary, has the following purposes:

UserUsability and Quality Analysis for the improvement of our services.The legitimate interest of VARIETAL500 (art. 6. 1 f) of the GDPR).
ClientCommercial, accounting and administrative management of clients.

Provision of the services requested by the client.

Collection and publication of ratings on products.

Respond to requests for assistance or information.

Sending commercial communications about VARIETAL500 products and services.

Development of commercial profiles through automated treatments in order to develop commercial actions on VARIETAL500 products, based on the purchase history.

The treatment is necessary for the maintenance of the business relationship or to respond to the requests of the person concerned (art. 6. 1 b) of the GDPR).

The consent you have given us.

The legitimate interest of VARIETAL500 (art. 6. 1 f) of the GDPR).

SupplierCommercial, accounting and administrative management of suppliers. Project management and study of potential supplier companies.The treatment is necessary for the maintenance of the business relationship or to respond to the requests of the person concerned (art. 6. 1 b) of the GDPR).
CandidateEvaluate job vacancy candidacy.

Arrange interviews.

The treatment is necessary to meet the requests of the person concerned (art. 6. 1 b) of the GDPR).
All of priorComply with the legal, accounting and tax obligations that correspond to VARIETAL500.The regulations applicable in each case (art. 6. 1 c) of the GDPR).


4. Recipients of personal data

Your Personal Data may be shared, for the purposes set forth in section 3 above, with:

  1. subjects that typically act as data processors, that is: i) professional persons, companies or firms that provide assistance and advice to VARIETAL500 in accounting, administrative, legal, tax, financial and credit collection matters; ii) subjects with whom it is necessary to interact for the provision of services (for example, hosting providers, order delivery company); iii) delegated subjects to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks) (hereinafter, jointly, the “Recipients”);
  2. persons, entities or authorities to whom it is mandatory to communicate your personal data, by virtue of legal provisions or orders of the authorities;

Some of your Personal Data are shared with Recipients that may be located outside the European Economic Area. In this regard, VARIETAL500 guarantees that the processing of your Personal Data by these Recipients is carried out in accordance with the GDPR. In fact, transfers can be based on an adequacy decision, on contractual clauses approved by the European Commission or on another appropriate legal basis.

More information can be obtained by contacting us directly (see contact details indicated in paragraph 7. Rights of the interested parties).

5.Data retention

VARIETAL500 only stores your personal information to the extent that we need it in order to be able to use it according to the purposes for which they were collected, and according to the legal basis of the treatment of it in accordance with the applicable law. Your personal information will be maintained as long as there is a contractual and / or commercial relationship or as long as you do not exercise your right to delete, cancel and / or limit the processing of your data.

Once the relationship with you has ended for any of the reasons indicated, the information will be duly blocked, without any use, as long as it may be necessary for the exercise or defense of claims or some type of judicial, legal or legal responsibility may arise. contractual treatment, which must be attended and for which recovery is necessary. Specific:

Interested categoryTime
Client10 years
Supplier10 years
Candidate24 months


6. Rights of the interested parties

At any time, you may exercise the rights of access, rectification, limitation, cancellation, portability and opposition regarding your personal data through communication with VARIETAL500 whose contact details we indicate below:

  • Registered office: Masía La Fàbrega, TV Road 244 Km 14.2 – 43714 El Pla de Manlleu (Aiguamúrcia) – Tarragona – Spain
  • Email address:
  • Telephone: +34 616 85 57 34 (Monday to Friday from 10:00 a.m. to 2:00 p.m.)

You can also contact us at the following email:

Said communication must include name and surname, request in which the request is specified, address for the purposes of notifications, date, signature and photocopy of the DNI or another valid document that identifies it. The exercise of these rights is free.

In case you have any conflict in relation to the protection of your personal data, you can file a claim with the AEPD (

7. Modifications

VARIETAL500 reserves the right to modify or simply update the content, in part or in its entirety, also due to changes in the applicable legislation. Consequently, we invite you to regularly visit this section to know the latest and most updated version of the privacy policy in order to always be updated on the data collected and the use made by VARIETAL500.

Last update: May 31, 2019