In compliance with data protection regulations, RGPD (EU) 2016/679 of 27 April (RGPD) and L.O. 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDYGDD), we inform you in a clear and simple way about the most relevant aspects of our privacy policy. However, if you have any questions after reading this information, please do not hesitate to contact us.
The Data Controller, BODEGAS VALLEMAYOR S.L., with N.I.F. Nº: B26244913, Postal address at Carretera Logroño – Vitoria nº 38, 26360 – Fuenmayor (La Rioja), e-mail: vallemayor@vallemayor.com; informs you that the personal data that you provide us with through this website will be treated in accordance with the current legislation on personal data protection in Spain and the European Union.
The data provided by the user must be accurate and respond truthfully to the current situation of the person concerned. The user who enters the data is solely and ultimately responsible for the accuracy of the information provided on our website.
What personal data is collected on this website?
For the purposes set out in this Data Protection Policy, the Data Controller collects and processes the Personal Data detailed below, which will depend on the different products or services you request on this Website:
- Contact details: e-mail, telephone number.
- Browsing data: IP address, browsing data, activity on the Website.
Purpose and lawfulness of processing
- Web contact email: we process the data you provide us with in order to deal with the requested query. The legitimation is the consent of the data subject, article 6.1.a) RGPD.
- Commercial communications: the data are processed for commercial and promotional purposes. The legitimation is the explicit consent of the data subject for commercial communications by electronic means article 6.1.a) RGPD, and legitimate interest when applicable art. 21 of Law 34/2002, article 6.1. f) of the RGPD.
- Analysis of website browsing: analysis of analytical cookies in order to compile statistics on the traffic and volume of visits to the website. The legitimacy of the processing is the consent of the data subject, article 6.1.a) RGPD.
The data will not be communicated to third parties except in cases where there is a legal obligation. The legitimacy of the communication is based on the rules themselves (art. 6.1.c RGPD).
No automated decision-making or profiling is foreseen.
How long do we keep personal data?
The data will be kept for the time necessary for the purpose for which they were provided or collected, without prejudice, where appropriate, to the exercise of your right of deletion, which will entail the blocking of the data for as long as the legal obligations persist, or, where appropriate, until you withdraw your consent to receive commercial information.
We may retain personal data after the end of any relationship with the data subject for the purpose of complying with legal obligations.
Addressees
The Data Controller does not communicate personal data to third parties except by legal obligation or in cases where the data subject consents after having been duly informed.
How do we protect your data?
The Data Controller adopts the necessary security measures to guarantee the confidentiality, integrity and availability of your data, adopting the necessary technical, organisational and legal measures to protect them from third parties.
Personal data will only be processed by the parties strictly necessary for the processing of the data and will be stored on physical servers located in the European Union using an SSL certificate. The SSL certificate is a security protocol that makes the data travel in an integral and secure manner, i.e. the transmission of data between a server and user, and in feedback, is fully encrypted or encrypted.
What are your rights?
You may exercise, in accordance with the provisions of Articles 15 to 22 of the GDPR 2016/679, the following rights against the Data Controller, through the postal and/or email addresses indicated in the contact details:
- Right of access. The right to request access to your data to check what personal data is being processed, for what purpose and how long it will be kept, among other information.
- Right of rectification. The right to have your data corrected if it is no longer accurate.
- Right of deletion or removal. The right to request that your data no longer be processed and be deleted.
- Right of limitation. The right to request the restriction of data processing.
- Right to object. The right to object to the Data Controller continuing to process your data, in which case the Data Controller may only keep your data for legitimate interests or for the exercise or defence of possible claims.
- Right of portability. The right to receive personal data concerning you that you have provided to the Controller and to transmit it to another Controller.
Possibility to withdraw consent: where consent has been given for a specific purpose, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
Complaint to the Supervisory Authority: If you consider that the processing of your data infringes the applicable personal data protection regulations, you can file a complaint with the competent Supervisory Authority, in Spain, the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
Updating and modification of this Privacy Policy
The information on this website is current as of the date of its last update.
The Data Controller reserves the right to modify this policy to adapt it to future legislative developments, as well as to future uses it intends to make of your personal data. In the event that such a modification would affect you with regard to the processing of your data, for example, because some additional processing of the same is going to be carried out, not previously informed, we will proceed to notify you of this.