Privacy policy | CVNE
MenúCerrar
Idioma SpanishEnglish
Facebook
Twitter
Instagram
ESPENG

Privacy Policy

PRIVACY POLICY 

  1. Identification of the Controller

The controller of the personal data collected through this website is:

Company name: COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A. (hereinafter, “THE COMPANY”)

Tax ID (CIF): A48002893

Registered address: Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava)

Telephone: +34 945 625 255

Contact email: rgpd@cvne.com

The following companies form part of the same corporate group for data processing purposes:

VIÑEDOS DEL CONTINO S.A., VINOS Y VIÑEDOS MONTENEGRO S.L.U., CVNE BILBAO S.L.U., CONSORCI DE VINS NOSTRES I ESTRANGER S.L., ROGER GOULART S.A.U., VIRGEN DEL GALIR S.L., and AGROGALIR S.L.

 

  1. Purposes of Processing and Legal Basis

The personal data provided by the User will be processed for various legitimate purposes:

  • Management of inquiries and requests:To handle, process and respond to requests, incidents or inquiries made through the contact forms.This processing is based on the User’s consent, which may be withdrawn at any time.
  • Order management, delivery and payment:To process purchases made through the Website, handle payment, organize delivery, and manage possible returns or incidents. This processing is based on the performance of a contract.
  • Sending of commercial communications: To send, including by electronic means, information about products, services, promotions, offers or events that may be of interest, provided that the User has given express consent, which may be withdrawn at any time.
  • Compliance with legal obligations:To retain information where required by tax, accounting, consumer or other applicable regulations.In such cases, the legal obligation constitutes the lawful basis for processing.
  • Campaign shipments: Exclusively for the purpose of preparing and delivering campaign orders. The legal basis is the performance of a contract and the legitimate interest of the customer who commissions the shipment. The customer providing recipient lists guarantees that the recipients have been previously informed and that there is a lawful basis for sharing their data with CVNE.

Data will be stored for as long as necessary for the stated purposes and, once fulfilled, for the legal limitation periods required to address potential liabilities.

 

  1. Categories of Personal Data

THE COMPANY will process the following categories of data:

  • Identification data: name and surname.
  • Contact data: postal address, email address and telephone number.
  • Billing data.
  • Payment data (e.g., information necessary to process payments; full card details are not stored).

No special categories of personal data (health, ideology, etc.) are processed.

 

  1. Data Recipients

Data may be disclosed to:

  • Companies within the same corporate group.
  • Courier or transport companies responsible for delivering orders.
  • Public administrations and competent authorities, when a legal obligation exists.
  • Transport companies responsible for delivering campaign shipments.

No international data transfers are foreseen unless necessary for service provision, and only where the guarantees required by data protection regulations are in place.

 

  1. Data Retention Periods

Personal data will be retained for the time necessary to fulfill the purposes described:

  • Inquiries and requests: retained until the User withdraws consent or, in any case, for a maximum of 1 year from the last communication.
  • Order management, delivery and payment: retained for the duration of the contractual relationship and, once concluded, for 6 years to comply with legal obligations in commercial and accounting matters.
  • Commercial communications: retained until the User withdraws consent or objects to processing.
  • Compliance with legal obligations: retained for the limitation periods established by tax, accounting, or consumer regulations — generally 6 years, and in certain cases (e.g. tax-related) up to 10 years.
  • Campaign shipments: retained for the time strictly necessary for preparing, sending and delivering orders, as well as for fulfilling any resulting legal obligations.

In all cases, data will be blocked once the applicable periods have expired, preventing any further processing except for the purpose of handling potential claims or liabilities.

 

  1. Rights of Data Subjects

The User may exercise the following rights at any time, easily and free of charge:

  • Access: to know what data are processed and obtain a copy.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure (right to be forgotten): to request deletion of data when no longer necessary or when consent has been withdrawn.
  • Objection: to object to the processing of their data, especially for marketing purposes.
  • Restriction: to request temporary limitation of processing under certain circumstances.
  • Portability: to receive their data in a structured format and transmit them to another controller.
  • Not to be subject to automated decisions, including profiling, where applicable.

 

To exercise these rights, the User may contact:

COMPAÑÍA VINÍCOLA DEL NORTE DE ESPAÑA S.A.,

Carretera de Logroño – Laguardia Km 4.8, 01300 – Laguardia (Álava),

or via email at rgpd@cvne.com

In case of disagreement, the User may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or via its website: https://www.aepd.es/

 

  1. Security Measures

THE COMPANY will process data at all times confidentially and will adopt the necessary technical and organizational measures to ensure integrity, availability, and to prevent unauthorized access, in accordance with the state of the art and the nature of the processed data.