At Comenge Bodegas y Viñedos, S.A. we are especially aware of the confidentiality of the personal data provided to us through the website. Through this policy, we inform users about data protection and the rights available to them.
For this reason, and in accordance with the General Data Protection Regulation of the European Union (GDPR), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and in accordance with the principle of transparency, we provide you with relevant information about the processing of personal data, so that you may know at all times how we process data, for what purpose, and the corresponding rights.
Data controller:
Comenge Bodegas y Viñedos, S.A. hereinafter, THE CONTROLLER, Tax ID: A05151428, with registered address at Camino del Castillo, s/n, 47316 Curiel de Duero Valladolid, telephone 983880363 and email admin@comenge.com.
Contact details of the data protection officer DPO:
There is no data protection officer. However, you may contact us through any of the means indicated above.
Collection of data:
THE CONTROLLER has obtained the personal data that will be processed through different channels:
• Voluntarily provided by the data subject, either through a web form, email, telephone or contract, for the request of any type of information or for the formalisation and/or acquisition of services or products.
• From publicly accessible sources and/or public records, provided that THE CONTROLLER has a legitimate interest in doing so.
Description of the purpose of processing:
THE CONTROLLER will process your data in order to respond to requests made through this website. In addition, if you give your consent to receive commercial communications, promotions and information of interest, commercial and/or advertising information may be sent to you through the usual communication channels.
However, you may revoke this consent at any time through the means provided for this purpose.
We will process your data for commercial, administrative, accounting and tax management, in accordance with current regulations and depending on the information provided and the authorisation granted.
Data retention
The personal data provided will be retained for as long as the relationship with the entity is maintained and the data subject does not request its deletion.
They will be retained in accordance with the legally established periods and depending on the purpose for which they were collected.
If the data subject has voluntarily subscribed to any type of commercial communication, newsletter, advertising, etc., the data will remain until the data subject unsubscribes from this type of communication.
Legal basis
The basis that supports the processing of personal data by THE CONTROLLER is covered by:
• The simple request by the data subject for any type of information.
• The possible subscription to receive commercial communications through express consent.
• The formalisation of a commercial relationship resulting from the acquisition of products and/or services.
• Legal basis through the performance of a contract.
Recipients
During the processing of the data subject’s data, THE CONTROLLER will not transfer the data to third parties unless there is a legal obligation to do so.
In cases where third-party services are used for administrative, tax, accounting and/or commercial processing, the required data processing agreement will be duly formalised in order to guarantee the security and confidentiality of the data subject’s data against third parties.
Rights
In relation to their personal data, the data subject may freely and free of charge exercise the following rights:
• Right of access to their personal data.
• Right to rectify their personal data when it is incomplete or inaccurate.
• Right to delete their personal data when it is no longer necessary for the purposes for which it was collected.
• Right to restrict the processing of all or part of their data.
• Right to object to the processing.
• Right to data portability.
• Right to withdraw previously given consent.
If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority.
Supervisory authority
If you require more information and/or help, apart from the information that we can and wish to provide, regarding Data Protection, you should know that the supervisory authority in Spain responsible for ensuring compliance with data protection regulations, and for guaranteeing and protecting the fundamental right to personal data protection, is:
Spanish Data Protection Agency AEPD
C/ Jorge Juan Nº6
28001 – Madrid
901 100 099 – 912 663 517
You may also contact them through this form.
The AEPD informs and helps citizens to exercise their rights, and also helps companies comply with the obligations established by law.
As the owner of their own data, the AEPD protects the exercise of the rights of access, rectification, cancellation, restriction, portability and objection when they have not been properly addressed. It also guarantees the right to data protection against actions that may be contrary to the law.
Last updated 21 May 2018
