Privacy Policy

Last updated: April 21, 2026

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, and current Spanish legislation on the protection of personal data, users of this website are hereby informed about the processing of their personal data.

1. Data Controller

  • Controller: DF Group Shops & Airports S.L.
  • Tax ID No.: B98922503
  • Registered office: Gran Vía Marqués del Turia 12, 7, 46005 Valencia (Spain)
  • Contact email: info@dutyfreegroup.es
  • Telephone: 961 101 995
  • Website: shop.wearedfgroup.com

2. Purpose of the processing of personal data

On this website, DF Group Shops & Airports S.L. processes the personal data voluntarily provided by the user through the newsletter subscription form.

The purposes of the processing are:

  • to manage the user’s subscription to the newsletter;
  • to send informational or commercial communications by email regarding news, content, products, services,
  • promotions or information related to DF Group’s activity;
  • to manage, where applicable, the user’s unsubscription or withdrawal of consent.

3. Data collected

The only personal data collected through this website is the data voluntarily provided by the user when subscribing to the newsletter.

Specifically: email address.
DF Group does not request, through this website, any special categories of personal data.

4. Legal basis for the processing

The legal basis that legitimises the processing of the data is the data subject’s consent, granted when freely, specifically, informedly and unambiguously subscribing to the newsletter. Consent may be withdrawn at any time.

5. Data retention

The personal data provided for newsletter subscription will be kept:

  • until the user withdraws their consent;
  • until the user requests the deletion of their data.

However, DF Group may retain, duly blocked, the data strictly necessary during the legally required periods in order to address possible legal liabilities or demonstrate compliance with regulatory obligations. 

If the user requests not to receive any further communications, DF Group may retain the minimum data strictly necessary to ensure that no further unwanted commercial communications are sent.

6. Recipients of the data

As a general rule, the data will not be disclosed to third parties, unless required by law.

However, for the management of newsletter distribution, DF Group uses Mailchimp, an email marketing platform provided by The Rocket Science Group LLC, which acts as a data processor and may process the data following DF Group’s instructions for subscription management and the sending of electronic communications.

7. International data transfers

The use of Mailchimp may involve international transfers of data outside the European Economic Area. In such cases, DF Group will adopt the appropriate safeguards required by applicable regulations to ensure a level of protection equivalent to that required under European data protection legislation.

8. Users’ rights

The user may exercise their data protection rights at any time. In particular, they may request:

  • access to their personal data;
  • rectification of inaccurate data;
  • erasure of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected;
  • restriction of processing;
  • objection to processing;
  • data portability, where legally applicable;
  • withdrawal of consent at any time.

To exercise these rights, the user may send a request to:

Email: info@dutyfreegroup.es

The request must identify the applicant and clearly indicate which right they wish to exercise.

Likewise, if the user believes that their rights have not been properly addressed, they may lodge a complaint with the Spanish Data Protection Agency.

9. Whether the provision of data is mandatory or optional

Providing an email address for newsletter subscription is voluntary. However, if such data is not provided, it will not be possible to process the subscription or send the requested communications.

10. Minors

This website is not intended for minors. DF Group does not knowingly request or process personal data from minors through this website.

If a parent, guardian or legal representative believes that a minor has provided personal data, they may contact DF Group to request its deletion.

11. Data security

DF Group adopts reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access or improper processing, taking into account the nature of the data processed and the risks to which it is exposed.

12. Changes to this policy

DF Group reserves the right to modify this Privacy Policy in order to adapt it to legislative or case law developments, or to changes in the operation of the website.

In the event of any modification, the updated version will be published on this same page.