Privacy and Data Protection Policy

En Bodegas VILANO is aware of how important it is for you the correct use and processing of your personal data. The aim of the present Privacy Policy is to inform about which information is going to be gathered and for what treatment purpose, as well as to transmit our efforts to guarantee an appropriate protection, under the proper safeguards and in pursuance of the legislation in force.

The personal data provided via the following website located at the URL https://www.vilano.com (hereinafter, the “Website”) are going to be treated and processed as described in the following sections:

Who is actually the responsible controller of the processing?

In accordance to the Law No. 34/2002 of July 11, on Information Society Services and Electronic Commerce (hereinafter, LSSI) and in accordance to the General Data Protection Regulation (EU) 2016/679 (hereinafter, GRPD) and the Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPD Ggdd), we hereby inform you that the personal data facilitated in completing and sending the published web form will be included in the database that forms the records of processing activities of BODEGAS VILANO, S.COOP with V.A.T.: F09005836 and social domicile in Avenida Tinta del país, 2, Pedrosa de Duero, 09314 , Burgos

Which kind of user data will be required and treated?

Bodegas VILANO will process the following categories of personal data of the User:

  • Identifying data: name and surnames.
  • Personal or professional contact data: postal address, e-mail address, phone number.
  • Other data: every additional information provided by the data subjects to fostering trade relations and mutual interests.

Under which purpose and legal basis do we process your data?

  • Management of the contact requests and information provided via the e-mail address or web form. Legitimacy: Data subjects consent given to the processing and interests pursued (Art. 6.1 a) and f) GDPR).
  • Management of the contractual relationship established among the User and Bodegas VILANO and perform the binding agreement between the Parties. Legitimacy: Performance of a contract (Art. 6.1 b) GDPR).
  • To comply Bodegas VILANO with mandatory obligations stated by law. Legitimacy: Legal compliance (Art. 6.1 c) GDPR).
  • Management the existent commercial relationship between the User, as professional contact and representative of a legal entity, and Bodegas VILANO, including the sending of commercial information, relevant news, events, expos and fairs and further information concerning similar services to the signed up. Legitimacy: Legitimate interests pursued (Art. 6.1 f) GDPR).
  • Management of the Newsletter, corporate magazine and other information bulletins for subscribers of these. Legitimacy: Data subjects consent given to the processing and interests pursued (Art. 6.1 a) GDPR).
  • Processing of the employment applications and the recruitment and hiring processes. Treatment of the CV’s, academic and professional information and other relevant documentation. Legitimacy: Legitimate interests pursued by the Parties in establishing an initial professional contact (Art. 6.1 f) GDPR).

To whom do we disclose personal data?

Bodegas VILANO will only transfer personal data to:

  • Those thirds, public bodies, and institutions of the General State Administration, as well as autonomous and local administrations, including judicial courts and tribunals, being legally compelled to disclose the information required.
  • Las sociedades colaboradoras y/o partners con el fin de que puedan gestionar la relación contractual con Usted.
  • Partner companies of Bodegas VILANO in order to properly manage and perform the contractual relationship with you.

 

To service suppliers and providers contractually tied to Bodegas VILANO, in order to treat the data as Processors for the sole purpose of the processing described, in accordance to the instructions given by Bodegas VILANO and with the necessary guarantees and safeguards.

How much time will be the data retained and treated?

The personal data provided to comply with the obligations arising out of the commercial relationship between the User and Bodegas VILANO shall be retained for the same term of the binding agreement; and after the end of the commercial and contractual relationship, the data will still be maintained for the time limit stated for prosecution that might arise from the relations with the User.

Nevertheless, if you as data subject have facilitated the information in order to commercial prospecting purposes based on legitimate mutual interests pursued, the data shall be necessary stored till the moment you decide to revoke the consent given.

Which security measures are implemented to protect your personal data?

E The data processing will be adapted to technical and organizational measures required to prevent and avoid loss of information, misuse, alteration and unauthorized use of the received data, bearing in mind the state of the technology, the nature of the information and the results of the risk analysis performed.

How can I exercise my data subject’s rights?

To revoke all consents given, as well as exercise the rights to access, rectification, erasure, restriction of processing, portability, object and not to be subject to a decision based on automated processing, including profiling, you may always communicate in writing to the following address: Avenida Tinta del país, 2, 09314, Pedrosa de Duero, Burgos (Spain) or via mail at comunicacion@vilano.com

The request shall be submitted including name and surnames of the data subject; copy of the identity card, passport or any other valid identification document of the person concerned and, where applicable, his legal authorized representative, providing power of attorney; address for notification purposes and specification of the subject of the request.

If the person concerned considers that his rights have gone unheeded in accordance to the legislation in force, the data subject may submit the related complaint to the Spanish Data Protection Agency, as supervisory authority.