PRIVACY POLICY
- Identification of the Controller
This website is owned by BODEGAS LA VAL, S.L.U. (hereinafter, “La Val”), whose identification details are as follows:
Registered in the Commercial Registry of Álava, Volume 1692, Book 0, Page 204, Sheet VI-19787, Entry 1
Tax ID (CIF): B-01577725
Registered address: Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava)
Telephone: +34 947 112 783
Email: rgpd@cvne.com
- Purposes of Processing and Legal Basis
The personal data provided by the User will be processed for several legitimate purposes:
- Management of inquiries and requests: To handle, process and respond to requests, incidents, or inquiries made through the contact forms. This processing is based on the User’s consent, which may be withdrawn at any time.
- Order management, delivery and payment:To process purchases made through the Website, handle payment, organize delivery and manage possible returns or incidents.This processing is based on the performance of a contract.
- Sending of commercial communications: To send, including by electronic means, information about products, services, promotions, offers or events that may be of interest, provided that the User has given express consent, which may be withdrawn at any time.
- Compliance with legal obligations: To retain information when required by tax, accounting, consumer, or other applicable regulations. The legal obligation constitutes the basis for processing in this case.
- Campaign shipments:Exclusively for the purpose of preparing and delivering campaign orders.The legal basis is the performance of a contract and the legitimate interest of the customer who orders the shipment. The customer providing recipient lists guarantees that the recipients have been previously informed and that there is a lawful basis for sharing their data with BODEGAS LA VAL, S.L.U.
Data will be kept as long as necessary for the stated purposes and, once fulfilled, during the legal limitation periods required to address potential liabilities.
- Categories of Personal Data
The COMPANY will process the following categories of data:
- Identification data: name and surname.
- Contact data: postal address, email address, and telephone number.
- Billing data.
- Payment data (e.g., information necessary to process payments; full card details are not stored).
No special categories of personal data (health, ideology, etc.) are processed.
- Data Recipients
Data may be disclosed to:
- Companies within the corporate group.
- Courier or transport companies responsible for delivering orders.
- Public administrations and competent authorities where there is a legal obligation.
- Transport companies responsible for campaign deliveries.
No international data transfers are foreseen unless they are necessary for service provision and the required safeguards under data protection law are in place.
- Retention Periods
Personal data will be retained for the time necessary to fulfill the purposes stated:
- Inquiries and requests: data will be retained until the User withdraws consent or, in any case, for a maximum of 1 year from the last communication.
- Order management, delivery and payment: data will be retained for the duration of the contractual relationship and, once ended, for 6 years to comply with legal obligations in commercial and accounting matters.
- Commercial communications: data will be retained until the User withdraws consent or objects to processing.
- Compliance with legal obligations: data will be retained for the limitation periods set by tax, accounting, or consumer regulations — generally 6 years, and in certain cases (e.g., tax-related) up to 10 years.
- Campaign shipments: data will be retained for the time strictly necessary for preparing, sending, and delivering orders, as well as for complying with resulting legal obligations.
- In all cases, data will be blocked once the applicable periods have expired, and processing will be restricted solely to address possible liabilities or claims.
- Rights of Data Subjects
The User may exercise the following rights at any time, easily and free of charge:
- Access: to know what data are being processed and obtain a copy.
- Rectification: to correct inaccurate or incomplete data.
- Erasure (right to be forgotten): to request deletion of data when no longer necessary or when consent has been withdrawn.
- Objection: to object to processing, particularly for commercial communications.
- Restriction: to request temporary limitation of processing in certain circumstances.
- Portability: to receive data in a structured format and transfer them to another controller.
Not to be subject to automated decisions, including profiling, if applicable.
To exercise these rights, the User may contact:
COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A.,
Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava),
or via email at rgpd@cvne.com
If dissatisfied, the User may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or through its website: https://www.aepd.es/
- Security Measures
The COMPANY will process data at all times confidentially and will adopt the necessary technical and organizational measures to ensure integrity, availability, and to prevent unauthorized access, in accordance with the state of the art and the nature of the processed data.
