Privacy Policy

1. USER INFORMATION

Who is the controller of your personal data?

Joel Ortega Franco is the CONTROLLER of the USER’S personal data and informs the USER that these data shall be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

For what purpose do we process your personal data and why do we do it?

Depending on the form through which we have obtained your personal data, we will process them confidentially for the following purposes:

In the Contact form

• Respond to queries or any type of request made by the user through any of the contact methods available on the controller’s website.
  (for the legitimate interest of the controller, art. 6.1.f GDPR)
• Send commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, that make it possible to carry out commercial communications. These communications will be made by the controller and will be related to its products and services, or those of its partners or suppliers with whom promotion agreements have been reached. In this case, third parties will never have access to personal data.
  (by the consent of the data subject, art. 6.1.a GDPR)
• Conduct statistical analysis and market research.
  (for the legitimate interest of the controller, art. 6.1.f GDPR)

In the E-commerce form

• Manage the purchase or online order, process payment and proceed with shipment or activation, based on the general terms and conditions of contracting.
  (for the performance of a contract or pre-contractual measures, art. 6.1.b GDPR)
• Manage, maintain, improve or develop the services provided.
  (for the performance of a contract or pre-contractual measures, art. 6.1.b GDPR)
• Conduct satisfaction and quality surveys.
  (for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Reservations form

• Formalise reservations in the controller’s establishment.
  (for the performance of a contract or pre-contractual measures, art. 6.1.b GDPR)
• Send commercial advertising communications by email, fax, SMS, MMS, social networks or by any other electronic or physical means, present or future, to customers, concerning products or services similar to those initially contracted with the customer (art. 21.2 LSSI).
  (for the legitimate interest of the controller, art. 6.1.f GDPR)

For how long will we keep your personal data?

Data shall be stored for no longer than necessary to fulfil the purpose of processing or for as long as legal obligations require their retention. Once no longer necessary, they will be deleted using appropriate security measures to ensure anonymisation or complete destruction.

To whom do we disclose your personal data?

No disclosure of personal data to third parties is envisaged, except where necessary for the development and execution of the purposes of processing, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processing agreements required by current data protection regulations.

Within the framework of payment management, we use the Stripe platform, which acts as a data processor. Stripe does not use your data for its own purposes and operates in accordance with Article 28 of the GDPR.

In certain processing activities, such as electronic payment management, your personal data may be transferred outside the European Economic Area. Specifically, Stripe Inc. (USA) acts as a data processor. The international transfer is carried out on the basis of Standard Contractual Clauses approved by the European Commission (art. 46 GDPR), together with technical and organisational measures that ensure the security of the information.

What are your rights?

The rights of the USER are:

• Right to withdraw consent at any time.
• Right of access, rectification, portability and erasure of your data, and the limitation of or objection to their processing.
• Right to lodge a complaint with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact information for exercising rights:

Joel Ortega Franco. Carrer Nou, 6 – 17600 Figueres (Girona). E-mail: j.ortega@vinoserrioxa.es

2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or download forms, expressly, freely and unequivocally accept that their data are necessary for the provider to deal with their request, while the inclusion of data in the remaining fields is voluntary.

The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for notifying any changes to them.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. If not all data are provided, there is no guarantee that the information and services supplied will be fully adapted to the USER’s needs.

3. SECURITY MEASURES

In accordance with current personal data protection regulations, the CONTROLLER complies with all provisions of the GDPR and LOPDGDD regarding the processing of personal data for which it is responsible, and expressly complies with the principles described in Article 5 of the GDPR, whereby such data are processed lawfully, fairly and transparently in relation to the data subject, and are appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that appropriate technical and organisational policies have been implemented in order to apply the security measures established by the GDPR and LOPDGDD to protect the rights and freedoms of USERS, and has provided them with the appropriate information so that they may exercise them.

For more information about privacy safeguards, you may contact the CONTROLLER at: Joel Ortega Franco. Carrer Nou, 6 – 17600 Figueres (Girona). E-mail: j.ortega@vinoserrioxa.es
“`