PRIVACY POLICY

BASIC INFORMATION ON DATA PROTECTION

Identity:

BODEGAS BARBADILLO SL CIF: B11514601

Luis de Eguilaz 11

11540 Sanlúcar de Barrameda CADIZ, España

PURPOSE :

Management and resolution of queries.

The data will be processed in order to perform administrative and accounting tasks.

Management and resolution of queries

Statistical analysis

LEGITIMACY :

User consent

Legitimate interest of the Company

DATA RECIPIENTS:

We do not and will not sell your personal data to any third parties and we understand that this is fundamental for you.
We will only transfer your data to the rest of the companies that form part of GRUPO BARBADILLO for internal management purposes and in order to be able to offer you a wider range of products.

            • Bodega Pirineos SA, Ctra. Barbastro-Naval Km 3,5 Barbastro 22300, HUESCA CIF (Tax Identification Number): A22158281. Tel. 974311289
            • Bodegas y Viñedos Vega Real SL, Ctra. N-122 – Km. 298,6 Castrillo del Duero, 47318 Valladolid CIF (Tax Identification Number): B81637142. Tel. 983881580
            • Embassy Wines & Food Company, Luis de Eguilaz 11 1540 Sanlúcar de Barrameda CADIZ, CIF (Tax Identification Number): A11021086. Tel. 956385500

RESPONSIBLE FOR THE TREATMENT

Identity: Bodegas Barbadillo SL CIF: B11514601
Registry Details: Inscrita en el Registro Mercantil de Cádiz el 18-06-2001, Tomo 1456, Folio 1, Sección 8, Hoja CA-20599 – Inscripción 1ª – CIF B11514601
Postal Address: Luis de Eguilaz 11, 11540 Sanlúcar de Barrameda CADIZ
Telephone No.: 956385500
Emailrgpd@barbadillo.com

ORIGIN OF THE DATA

Barbadillo may obtain information about the user in the following manners:

  • The user provides information through the website when they contract a service and/or make a purchase, or when they request information using the contact form.
  • When their data is being collected, they will be informed of the identity of the data controller, the purpose for which their data is being collected, the recipients of said data, and the manner in which they can exercise their rights.
  • Information while browsing the website to improve their user experience. IP address, browser, operating system, etc. You can find more information on this matter in our cookies policy.

PURPOSE OF PROCESSING THE DATA

Here at Bodegas Barbadillo SL, we process your personal data exclusively for specific, explicit and legitimate purposes, and as such, your data will not be processed in any manner which is incompatible with said purposes.

  • PURPOSES

    • Browsing the website
      • Statistical analysis
    • Registering as a user on the website
      • Statistical analysis
    • Contact form
      • Management and resolution of queries.
    • Agreeing to receive business communications
      • To send relevant information, offers, …

 

LEGITIMACY FOR THE PROCESSING OF DATA

A continuación indicamos la legitimación para cada una de las finalidades de recogida de datos:

  • Purpose
    • Legitimacy
  • Browsing the website
    • Legitimate interest of the Company
  • Registering as a user on the website
    • Legitimate interest of the Company
  • Contact form
    • Legitimate interest of the Company
  • Agreeing to receive business communications
    • User consent

HOW LONG DO WE KEEP YOUR DATA FOR?

The company will keep your personal data for as long as necessary, this will depend on the information provided and the retention periods which are established in the applicable regulations.

DATA RECIPIENTS

We do not and will not sell your personal data to any third parties and we understand that this is fundamental for you.
We will only transfer your data to the rest of the companies that form part of GRUPO BARBADILLO for internal management purposes and in order to be able to offer you a wider range of products.

  • Bodega Pirineos SA, Ctra. Barbastro-Naval Km 3,5 Barbastro 22300, HUESCA CIF (Tax Identification Number): A22158281. Tel. 974311289
  • Bodegas y Viñedos Vega Real SL, Ctra. N-122 – Km. 298,6 Castrillo del Duero, 47318 Valladolid CIF (Tax Identification Number): B81637142. Tel. 983881580
  • Embassy Wines & Food Company, Luis de Eguilaz 11 1540 Sanlúcar de Barrameda CADIZ, CIF (Tax Identification Number): A11021086. Tel. 956385500

Likewise, the data will be transferred to third party service providers who supply services to the Company, which are related to the services that we supply to the Users, such as:

  • Technological service providers: Systems and IT, website development and hosting, data hosting, sending communications.
  • Marketing and advertising service providers, transport agencies.
  • Financial entities

The data may be communicated to the Administrations when this is required by the current legislation and in the Company’s compliance with their obligations.
On the other hand, we would also like to inform you that Grupo Barbadillo has a virtual infrastructure for this service, according to a model of cloud computing through AWS under the EU-US Privacy Shield Agreement. To find out more:
https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

YOUR RIGHTS

How to exercise your rights: If you would like to submit a request to exercise the rights indicated below, you may do so by sending a letter to Bodegas Barbadillo’s commercial address, or alternatively you may send an email to the address which is indicated in the header of this legal notice, in both cases you must make sure to include a photocopy of your National Identification Document or a similar identification document:
  • The right to request access to personal data: you may ask Barbadillo if the company is processing your data.
  • The right to request the rectification (if the data is incorrect) or erasure of your data.
  • The right to restrict the processing of your data, in this case your data will only be preserved by Barbadillo in order to exercise or defend claims.
  • The right to object to the processing: Barbadillo will stop processing the data in the manner that you indicate, except if it demonstrates compelling legitimate grounds or if the data is required for the exercise or defence of legal claims.
  • The right to data portability: if you wish for your data to be processed by another firm, Barbadillo will facilitate the portability of your data to the new controller.

Models, forms and more information about the aforementioned rights> Official website of the Spanish Data Protection Agency

The possibility to withdraw consent: in the case in which you have granted your consent for a specific purpose, you have to right to withdraw said consent at any time and this shall not affect the lawfulness of processing based on consent before its withdrawal.
How to file a claim before the Control Authority: If a user considers that there is a problem with the way in which Barbadillo is handling their data, they may direct their claims to Barbadillo’s Data Protection Authorities or to the corresponding  data protection authority, and the Spanish Data Protection Agency is the applicable organisation in the case of Spain.

MARKETING MESSAGES

f you give us permission to do so, we will send you marketing messages by email so that you are the first to find out about our companies’ news and products.
IF YOU NO LONGER WISH TO RECEIVE MARKETING MESSAGES FROM BARBADILLO
You can stop receiving our marketing messages at any time by:

  • Clicking on the “Cancel subscription” link which you will find in each email that you receive
  • Contacting us using the following email address: rgpd@barbadillo.com

As soon as you do so we will update your profile to make sure that you no longer receive any marketing emails.

CONFIDENTIALITY

ny personal data that is collected will be processed with absolute confidentiality. We are committed to keeping your data secret and we guarantee that we have adopted all of the necessary measures in order to avoid the alteration and unauthorised processing or access of said data in accordance with the provisions set forth in the applicable legislation.

SECURITY

Bodegas Barbadillo SL adopts strict security measures in order to protect personal data against loss, destruction, accidental damage and unauthorised or unlawful access, processing or disclosure. When we receive your data we use rigorous security functions and procedures to prevent any unauthorised access.

For said purpose, Bodegas Barbadillo SL will evaluate the risks inherent in the processing (probability of materialisation and impact) and will implement measures to mitigate said risks, therefore ensuring an appropriate level of security, including confidentiality, taking into account the state of the art and the costs of implementation in relation to the risks and the nature of the personal data to be protected.

The actions described in this section, which are considered to be appropriate in order to ensure a level of security, which is appropriate to the risk, will include the following measures:

  • The pseudonymisation and encryption of personal data, where applicable.
  • The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;
  • The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;
  • A process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing
  • The periodic evaluation of the risk of accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.
  • Means to guarantee that any person acting under the authority of Bodegas Barbadillo SL who has access to personal data does not process them except on instructions from Bodegas Barbadillo SL.

MODIFICATION OF THE PRIVACY POLICY

Bodegas Barbadillo SL reserves the right to modify their Privacy Policy, in accordance with their own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency.

Any modification of the Privacy Policy will be communicated before it enters into effect.

APPLICABLE REGULATIONS

This Privacy Policy is guaranteed by compliance with the legislation which is currently in force on personal data protection and which is applicable in the countries in which the Company performs its operations. In particular by: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).