Privacy policy

1.- DETAILS OF THE DATA CONTROLLER

Company name: BODEGAS ARCO DE CURIEL, S.L.U. (hereinafter referred to as the “Company” or the “Data Controller”).
Tax ID Nº (CIF) B81966384
Registered office: CALLE ZURRUPITIETA 20 – 01015 – VITORIA – ALAVA

Telephone: 983880481
Email address for data protection matters: [email protected]

1.1. Applicable legislation

Our Privacy Policy has been drawn up in accordance with the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and, insofar as it does not conflict with the aforementioned Regulation, by the provisions of the Spanish legislative framework on the protection of personal data.

By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and conditions set out herein.

The Company may amend this Privacy Policy to adapt it to new legislation, court rulings or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, the Cookies Policy and the General Terms and Conditions which, where applicable, are established for specific products or services, if such access involves any special provisions regarding the protection of personal data.

1.2. Data Protection Officer

The Company does not have a Data Protection Officer.

2.- PURPOSE OF THE PROCESSING OF PERSONAL DATA

We process your personal data for the following purposes:

– To provide you with information about the products and services offered by our company, as detailed on this website.

– To facilitate the procurement of our services through the acceptance of the relevant quotation or order and/or the signing of a commercial contract.

– To send you, by email and/or post, news and updates about our organisation, as well as updates to our catalogue of products and services.

2.1. Data retention period

We shall retain your personal data from the moment you give us your consent until you withdraw it or request that its processing be restricted. In such cases, we shall keep your data on hold for the periods required by law.

3.- LEGAL BASIS AND DATA COLLECTED

The legal basis for the processing of your data is the express consent given through a positive and affirmative act (completing the relevant form and ticking the box to accept this policy) at the time you provide us with your personal data.

3.1. Consent to the processing of your data

By completing the forms, ticking the ‘I accept the Privacy Policy’ box and clicking to submit the data, or by sending emails to the Company via the accounts provided for this purpose, the User confirms that they have read and expressly accepted this privacy policy, and gives their unequivocal and express consent to the processing of their personal data in accordance with the stated purposes.

3.2. Categories of data

The data collected fall within the category of identifying data, such as: Name and Surname(s), Telephone number, Postal address, Company, Email address, as well as the IP address from which you access the data collection form.

4.- SECURITY MEASURES

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have implemented all the necessary technical and organisational measures to ensure the security of personal data and to prevent its unauthorised alteration, loss, processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, in accordance with Article 32 of the GDPR (Regulation (EU) 2016/679).

5.- DISCLOSURE OF DATA

No disclosure of data or international transfer of your data is envisaged, save in cases authorised by tax, commercial and telecommunications legislation, as well as in cases where a judicial authority requires us to do so.

6.- DATA SUBJECT RIGHTS

Every data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we shall only retain the data for the purpose of exercising or defending legal claims. For reasons relating to their particular situation, data subjects may object to the processing of their data. The data controller shall cease processing the data, save for compelling legitimate grounds, or for the exercise or defence of potential claims.

In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request its rectification or erasure, the right to request the restriction of its processing, the right to object to the processing, the right to data portability, and the right to withdraw your consent.

6.1. How do I exercise my rights?

To exercise your rights, you should contact the data controller and request the relevant form to exercise the right in question. Alternatively, you can contact the relevant Supervisory Authority for further information about your rights. The contact details for exercising your rights are: telephone 983880481 and email: [email protected]. Please remember to attach a copy of a document that allows us to identify you.

7.- CONSENT TO RECEIVE ELECTRONIC COMMUNICATIONS

Furthermore, in accordance with the provisions of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, by completing the data collection form and ticking the relevant ‘I accept the sending of electronic communications’ box, you give us your express consent to send you information about the Company to your email address, telephone number, fax number or other electronic means.