PRIVACY POLICY

Identity of the responsible for processing the data

Responsible: BODEGAS CEPA 21 S.A., hereinafter “BODEGAS CEPA 21” or “the company”
Registered office: NACIONAL 122, KM. 297, 47318 – CASTRILLO DE DUERO, VALLADOLID. SPAIN.
CIF (Tax ID code): A47492384
Registry: Registry (Mercantile / Public): Valladolid al Volume 996, Book 17, Sheet VA-13501, Registration 1.
Web site: www.cepa21.com
Contact email: bodega@cepa21.com
Data Protection Officer: ABRIL ABOGADOS, S.L.P, C/Amador de los Ríos 1, 1º. 28010 Madrid. Spain. Contact email: bodega@cepa21.com

In conformity with the Personal Data Protection legislation and with any other applicable relevant and current legislation, the user is hereby informed that the personal data they provide shall be processed by the responsible for processing the data (“the winery” or “the company”), solely for the purposes described in the corresponding form.

The user is also informed of the fact that not providing the data which figures on the forms on the website makes it impossible to fulfil the purpose for which the data is collected.

Sending of commercial information by any means, including electronic means

In the event that you have accepted the sending of information about the Winery’ activities, have hired a service or have made a consultation or a purchase using any of the forms on the website of BODEGAS CEPA 21, and you have not opposed said processing, we hereby inform you that the personal data provided will be processed by the responsible to keep you informed of their activities. The company have recourse to their legitimate interest. In the event that it be considered that a legal relationship exists with you, and/or to your consent when you tick the box to accept the present Privacy Policy, whenever a legal relationship does not exist with you.

Moreover, we hereby inform you that the responsible will retain your data for as long as either of the two company maintains the legal relationship with you and you do not oppose the receiving of information, or for as long as you do not withdraw your consent, without prejudice to its retention for as long as the applicable legal obligations endure.
We also inform you that, if the legitimising basis is legitimate interest, you can oppose the processing of the data for the aforementioned purposes, at any time, by sending an email to bodega@cepa21.com.

Contact
If you have filled in the contact form on either of the website of the winery, we inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to resolve your consultation, the responsible having recourse to your consent upon filling in and sending the form and upon ticking the box to accept the present Privacy Policy.

We also inform you that your personal data will be processed for the time strictly necessary to attend to your request, as long as you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the legal obligations applicable to either of the winery.

Newsletter

If you have filled in Newsletter form on either of the website of the winery, we inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to manage the sending of information related to the Winery’ activity, the company having recourse to your consent upon filling in and sending the form and upon ticking the box to accept the present Privacy Policy. They will also be treated to know your preferences, and to improve and make our communications and commercial proposals more appropriate and personalized. For example, thanks to the analysis of your profile through your purchase history, visit to our website or opening and access to our newsletter content, we can make suggestions and make personalized proposals for you, or help improve your shopping experience.

We also inform you that your personal data will be processed for the time strictly necessary to fulfil the purpose for which the data was collected, as long as you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the applicable legal obligations endure.

Purchases

If you have filled in the purchase form on the website of either of the two of the winery, we inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to inform you and provide you with the sales and purchases services for the company’ products, the company having recourse to your consent upon filling in and sending the purchase form and upon ticking the box to accept the Privacy Policy and the general contracting conditions, as well as in the execution of the sales contract or the pre-contractual relationship.

Moreover, we inform you that you must be over the minimum legal age required to buy alcohol to be able to purchase alcoholic beverages on our websites. By activating the box on the purchase form provided for this purpose, you declare that you are older than the minimum age required.

We also inform you that your personal data will be processed as long as the legal relationship with you continues and you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the applicable legal obligations endure.

Jobs

If you have filled in the employment form on the websites of the company, we hereby inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to manage your application and thus include you in current and future staff selection processes, the winery having recourse to your consent upon filling in and sending the corresponding form and upon ticking the box to accept the present Privacy Policy.

We also inform you that your personal data will be processed for the time strictly necessary to manage the curricula vitae received, and will be retained for the time period of 24 months, as long as you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the applicable legal obligations endure.

Registration

If you have filled in registration (My Account) form on the website of either of the two winery, we inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to register you as a client, the company having recourse to your consent upon filling in and sending the form and upon ticking the box to accept the present Privacy Policy.
We also inform you that your personal data will be processed as long as the legal relationship with you continues and you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the applicable legal obligations endure.

Bookings (enotourism)

If you have filled in the booking form on the website of either of the two winery, we inform you that, in accordance with the provisions of the data protection legislation, the personal data provided will be processed to manage your experience on the experience selected, the company having recourse to your consent upon filling in and sending the form and upon ticking the box to accept the present Privacy Policy.

We also inform you that your personal data will be processed for the time strictly necessary to manage your booking, and as long as you do not withdraw your consent or exercise your rights to opposition or deletion, and without prejudice to its retention so long as the applicable legal obligations endure.

Regarding all processing

Communication of data to third parties

Data will not be ceded to third parties except when legally obliged. However, for correct service provision, it is possible that the Winery may have to communicate certain personal data to third parties which provide services to them, exclusively for the proper functioning of the company. In any case, these communications of data which may take place shall be carried out as a processing assignment by said third parties, for service provision to either of the two Winery, which means access by the third party to the information of a personal nature.

In this sense, BODEGAS CEPA 21 shall have the corresponding processing assignment contracts with the third parties who process or access the personal data of either of them, in compliance with the provisions of the Data Protection regulations.

Exercising your rights

We also inform you that you have the right to access, rectification, deletion, opposition, restriction of the processing and portability concerning your personal data, as well as the option of withdrawing your consent. You can exercise these rights by sending an email bodega@cepa21.com. You should bear in mind that you can withdraw your consent at any time.
The Winery shall respond on behalf of the winery within the time limit of one month from receipt of the request. Nevertheless, this time limit may be extended to two months to attend to the complexity of the request, as well as to the number of requesters. Said extension shall be informed of within the time of one month from receipt of the request.

Finally, especially when you have not obtained satisfaction in the exercising of your rights, you have the right to present a claim before the competent data protection authority:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

In the case of Spain, it is the Spanish Data Protection Agency (www.aepd.es).

Maintenance of the data

The interested party commits to maintaining the data provided to either of the two Winery duly updated. Where the data supplied by the interested party should be false, incomplete, out of date, or inaccurate, the said interested party shall be liable for any damages, whether direct or indirect, tangible or intangible, which may be occasioned to a third party or to the Winery.

The Winery reserves the right to terminate the services provided to the interested party, as well as any relationship, without prejudice to any other actions that may arise in law.

Use of cookies
Click here for more information on the use of cookies.

Security of the data

The Winery have implemented suitable technical and organisational measures in their work centres, premises, systems, communication infrastructures, etc. to guarantee a security level appropriate to the risk.

They have also adopted the logistical, physical, organisational, contractual, etc. measures which prevent unauthorised third-party access to the data and the destruction, modification, reproduction, disclosure, transmission and reuse of the same.

Despite this, whenever you provide personal information on the internet, there is the risk that third parties, the control of whom is beyond our ability, may intercept this information and use it. Even though at BODEGAS CEPA 21 we strive to protect personal information and your privacy, we cannot guarantee the security of the information which you reveal on the web and under your own responsibility.

Validity and modification of the privacy policy

The Privacy Policy established by the Winery is in force as of its publication date on the corresponding website; the user may file and/or reproduce it.

The present Policy may be amended by reason of changes to the requirements laid down in the legislation in force at any given time, by judicial decisions and changes in the caselaw, as well as by changes to the activities and business strategy of the company. Publication and access by the users will be carried out on this same website, by which it is to be understood that the relationships established with the users prior to the change shall be governed by the rules in place at the time at which the user accessed the website to establish the relationship.