PRIVACY POLICY
- Identification of the Controller
This website is owned by VIRGEN DEL GALIR, S.L., whose identification details are as follows:
Registered in the Commercial Registry of Álava, Volume 1663, Folio 176, Sheet VI-19169, Entry 15a.
Tax ID (CIF): B32278210
Address: Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava), Spain
Telephone: 988 335 600
Email: rgpd@cvne.com
- Purposes of Processing and Legal Basis
- Management of inquiries and requests:To handle, process and respond to requests, incidents or questions submitted through contact forms.
This processing is based on the User’s consent, which may be withdrawn at any time.
- Order management, delivery and payment:To process purchases made through the Website, manage payment, organize shipment, and handle possible returns or incidents.
This processing is based on the performance of a contract.
- Sending of commercial communications: To send, including by electronic means, information about products, services, promotions, offers, or events that may be of interest, provided the User has given explicit consent, which may be revoked at any time.
- Compliance with legal obligations: To retain information when required by tax, accounting, consumer protection or other applicable regulations.
The legal basis in such cases is compliance with a legal obligation.
- Campaign deliveries: Exclusively to prepare and deliver campaign orders.
The legal basis is the performance of a contract and the legitimate interest of the client placing the order. The client providing the recipient lists guarantees that the recipients have been duly informed and that a lawful basis exists for communicating their data to CVNE.
Data will be retained for as long as necessary to fulfill the purposes described and, once completed, during the applicable statutory limitation periods to address any potential liabilities.
- Categories of Personal Data
The COMPANY will process the following categories of data:
- Identification data: name and surname(s).
- Contact data: postal address, email, and telephone number.
- Billing data.
- Payment data (e.g., information necessary to process payments; complete card details are not stored).
No special categories of data (such as health, ideology, etc.) are processed.
- Data Recipients
Personal data may be disclosed to:
- Companies within the corporate group.
- Courier or transport companies responsible for order delivery.
- Public administrations and competent authorities, where there is a legal obligation.
- Transport companies responsible for delivering campaign shipments.
No international data transfers are foreseen, unless necessary for the provision of services and always with the safeguards required by applicable regulations.
- Data Retention Periods
Personal data will be retained for the periods necessary to fulfill the specified purposes:
- Management of inquiries and requests: data will be retained until the User withdraws consent or, in any case, for a maximum of 1 year from the last communication.
- Order management, delivery and payment: data will be retained for the duration of the contractual relationship and, once terminated, for 6 years to comply with legal obligations in commercial and accounting matters.
- Commercial communications: data will be retained until the User withdraws consent or objects to the processing.
- Compliance with legal obligations: data will be retained for the limitation periods established by tax, accounting, or consumer regulations, generally 6 years, and in certain cases (e.g., tax purposes) up to 10 years.
- Campaign deliveries: for the time strictly necessary to prepare, ship and deliver the orders, as well as to meet any resulting legal obligations.
In all cases, once the above retention periods have expired, the data will be blocked, preventing further processing except for the purpose of addressing possible claims or liabilities.
- Rights of Data Subjects
Users may exercise, at any time, easily and free of charge, the following rights:
- Access: to know what data we process and obtain a copy.
- Rectification: to correct inaccurate or incomplete data.
- Erasure (right to be forgotten): to request the deletion of data when no longer necessary or when consent is withdrawn.
- Objection: to object to data processing, particularly for commercial communications.
- Restriction: to request temporary limitation of processing in certain circumstances.
- Portability: to receive data in a structured format and transmit it to another controller.
- Not to be subject to automated decisions, including profiling, where applicable.
To exercise these rights, the User may contact:
COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A.,
Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava), Spain,
or via email at rgpd@cvne.com
In case of disagreement, the User may lodge a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan 6, 28001 Madrid, or through its website https://www.aepd.es/
.
- Security Measures
The COMPANY will process personal data confidentially at all times and will adopt the necessary technical and organizational measures to ensure data integrity and availability, and to prevent unauthorized access, in accordance with the state of the art and the nature of the data processed.
