Privacy Policy

Bodega la Cueva del Castillo

1. Processing of personal data

In compliance with applicable data protection legislation, users are informed that their data will be processed by BODEGA LA CUEVA DEL CASTILLO S.L.U. (hereinafter, “the Winery”), as Data Controller, for the purpose of managing commercial relationships, access to services and any other interaction arising from the use of this website. The main legal basis for processing this data is the performance of contractual obligations and/or the request for information or services made by the user.

1.1 Processing for commercial purposes

In addition, the user’s personal data may be used to send commercial information about products and services currently offered, or offered in the future, by the Winery. This includes advertising and promotional communications sent by post, e-mail or any other means. The legal basis for this additional processing is legitimate interest or, where applicable, the user’s express consent.

The Winery undertakes to process personal data with the utmost confidentiality, adopting appropriate security measures in line with the risk analysis carried out, in order to prevent unauthorised access, alteration, loss or improper disclosure.

1.2 Data disclosures

Personal data may be disclosed to third parties solely where necessary for the correct provision of a service or by legal obligation. For example, to courier or transport companies in order to send documentation, orders or requested products.

Should there be any disclosure of data to third parties other than those indicated, the Winery will provide the user with appropriate information and obtain their consent where required by legislation in force.

2. User rights

The data collected and processed will be kept for a limited period, being that necessary to comply with legal obligations or until the user requests its erasure, in accordance with legislation in force. As a data subject, the user may exercise the following rights:

Right of access: to request confirmation as to whether the Winery is processing their personal data and, if so, which specific data is being processed.
Right to rectification: to request the correction of their personal data where it is inaccurate or incomplete.
Right to erasure: to request the deletion of their data where, among other reasons, it is no longer necessary for the purposes for which it was collected.
Right to object: to object to the processing of their personal data on grounds relating to their particular situation, or to the sending of commercial communications.
Right to restriction of processing: to request that the Winery temporarily restrict the use of their personal data in specific cases.
Right to data portability: to receive their personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.

To exercise these rights, the user may send their request, clearly stating the right they wish to exercise, to the following address:

BODEGA LA CUEVA DEL CASTILLO S.L.U.
Costanilla del Hospital Kalea, 7, 01330 Labastida (Álava), Spain
E-mail: ruben@rubenprovedo.com

3. Cookies

The Winery’s website uses cookies and activity files that make it possible to know the activity carried out by users while browsing. The data that may be stored in each cookie includes, among others:

The user’s preferred language.
The date and time of the last visit.
Browsing parameters and content viewed.
Security elements for access to restricted areas.

The Winery analyses its users’ preferences (demographic characteristics, traffic patterns and other aggregate information) in order to improve its website and the services it offers. Tools such as Google Analytics are used for this purpose, which may store cookies on the user’s device to obtain data for purely statistical purposes. This information (including the IP address) is transferred to and stored on Google’s servers in the United States, and may be provided to third parties for legal reasons or where such third parties process the information on Google’s behalf.

Users may configure their browser to refuse the installation of cookies on their device. For further information, please see the Cookie Policy.

4. Full information on the processing of personal data

4.1 Data Controller

The Data Controller is:

Company name: BODEGA LA CUEVA DEL CASTILLO S.L.U.
Tax ID (CIF): B22910731
Registered office: Costanilla del Hospital Kalea, 7, 01330 Labastida (Álava), Spain
E-mail: ruben@rubenprovedo.com
Telephone: +34 659 443 880
Registration details: Registered at the Commercial Registry of Álava, Electronic Folio IRUS: 1000460005747, entry/annotation 2, sheet VI-22506.

4.2 Purpose of the processing

The Winery processes the information provided by data subjects for the following purposes:

Management and administration of the contractual relationship with customers, suppliers and/or employees.
Providing commercial information about the Winery’s products and services that may be of interest to the user.
Responding to enquiries sent through contact forms or by e-mail.
Assessing applications where a CV is received from people interested in joining the Winery’s staff.
Subscription to newsletters or blogs, provided the user has authorised it.

The Winery may carry out video surveillance measures on its premises (where applicable), for the purpose of ensuring the safety of people and property, always in accordance with legislation in force on data protection and fundamental rights.

4.3 Data retention period

The personal data provided will be kept:

For as long as the contractual and/or commercial relationship is maintained.
Until the user requests the erasure of their data.
For the period necessary to comply with applicable legal obligations.

4.4 Legal basis for the processing

The legal basis for processing personal data is:

Performance of a contract and/or compliance with the obligations arising from a commercial or employment relationship.
Consent of the data subject, for example where the user submits contact forms, subscribes to newsletters or voluntarily provides their CV.
Legitimate interest, for sending commercial communications (where applicable) or for video surveillance of the premises for security purposes.
Legal obligations, in compliance with applicable legislation.

4.5 Recipients of the data

By legal obligation: public bodies and competent authorities (law enforcement agencies, tax authorities, etc.).
For contractual reasons: banks, transport or courier service providers, hosting and technology services necessary for the provision of the service.
Social networks: where the user gives their consent, images or personal data may be published on the Winery’s corporate profiles (Facebook, Instagram, LinkedIn, YouTube or others), always in accordance with applicable legislation.

5. Updates and changes to the Privacy Policy

This Privacy Policy may be updated at any time in line with legislative changes and the evolution of the Winery’s data protection practices. Should any significant amendments be made, users will be notified through the website or by electronic communication.

We recommend reviewing this Privacy Policy periodically in order to stay up to date on how and for what purposes we process your personal data.

If you have any questions or need further information, please contact us at ruben@rubenprovedo.com.