Legal
Privacy policy
How Xdrinks Exclusive Drinks S.L. handles personal data.
1. Data controller
Xdrinks Exclusive Drinks, S.L. (NIF B19824408). Address: Avinguda del Raiguer, 9, 07330 Consell (Illes Balears). Email: info@xdrinks.es. Telephone: +34 692 850 820.
This policy applies to personal data processed through www.xdrinks.es, the customer area and communications with Xdrinks by email, telephone or messaging.
2. What data we process
- Contact details provided in the website forms: name, venue or brand, email address, telephone number and the content of the message.
- Data of customers and their contact persons: identification, position, contact details, delivery address, order history, invoices and payment details. For direct debit, the IBAN and the SEPA mandate.
- Customer area access data: username, access logs and account activity.
- Browsing data obtained through cookies, as set out in the Cookie policy. Analytics cookies are only placed with your consent.
Contact details of businesses and professionals are processed within the commercial relationship between Xdrinks and the business they represent.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to requests for information, visits or samples sent through the forms or by other means | Pre-contractual measures taken at the request of the data subject (art. 6.1.b GDPR) |
| Managing the commercial relationship with customers: account, orders, deliveries, invoicing, payments, direct debits, customer service and training | Performance of the contract (art. 6.1.b GDPR) |
| Complying with legal obligations, in particular accounting, tax and invoicing obligations | Legal obligation (art. 6.1.c GDPR) |
| Sending customers commercial communications about products and services similar to those contracted | Legitimate interest (art. 6.1.f GDPR) and art. 21.2 LSSI; you may object at any time |
| Sending commercial communications to professionals who are not customers | Consent (art. 6.1.a GDPR), which you may withdraw at any time |
| Analysing the use of the website in order to improve it | Consent (art. 6.1.a GDPR), given through the cookie banner |
| Ensuring the security of the website and the customer area and preventing fraud | Legitimate interest (art. 6.1.f GDPR) |
4. Retention
- Requests that do not lead to a commercial relationship: one year from the last communication.
- Customer data: for as long as the commercial relationship lasts and, afterwards, for the limitation periods of the legal obligations, generally six years for accounting and commercial records (art. 30 of the Spanish Commercial Code) and four years for tax records.
- SEPA mandates: while they are in force and for up to 14 months after the last collection.
- Commercial communications: until you object or withdraw your consent.
- Browsing data: the periods stated in the Cookie policy.
5. Recipients
Xdrinks does not sell or transfer personal data to third parties. The following have access to the data as data processors, solely to provide their services to Xdrinks:
- Odoo S.A. (Belgium), which hosts the website, the customer area and the management system, in data centres located in the European Union.
- Microsoft Ireland Operations Ltd., for email and office tools.
- Google Ireland Ltd., for website analytics (Google Analytics 4), only if you accept analytics cookies.
- Payment and banking institutions for collections and direct debits, transport companies for deliveries, and accounting and tax advisers, to the extent necessary for each service.
Data may be disclosed to public authorities where required by law.
6. International transfers
Xdrinks' services are provided from the European Union. Google Analytics may involve processing data in the United States; this transfer is covered by the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework and, alternatively, by the standard contractual clauses approved by the European Commission. Microsoft provides its services from the European Union, with the same safeguards for any access from outside it.
7. Rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to info@xdrinks.es or to the postal address given in section 1, stating the right you wish to exercise and providing a means of verifying your identity. Xdrinks will respond within one month.
If you consider that the processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
Xdrinks applies appropriate technical and organisational measures to protect personal data: encrypted communications (HTTPS), access control to the customer area and the management systems, backups, and confidentiality obligations for staff and data processors.
9. Minors
The website and the customer area are aimed at businesses and professionals in the hospitality trade. Data of persons under 18 are not knowingly collected.
10. Updates
Xdrinks may amend this policy to adapt it to changes in the law or in the service. The current version, with its date, will always be available at www.xdrinks.es/privacidad.
Version: 27 October 2026.