- Data Controller Information
- Company Name: Antigua Bodega de Don Cosme Palacio, S.A., hereinafter, “The Company”.
- Registered Address: Calle San Lázaro, 1. 01300, Laguardia, Álava.
- Tax ID: B-01181064
- Email: info@lascasasedh.com
1.1. Applicable Regulations
Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights. By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein. The Company may modify this Privacy Policy to adapt it to legislative, jurisprudential developments or interpretations of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy and the General Terms and Conditions that, where applicable, are established for certain products or services, if such access involves any special features regarding the protection of personal data.
- Purpose of Personal Data Processing
The processing we perform of your personal data serves the following purposes:
The company informs its Users that their personal data, obtained through the Channels it owns or holds, may only be collected for processing when they are adequate, relevant and not excessive in relation to the scope and the specific, explicit and legitimate purposes for which they have been obtained.
We may receive personal data provided directly by the User, through their visit to the Website, or when the User contacts Customer Service, either by email or telephone. Also, as a result of their interaction with us, we may receive their personal data when filling out forms or surveys, when they request information from us, send requests, etc…
In other cases, personal data is obtained indirectly from the user in order to analyze their use of our cookie policy.
2.1. Data Retention Period
We will retain your personal data from the time you give us your consent until you revoke it or request the limitation of processing. In such cases, we will keep your data blocked for the legally required periods.
- Legal Basis and Data Collected
The legal basis for processing your data is the express consent given through a positive and affirmative act (filling out the corresponding form and checking the box accepting this policy) at the time of providing us with your personal data.
3.1. Consent to process your data
By filling out the forms, checking the “I Accept the Privacy Policy” box and clicking to send the data, or by sending emails to the Company through the accounts enabled for this purpose, the User declares to have read and expressly accepted this privacy policy, and gives their unequivocal and express consent to the processing of their personal data in accordance with the indicated purposes.
3.2. Data categories
Identification and contact data: Name and surname, address (shipping data), country of residence, telephone number, email, etc.
- Security Measures
Within our commitment to guarantee the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, according to Art. 32 of the GDPR EU 679/2016.
- Data Transfer
No data transfers or international transfers of your data are foreseen, except for those authorized by tax, commercial and telecommunications legislation, as well as in those cases where a judicial authority requires it.
- User Rights
Any interested party has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defense of claims. For reasons related to their particular situation, interested parties may object to the processing of their data. The Data Controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. In accordance with current legislation, you have the following rights: right to request access to your personal data, right to request its rectification or deletion, right to request the limitation of its processing, right to object to processing, right to data portability and likewise, to revoke the consent given. You also have the right to file a complaint with the Spanish Data Protection Agency.
6.1. How to exercise my rights?
To exercise your rights, you must contact the controller, requesting the corresponding form for exercising the chosen right. Optionally, you can go to the competent Control Authority to obtain additional information about your rights. The contact details for exercising your rights via email: info@lascasasedh.com
Remember to include a copy of a document that allows us to identify you.
- Consent for Sending Electronic Communications
Likewise, and in accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, by completing the data collection form and checking the corresponding box “I accept the sending of electronic communications”, you are giving express consent to send information about the Company to your email address, telephone, fax or other electronic means.