Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter, RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (hereinafter, LOPDGDD), Vinos de la Luz guarantees the protection and confidentiality of personal data of any kind provided by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data. Translated with www.DeepL.com/Translator (free version)

The data provided will be treated in the terms established in the RGPD, in that sense Vinos de la Luz has adopted the levels of protection that are legally required, and has installed all the technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access by third parties, exposed below. However, the user should be aware that security measures on the Internet are not impregnable.

Data controller
Name: Vinos de la Luz
Tax ID number: B47301205
Address: CARRETERA DE MELIDA KM 3.5
Phone: 983 878 007
Email: info@vinosdelaluz.com

Purpose of processing
All data provided by our customers and/or visitors to the Vinos de la Luz website or to its staff will be included in a personal data processing activity log, created and maintained under the responsibility of Vinos de la Luz, which is essential for providing the services requested by users or for resolving any queries or questions raised by our visitors. It is our policy not to profile users of our services.

Legitimacy of treatment

1. Contractual relationship: This is the one that applies when you purchase one of our products or contract one of our services.
2. Legitimate interest: To attend to the queries and claims that you submit to us and to manage the collection of the amounts owed.
3. Your consent: If you are a user of our website, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to your query or request for information.

Recipients
We do not disclose your personal data to anyone, except for those public or private entities to which we are obliged to provide your personal data in order to comply with the law. For example, the Tax Law requires that certain information on economic transactions exceeding a certain amount must be provided to the Tax Agency.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.

Communication
We will not transfer your personal data internationally for any of the purposes indicated.
(INTERNAL NOTE: THIS PARAGRAPH MUST BE CHANGED BY THE DATA CONTROLLER IF INTERNATIONAL TRANSFERS ACTUALLY OCCUR.) TE RECOMENDAMOS SOLICITAR ASESORAMIENTO SI NO SABES CÓMO REFLEJARLO CORRECTAMENTE PARA CUMPLIR CON LA NORMATIVA)

Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.

In this sense, Vinos de la Luz will keep the personal data once its relationship with you has ended, duly blocked, during the period of prescription of the actions that could derive from the relationship maintained with the interested party.

Once blocked, your data will be inaccessible to Vinos de la Luz, and will not be processed except to make them available to the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

Security
We make every reasonable effort to maintain the confidentiality of personal information processed in our systems. We maintain strict security levels to protect the personal data we process against accidental loss and unauthorized access, processing, or disclosure, taking into account the state of technology, the nature of the data, and the risks to which it is exposed. However, we cannot be held responsible for your use of the data (including username and password) that you use on our website. Our staff follows strict privacy rules and, in the event that we hire third parties to provide support services, we require them to abide by the same rules and allow us to audit them to verify their compliance.

Your rights
We inform you that you may exercise the following rights:

1. Right of access to your personal data, to know which are being processed and the processing operations carried out with them;
2. Right to rectify any inaccurate personal data;
3. Right to erasure of your personal data, where this is possible (e.g., by law);
4. The right to limit the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain them for the exercise or defense of claims.
5. Right to object to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. Vinos de la Luz will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
6. Right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
7. Right to revoke consent given to Vinos de la Luz

To exercise your rights, you can do so free of charge and at any time by contacting us at the address CARRETERA DE MELIDA KM 3,5, attaching a copy of your ID.

Protection of rights
If you believe that your rights have been disregarded by our organisation, you may lodge a complaint with the Spanish Data Protection Agency through any of the following means:

• Electronic Headquarters: https://www.aepd.es
• Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid, Spain.
• Telephone: 901.100.099 y 912.663.517

Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required.

Updates
Vinos de la Luz reserves the right to modify this policy to adapt it to new legislation or case law that may affect its compliance.