De conformidad con lo dispuesto en las normativas vigentes sobre protección de datos personales, le facilitamos la siguiente información:
1. INFORMATION TO THE INTERESTED PARTY AND/OR USER
BODEGAS CASA PRIMICIA, S.A. makes this privacy policy available to you to inform you, in detail, about how the personal data that you as an interested party and/or user provide or have provided are or will be processed, through any means (web page, email, telephone, in person, online or paper forms, etc.).
BODEGAS CASA PRIMICIA, S.A. has adopted all the necessary technical and organizational measures to guarantee the confidentiality, integrity, availability and resilience of the personal data it holds.
Responsabilidad del interesado y/o usuario
By providing your data, you as the interested party and/or user (hereinafter the Interested Party), guarantee that you are over 18 years of age and that the data provided to BODEGAS CASA PRIMICIA, S.A. are true, accurate, complete and up-to-date. For these purposes, the Interested Party confirms that they are responsible for the veracity of the data communicated and that they will keep said information properly updated, so that it responds to their real situation, taking responsibility for false and inaccurate data that they could provide, as well as for damages. and damages, direct or indirect, that may derive from it.
2. RESPONSABLE DEL TRATAMIENTO
Identity: BODEGAS CASA PRIMICIA, S.A.
NIF: A01032564
Postal address: Camino de la Hoya, 1 – 01300 Laguardia (Álava)
Telephone: 945600296
Email: info@casaprimicia.com
3. PURPOSES, CONSERVATION PERIOD AND LEGITIMATION OF PROCESSING
BODEGAS CASA PRIMICIA, S.A., as Responsible for the Treatment of the personal data of the Interested Party, as well as those that may be provided in the future, informs you that this data will be processed accordingly. In accordance with the provisions of current regulations on the protection of personal data, for which reason the following information is provided about each of the treatments carried out by BODEGAS CASA PRIMICIA, S.A.:
CONTACT / INQUIRIES
Purpose of the treatment: to respond to and follow up on queries, requests for information, suggestions and complaints, as well as to maintain contact with those people who have shown interest in the company, its products or services.
Data retention criteria: they will be kept for the time necessary to process and respond to the query.
Legitimation for data processing: GDPR: 6.1.f) the legal basis for data processing is based on the legitimate interest of the Data Controller to attend to and respond to communications or requests received
BOOKING OF VISITS AND/OR ACTIVITIES
Purpose of the treatment: to be able to process, manage, organize and formalize the reservations of visits or activities requested.
Data conservation criteria: they will be kept as long as there is a mutual interest to maintain the purpose of the treatment and, when it is no longer necessary for that purpose, they will be deleted.
Legitimación para el tratamiento de los datos: RGPD: 6.1.b) el tratamiento de los datos es necesario para la ejecución de un contrato o precontrato en el que el interesado es parte.
USER REGISTRATION
Purpose of the treatment: user management and to manage and enable the use of the different services offered on the website of the Data Controller.
Data retention criteria: they will be kept in the system indefinitely as long as the interested party does not request their deletion.
Legitimation for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the Interested Party at the time of providing their data.
CASA PRIMICIA CLUBS
Purpose of the treatment: to manage the registrations in the CLUB PRIMICIA or CLUB COFRADÍA, the correct management of the members, in order to keep them informed, by any means, postal or electronic, about the advantages (offers, promotions, gifts, etc.) for belonging to them, as well as for administrative management (billing, collections, etc.).
Data retention criteria: they will be kept in the system indefinitely as long as the interested party does not request their deletion.
Legitimation for data processing: GDPR: 6.1.a) The legal basis for data processing is the consent provided by the Interested Party at the time of providing their data.
CUSTOMERS AND ONLINE SALES
Purpose of processing:
customer management, maintaining contractual and/or commercial relationships with them, managing the contracting of products and/or services, as well as for the administrative management (billing, collections, etc.), accounting and tax of the company and for the fulfillment of the legal obligations that all this implies.
Also to be able to establish contact with the people who provide services in a legal person (company, organization, etc.), as well as with individual entrepreneurs and liberal professionals, in order to establish or maintain business relationships (“business to business”, B2B ) with the same.
Data retention criteria: they will be kept as long as the contractual and/or commercial relations between both parties are maintained and their deletion is not requested and, if so, during the time provided by the regulations in force (fiscal, commercial, etc.) regarding the prescription of responsibilities.
Legitimation for data processing:
RGPD: 6.1.b) the legal basis for data processing is the execution and maintenance of contractual and/or commercial relationships between both parties, as well as compliance with legal obligations (fiscal, commercial, etc.) that all it implies.
The processing of professional contact data for business relationships is legitimized by the Legitimate Interest of the Responsible to be able to contact, establish and/or maintain business relationships with the legal entity in which the Interested, as well as with individual entrepreneurs and liberal professionals (RGPD: 6.1.f and LOPDGDD: 19).
CONTESTS / DRAWS / PROMOTIONS
Purpose of the treatment: to manage and organize the participation of the Interested Parties in draws, contests or promotions carried out by the Treatment Manager and the sending of any communication related to its organization and, in the case of be awarded, the publication of the name and/or image in the media that the Treatment Manager deems appropriate, as well as on its web pages, social networks and promotional material in general with the aim of publicizing the activities of the Treatment Manager.
Data retention criteria: they will be kept as long as it is necessary for the purpose of the treatment and, when it is no longer necessary for that purpose, for the time provided by applicable legislation regarding the prescription of responsibilities.
Legitimation for data processing:
RGPD: 6.1.a) the legal basis for data processing is based on the informed consent that is requested at the time of collecting the data for participation.
RGPD: 6.1.f) The publication of the data, referring to the result of the contest/draw, is based on the legitimate interest of the Data Controller in accordance with the promotional interests and the distribution and exploitation of the event.
SUBSCRIPTION TO BULLETIN / NEWSLETTER / SEND COMMERCIAL COMMUNICATIONS
Purpose of the treatment: manage the sending of newsletters/informative bulletins and commercial communications by any means, postal or electronic, about events, activities, offers, products, services and other information of the Treatment Manager, which may be of interest to the Interested Party.
Data retention criteria: they will be kept in the system indefinitely as long as the interested party does not request their deletion.
Legitimation for data processing:
RGPD: 6.1.f) The sending of commercial information to clients is based on the legitimate interest of the Treatment Manager to send them commercial communications about products or services similar to those contracted and thus achieve their loyalty.
RGPD: 6.1.a) The basis for sending commercial communications to non-customer users is the consent provided by the Interested Party at the time of collecting the data.
However, in either of the two cases, the Interested Party has the right to oppose this treatment, and may do so by any of the means described in this document.
The withdrawal of said consent will not affect in any case the maintenance of commercial relations, but the data processing carried out previously for this purpose will not lose its legality due to the fact that the consent has been revoked.
SUPPLIERS
Purpose of the treatment: management of suppliers, maintenance of contractual and/or commercial relations with them, as well as administrative management (billing, collections, etc.), accounting and tax of the company and for compliance with the legal obligations that all this implies. Includes contact details of natural persons who provide services to a legal person, including individual professionals.
Data retention criteria: they will be kept as long as the contractual and/or commercial relations between both parties are maintained and their deletion is not requested and, if so, during the time provided by the regulations in force (fiscal, commercial, etc.) regarding the prescription of responsibilities.
Legitimation for data processing: GDPR: 6.1.b) the legal basis for data processing is the execution and maintenance of contractual and/or commercial relationships between both parties, as well as the compliance with legal obligations (fiscal, commercial, etc.) that all this implies.
DELIVERY OF CURRICULUM
Purpose of the treatment: filing and registration of documentation and CVs voluntarily provided by the interested parties for future candidate selection processes for a job in the company.
they will be kept for a maximum period of one year or until the interested party exercises their right of deletion.
In this sense, once the aforementioned period has elapsed, and if you wish to continue participating in the selection processes of the Treatment Manager, please send us your CV again.
Legitimation for data processing: GDPR: 6.1.a) the legal basis for data processing is the consent provided by the Interested Party at the time of providing their data to participate in selection processes.
4. DATA COMMUNICATION
In general, personal data will not be communicated to third parties, except in cases where there is a legal obligation or when it is necessary for the provision of services or for the maintenance and development of relationships, such as, by way of example, but not limiting:
– Public Administrations, Judges and Courts, for compliance with legal obligations, as well as for the attention of possible responsibilities derived from the applicable regulations.
– Financial / banking entities, for the management of collections and payments.
– Payment Service Providers, for the management of collections and payments (Mastercard, VISA, PayPal, etc.).
– Transport companies, for the delivery and/or collection of products.
– Service providers contracted by the Controller, who will have the status of Treatment Manager.
Although it is not a transfer of data, to carry out any of the indicated treatments or to provide you with a service, it may be that third-party companies, which act as Treatment Manager (our suppliers), access your information to carry out said treatment or service. These managers access your data following our instructions and without being able to use it for a different purpose and maintaining the strictest confidentiality.
International transfers
BODEGAS CASA PRIMICIA, S.A.. does not plan to make international transfers of your data to countries outside the European Economic Area (EEA). In those cases in which it is necessary, they will only be made to recipients who are in a country, a territory or one or more specific sectors of that country or international organization that has been declared an adequate level of protection by the European Commission; or are under the Privacy Shield agreement; or that are covered by any of the adequate guarantees provided for in article 46.2 of Regulation (EU) 2016/679
5. RIGHTS OF INTERESTED PARTIES
Anyone has the right to obtain confirmation as to whether the Data Controller is processing personal data that concerns them or not, as well as to withdraw, at any time, the consent that they may have granted for any specific purpose, without affecting the legality of the treatment based on the consent prior to its withdrawal.
The regulations on data protection allow you to exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to its treatment, as well as not being subject to decisions based solely on the automated processing of your data, when appropriate.
These rights are characterized by the following:
– Its exercise is free, except in the case of manifestly unfounded or excessive requests (eg, repetitive nature), in which case the Data Controller may charge a fee proportional to the administrative costs borne or refuse to act.
– You can exercise your rights directly or through your legal representative or volunteer.
– We must respond to your request within one month, although, taking into account the complexity and number of requests, the term can be extended for another two months.
– We have the obligation to inform you about the means to exercise these rights, which must be accessible and without being able to deny you the exercise of the right for the sole reason of opting for another means. If the request is submitted electronically, the information will be provided through that channel whenever possible, unless you request otherwise.
– If the Data Controller does not process the request, he will inform you, at most in one month, of the reasons for his non-action and the possibility of claiming before a Control Authority.
How to exercise these rights?
The Interested Parties may exercise their rights by directing a written communication to the postal or electronic address of the Treatment Manager, indicating in the reference “LOPD RIGHTS EXERCISE”, including: petition in which the request is specified, address for the purposes of notifications, date and signature.
If you request it, we will provide you with the forms to be able to exercise these rights, indicating which right you wish to exercise.
Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a claim with the National Control Authority by contacting the Spanish Agency for Data Protection, C/ Jorge Juan, 6 – 28001 Madrid.
6. SOCIAL NETWORKS
BODEGAS CASA PRIMICIA, S.A. uses social networks and this is another way to reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies, which explain how they use and share your information, so we recommend that you consult them before using them to confirm that you agree with the way in which your information is collected. , treated and shared.
The treatment of the data that is carried out of the people who become followers and/or carry out any link or connection action through the social networks of the official pages of the Treatment Manager will be governed by this privacy policy and by the privacy policies of the social networks themselves.
The Data Controller will process your data for the purposes of correctly managing your presence on the corresponding social network, sending personal and individual messages through the social network channels, informing you of the activities, products and/or services of the Data Controller, or from third parties that may be related to our activity, as well as any other treatment that the regulations of social networks may allow.
7. COOKIES
In general, if you browse the Internet you can accept or reject cookies from the configuration options of your browser.
This website may use cookies and other similar technologies such as local shared objects, flash cookies or pixels, which are small files that some platforms, such as web pages, can install on the user’s equipment (computer, tablet, smartphone, etc. ).
Its functions can be very varied: store browsing preferences, collect statistical information, allow certain technical features, store information about the browsing habits of the user or his team, etc.
Cookies are useful for several reasons. From a technical point of view, they allow web pages to work in a more agile way and adapted to user preferences, such as storing their language or the currency of their country, etc. In addition, they help the Website Treatment Managers to improve their services and make the advertising displayed on them more efficient, thanks to the statistical or habit information collected through them.
For the installation and use of certain cookies it is necessary to obtain the informed consent of the users. The cookies that require the user’s consent are, among others, analytical, advertising and affiliation cookies, excepting those of a technical nature and those necessary for the operation of the website or the provision of services expressly requested by the user.
The user has the possibility of configuring their browser to be alerted to the reception of cookies and to prevent their installation on their equipment. Please, consult the instructions of your browser to expand this information. For more information about cookies, see our Cookies Policy.
8. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE INTERESTED PARTY
The Interested Party, by marking the corresponding boxes and entering data in the fields, indicated as mandatory in the various forms, expressly and freely and unequivocally accept that their data is necessary to meet their request by the Treatment Manager. , being voluntary the inclusion of information in the remaining fields.
In the event that all the mandatory data is not provided, the corresponding treatments cannot be carried out and therefore the requests, contracts, or requests made by the Interested Party cannot be met.
The Interested Party guarantees that the personal data provided is true and is responsible for communicating any changes thereto.
9. SECURITY MEASURES
BODEGAS CASA PRIMICIA, S.A. undertakes to protect your personal information: Using physical, organizational and technological measures, controls and procedures, reasonably reliable and effective, aimed at preserving the integrity and security of your data and guarantee your privacy.
In addition, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.
In the case of the contracts that we sign with suppliers, we include clauses in which they are required to maintain the duty of secrecy regarding the personal data to which they have had access by virtue of the order carried out, as well as to implement technical security measures. and organization necessary to guarantee the confidentiality, integrity, availability and permanent resilience of the systems and services for the processing of personal data.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed and there is no security system that is impenetrable so, in the event that any information subject to treatment and under our control is compromised as a result of a security breach, we will take the appropriate measures to investigate the incident, notify the Control Authority and, where appropriate, those Interested Parties that may have been affected so that they take the appropriate measures.