Privacy Policy

1. Who is responsible for the processing of your data?

The data controller for information used in the processes employed to manage our users, customers or suppliers is EL BANDARRA, S.L., with registered office at C. General Vara de Rey, 5 Piso 1º, 26003 de Logroño (La Rioja) and Company Tax Code B26551622.

For the purposes of our data protection policy, our contact telephone number is 941 271 217 and the contact email address is info@elbandarra.com.

2. What kind of data do we have about your person and how have we obtained them?

The categories of personal data that our company processes with respect to its customers and suppliers are:

• – Identity data
• – Professional data, such as job, skills, etc.
• – Postal or electronic addresses
• – Commercial information
• – Economic and transaction data

Under no circumstances do we process data that has been specifically protected. We have obtained all the aforementioned data either directly from you by means of a contact form or through a commercial offer, contractual proposal, etc., or via your company through the provision of identity data and other information needed to perform the object of the contractual relationship between the parties. Either you or your company must submit updated data in the event of amendment.

3. For what purpose do we treat your data?

We process the data provided by data subjects to manage the activities deriving from the specific procedures performed in respect of sales, post-sales services, supplier management, service quality, etc. This means that we use your data to perform some of the following actions:

1. – Sending the information requested through the contact form on our website or any other means of contact with our company.
2. – Providing potential and existing customers offers for products and services of interest.
3. – Performing administrative, tax and accounting procedures for our customers and/or suppliers.
4. – Carrying out satisfaction surveys, market research, etc., in order to provide customers with the most suitable offers, an optimised quality of service, etc.

• – We will not create commercial profiles with the information provided; therefore, we will not make automated decisions about you based on a commercial profile.

4. How long will we keep your data?

The personal data of individuals in connection with potential customers, existing customers and suppliers that is collected using contact forms and/or through the gathering of information is stored until the data subject requests its deletion. Data provided by our customers and suppliers will be stored while the commercial relationship between the parties remains in effect. In all cases, the minimum legal storage term for the subject matter in question will be respected.

 

In any event, we will store your personal data for as long as is reasonably necessary, taking into account our need to respond to questions raised, resolve problems, make improvements, activate new services and comply with the requirements of applicable legislation. This means that we may store your personal data for a reasonable period of time, including after you have finished using our products or ceased to use this website. After this period of time, your personal data will be deleted from all of our company systems.

5. What is the legitimacy basis for the processing of your data?

Below is a summary of what represents legal authority to process personal data, depending on what it is processed for:

Processing	Legal authority
Accounting: managing customer and/or supplier invoices.	To maintain, implement and monitor the contractual relationship between the parties
Taxes: applying withholdings, rebates, etc.	To maintain, implement and monitor the contractual relationship between the parties; complying with legal obligations.
Administration: managing logistics, storage facilities, customer deliveries, receipt of goods, etc.	To maintain, implement and monitor the contractual relationship between the parties
Marketing: Performing commercial activities with respect to our products or services that are aimed at our customers or people who have requested relevant information in the past, including carrying out satisfaction surveys with our customers, sending commercial information and updates about our products and services, etc.	The free an unambiguous consent of the data subject (potential customers). You are hereby informed that if you choose to withdraw consent, this shall in no way affect the performance of any contract there may be between the parties. The company’s legitimate interest to promote and market products or services that are similar to those obtained or requested by interested parties in the past.

If you are required to provide your personal data on the aforementioned legal authority grounds and decide not to do so, it will not be possible to perform the contract or comply with legal obligations or the requirements of public authorities.

6. To which recipients will your data be communicated?

Our company will only share your personal data with third parties that intend to use it for direct marketing purposes if you have expressly authorised us to do so.

We may submit your personal data to Public Administration agencies and competent authorities if we receive a legal requirement to do so from said authorities, or in instances where, acting in good faith, we consider that such action is reasonably necessary in order to comply with legal proceedings, respond to a claim or legal action, or protect the rights of our customers or the general public.

Your data will not be assigned or communicated to third parties, as our company is solely responsible for processing and storing it.

7. What are your rights as affected or interested?

Anyone has the right to obtain confirmation of whether or not we are processing personal data that concerns them.

Specifically, data subjects may request the right to access their personal data and receive it in a common and machine-readable format, if processing is performed by electronic means (right to portability).

Data subjects may also request the right to correct inaccurate data and, where applicable, may ask for data to be deleted if, among other reasons, it is no longer needed for the purposes it was collected for.

Under certain circumstances, data subjects may request that the processing of their data be restricted and, depending on their specific circumstances, may also exercise their right to object to the processing of their data. Our company will then cease to process the data at issue, unless it may continue to do so as a result of overriding legal grounds, a need to file or defend a claim or exceptions laid down by applicable regulations.

You are entitled to withdraw your consent at any time, without this affecting the legality of the data processing activities that were performed based on the existence of consent before it was withdrawn.

Users are also hereby informed that they may exercise the above rights at any time by writing to us using the contact data featured in Section 1 (entitled ‘Data controller’) of this Privacy and Data Protection Policy and attaching a copy of their ID Card. You are also entitled to submit a complaint to the Agencia Española de Protección de Datos [Spanish Data Protection Agency], particularly if you have not been able to exercise your rights to your satisfaction.

Agencia Española de Protección de Datos.

C/ Jorge Juan, 6

28001 – Madrid

Tel. 901100099 / 912663517

 

8. Data protection of users of the website.

In accordance with the prevailing Regulation (EU) 2016/679, you are hereby informed that the personal data of website Users will be processed by the company as stipulated in every data collection form on our website. Your data will be processed in accordance with your consent. By clicking on the “SEND” button, Users consent to their data being processed by our company.

We will only communicate your data to third parties if you give your express consent or there is a legal requirement to do so.

Users may also exercise their rights to access, correct or delete data, as well as any other rights set forth in this document and governed by Regulation (EU) 2016/679 by notifying VINTAE LUXURY WINE SPECIALISTS, S.L. at the following email address: info@vintae.com.

Furthermore, in accordance with Act 34/2002 of 11 July on Information Society Services and E-commerce, our company undertakes to only send advertising material via email if it has the recipient’s express authority to do so. Users may decline the option to receive advertising material by marking the corresponding box.

9. Other information of interest about our privacy policy

9.1 Security Measures

Our company adopts the security levels required by prevailing European and Spanish data protection legislation, taking into account the state of technology, application costs and the indicated nature, scope, context and purpose of the processing activity, as well as the risks of varying probability and severity to the user’s rights and liberties as a person.

9.2 Data processing of minors

Under GDPR EU 679/2016 and RD 1720/2007, minors aged over 14 can give their consent to engage information society services such as registering on a forum, filling in a contact form, etc. However, VINTAE LUXURY WINE SPECIALISTS, S.L. will be responsible for checking that the age given by said minor is correct.

In order to process data belonging to people aged under 14, said data must always be collected with the express consent of the individual’s parents or legal guardians.

9.3 Modifications of our Data Protection and Privacy Policy

Occasionally, our company may amend or correct this section of the Data Protection Policy for Users, Customers and Suppliers. Please check this section regularly to see if there are any changes and how these may affect you.

9.4 Why is it necessary to accept this Data Protection and Privacy Policy?

This section of the Data Protection Policy for Users, Customers and Suppliers gives you all the information you need, in an easily accessible way, to understand the type of data that VINTAE LUXURY WINE SPECIALISTS, S.L. holds on its potential customers, existing customers and/or suppliers, what it is used for, your rights as a data subject under data protection regulations and the ways in which you can exercise said rights. Therefore, by making a conscious decision to submit your personal data using our means of contact and/or by entering into a commercial relationship with our company, we consider that you acknowledge and accept that your personal data will be processed as described in this policy. This personal information will only be used for the purposes for which it was submitted, or under the national or regional regulations that empower us to use it.

In any case, please be advised that if you refuse to provide us with certain data as requested, this may hinder the implementation of the contractual relationship between the parties and have potentially serious consequences as regards providing the services stipulated in the commercial contract executed with the contracting party.

If you have any questions on this section of our company’s Data Protection Policy for Potential Customers, Existing Customers and Suppliers, please contact the company using the address provided in Section one (entitled ‘Data Controller’) and we will do everything we can to deal with the matter and answer any other questions you may have.

10. Applicable Legislation

These Conditions will be governed at all times by Spanish and European legislation on protecting privacy and personal data.