PRIVACY POLICY
1. Identification of the Data Controller
The controller responsible for the processing of personal data collected through this website is:
Name/Corporate name: COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A. (hereinafter, “THE COMPANY”)
Tax ID (CIF): A48002893
Registered address: Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava), Spain
Telephone: +34 945 625 255
Contact email: rgpd@cvne.com
The following companies are part of the same corporate group for data processing purposes:
VIÑEDOS DEL CONTINO S.A., VINOS Y VIÑEDOS MONTENEGRO S.L.U., CVNE BILBAO S.L.U., CONSORCI DE VINS NOSTRES I ESTRANGER S.L., ROGER GOLART S.A.U., VIRGEN DEL GALIR S.L., and AGROGALIR S.L.
2. Purposes of Processing and Legal Basis
The personal data provided by the User will be processed for several legitimate purposes:
Management of inquiries and requests:
- To handle, process and respond to requests, incidents or questions submitted through contact forms.This processing is based on the User’s consent, which may be withdrawn at any time.
- Order management, delivery and payment: To process purchases made through the Website, handle payment, organize shipping and manage possible returns or incidents. This processing is based on the performance of a contract.
- Sending of commercial communications: To send, including by electronic means, information about products, services, promotions, offers or events that may be of interest, provided the User has given explicit consent, which may be revoked at any time.
- Compliance with legal obligations: To retain information when required by tax, accounting, consumer protection or other applicable regulations, in which case the legal basis is compliance with a legal obligation.
- Campaign deliveries: Exclusively for the purpose of preparing and delivering campaign orders. The legal basis is the performance of a contract and the legitimate interest of the client placing the order. The client providing recipient lists guarantees that the recipients have been duly informed and that there is a lawful basis for disclosing their data to CVNE.
Data will be retained for as long as necessary for the purposes indicated and, once fulfilled, for the statutory limitation periods required to address any potential liabilities.
3. Categories of Personal Data
THE COMPANY will process the following categories of data:
- Identification data: name and surname(s).
- Contact data: postal address, email and telephone number.
- Billing data.
- Payment data (e.g., information necessary to process payments; full card details are not stored).
No special categories of data (such as health, ideology, etc.) are processed.
4. Data Recipients
Personal data may be communicated to:
- Companies within the corporate group.
- Courier or transport companies responsible for the delivery of orders.
- Public administrations and competent authorities, when there is a legal obligation.
- Transport companies responsible for delivering campaign shipments.
No international data transfers are foreseen, except where necessary for the provision of services and provided that the required legal safeguards are in place.
5. Data Retention Periods
Data will be retained for as long as a contractual relationship exists or as long as necessary for the purposes described. Once these purposes have been fulfilled, data will be blocked and retained only for the statutory limitation periods required to address any potential liabilities.
6. Rights of Data Subjects
The User may exercise, at any time, easily and free of charge, the following rights:
- Access: to know which data we process and obtain a copy.
- Rectification: to correct inaccurate or incomplete data.
- Erasure (right to be forgotten): to request deletion of data when no longer necessary or when consent is withdrawn.
- Objection: to object to the processing of personal data, especially for commercial communications.
- Restriction: to request a temporary restriction of processing in certain circumstances.
- Portability: to receive data in a structured format and transmit it to another controller.
Not to be subject to automated decisions, including profiling, where applicable.
To exercise these rights, the User may contact:
COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A.,
Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava), Spain,
or by email at rgpd@cvne.com
In case of disagreement, the User may file a complaint with the Spanish Data Protection Agency (AEPD), at C/ Jorge Juan 6, 28001 Madrid, or through its website https://www.aepd.es/
7. Security Measures
THE COMPANY will process personal data confidentially at all times and will adopt the necessary technical and organizational measures to ensure its integrity and availability, and to prevent unauthorized access, in accordance with the state of the art and the nature of the data processed.