1. EUROPEAN UNION PRIVACY NOTICE (GDPR)
Scope: This notice applies to residents of the European Economic Area (EEA), including EU Member States, Iceland, Liechtenstein, and Norway.
I. Legal Purchase Age (LDA) You must be of legal purchase age to access this site. In most EEA countries, this is 18 years of age. We do not knowingly collect data from minors. If we detect that a minor has provided information, it will be deleted immediately and permanently.
II. Lawful Bases for Processing Under the EU General Data Protection Regulation (GDPR), we process your data based on:
· Contractual Necessity: To manage your Mezcal orders, payments, and shipping.
· Legal Obligation: For age verification and tax/customs compliance.
· Legitimate Interest: To ensure website security and prevent fraudulent transactions.
· Consent: For marketing communications (Newsletters), which you can withdraw at any time.
III. International Data Transfers (SCCs) Your data is transferred to our headquarters in Mexico. To ensure your information is protected, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission. These clauses mandate that your data receives a level of protection equivalent to that within the EU.
IV. Your Rights You may exercise your rights of Access, Rectification, Erasure ("Right to be Forgotten"), Portability, and Objection by emailing: javier@mezcalnahuales.com. You also have the right to lodge a complaint with your local Data Protection Authority.