Privacy Policy
1. User Information
Who is responsible for the processing of your personal data?
Bodegues Vidal Serra S.C is responsible for the processing of the user’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).
What type of data do we request and process?
Depending on the form or method of obtaining your data, we always request the minimum necessary to fulfill the purposes detailed in each case.
Why do we process your personal data, and for what purpose?
Depending on the form in which we have obtained your personal data, we will process them confidentially to achieve the following purposes:
- In the Contact form:
- To respond to queries or any type of request made by the user through any of the contact methods available on the responsible party’s website.
(for the legitimate interest of the responsible party, art. 6.1.f GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means. These communications will be made by the responsible party and will be related to their products and services, or those of their collaborators or suppliers.
(with the consent of the data subject, 6.1.a GDPR) - To conduct statistical analyses and market studies.
(for the legitimate interest of the responsible party, art. 6.1.f GDPR)
- To respond to queries or any type of request made by the user through any of the contact methods available on the responsible party’s website.
- In the Newsletter form:
- To send newsletters, news, offers, and online promotions.
(with the consent of the data subject, 6.1.a GDPR)
- To send newsletters, news, offers, and online promotions.
- In the Request a Quote form:
- To send commercial quotes on products and services.
(for the execution of a contract or pre-contract, 6.1.b GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means, related to products and services of the responsible party or its collaborators.
(with the consent of the data subject, 6.1.a GDPR)
- To send commercial quotes on products and services.
- In the Curriculum form:
- To involve the data subject in the personnel selection processes and analyze the applicant’s profile with the aim of selecting a candidate for the responsible party’s vacant position.
(with the consent of the data subject, 6.1.a GDPR)
- To involve the data subject in the personnel selection processes and analyze the applicant’s profile with the aim of selecting a candidate for the responsible party’s vacant position.
- In the Testimonial form:
- To moderate and publish the user’s experiences, opinions, and suggestions about a product or service on the website.
(with the consent of the data subject, 6.1.a GDPR)
- To moderate and publish the user’s experiences, opinions, and suggestions about a product or service on the website.
- In the Comments form:
- To moderate and publish opinions on a publication on the website.
(with the consent of the data subject, 6.1.a GDPR)
- To moderate and publish opinions on a publication on the website.
- In the Ethics or Whistleblower Channel form:
- To properly manage the ethical channel, processing the reported irregularities and deciding whether to initiate an investigation to detect possible crimes and prevent any type of liability.
(for the fulfillment of a legal obligation, 6.1.c GDPR)
- To properly manage the ethical channel, processing the reported irregularities and deciding whether to initiate an investigation to detect possible crimes and prevent any type of liability.
- In the User Registration form:
- To manage the user’s account to provide them with personalized access to the website and the interactive services it offers.
(with the consent of the data subject, 6.1.a GDPR)
- To manage the user’s account to provide them with personalized access to the website and the interactive services it offers.
- In the E-commerce form:
- To manage your online purchase or order, process the payment, and proceed with its delivery or activation based on the general terms and conditions.
(for the execution of a contract or pre-contract, 6.1.b GDPR) - To manage, maintain, improve, or develop the services provided.
(for the execution of a contract or pre-contract, 6.1.b GDPR) - To conduct satisfaction and quality surveys.
(for the legitimate interest of the responsible party, art. 6.1.f GDPR)
- To manage your online purchase or order, process the payment, and proceed with its delivery or activation based on the general terms and conditions.
- In the Reservations form:
- To formalize reservations at the responsible party’s establishment.
(for the execution of a contract or pre-contract, 6.1.b GDPR) - To send commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means to clients, allowing commercial communications related to products or services similar to those initially contracted with the client.
(for the legitimate interest of the responsible party, art. 6.1.f GDPR)
- To formalize reservations at the responsible party’s establishment.
How long will we keep your personal data?
Your data will be retained no longer than necessary to maintain the purpose of the processing or as long as legal prescriptions dictate their retention, and when it is no longer necessary, they will be deleted with appropriate security measures to ensure the anonymization of the data or their total destruction.
To whom do we provide your personal data?
No communication of personal data to third parties is foreseen unless it is necessary for the development and execution of the processing purposes, to our service providers related to communications, with whom the responsible party has signed confidentiality and data processing agreements as required by the current privacy regulations.
Do we carry out international transfers?
In accordance with the provisions of Article 44 of the GDPR, authorization for international data transfer to a country that has not been declared as a country with an adequate level of protection can only be granted if sufficient guarantees are obtained. Thus, it may be granted if the data controller provides a written contract between the data exporter and the importer, which includes the necessary guarantees for the protection of the data subjects and ensures the exercise of their rights.
What are your rights?
The rights that assist the user are:
- Right to withdraw consent at any time.
- Right of access, rectification, portability, deletion of your data, restriction or opposition to its processing.
- Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the current regulations.
Contact information to exercise your rights:
Bodegues Vidal Serra S.C. C/ Ca Ses Monjes, 15 – 07142 Santa Eugénia (Illes Balears). E-mail: info@bodeguesvidalserra.com
2. Mandatory or Optional Nature of the Information Provided by the User
Users, by checking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or presented in download forms, expressly, freely, and unequivocally accept that their data is necessary to meet their request, by the provider, with the inclusion of data in the remaining fields being voluntary. The user guarantees that the personal data provided to the responsible party is truthful and is responsible for communicating any changes to them.
3. Security Measures
In accordance with the provisions of the current regulations on personal data protection, the responsible party complies with all the provisions of the GDPR and LOPDGDD for the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly, and transparently in relation to the data subject and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
4. Validity
This privacy policy is effective as of 07/10/2024. The responsible party reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that may apply, or for other technical, operational, commercial, corporate reasons, etc. If, as a result of the changes, the rights of the users are affected, the responsible party commits to informing about the reasons.
DATA PROTECTION FOR THE CONTACT FORM:
In accordance with the provisions of Regulation (EU) 2016/679, of April 27, 2016 (GDPR) and Organic Law 3/2018, of December 5 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we provide you with the following information regarding data processing: Controller: Bodegues Vidal Serra S.C, J16671463, C/ Ca Ses Monjes, 15 – 07142 Santa Eugènia (Illes Balears), info@bodeguesvidalserra.com. Purposes of the processing: maintain a commercial relationship and send communications about products or services. Legal Basis: legal obligation of the Controller and the data subject’s consent when applicable. Type and retention: the minimum data necessary for the purpose are processed and retained in compliance with the legal prescription periods. Recipients of data transfers: those necessary for the purpose of processing and for compliance with legal obligations. Rights you have: access, rectification, portability, erasure, restriction, and objection.
Data Subject Rights Request Form
If you wish, you can download our data subject rights request form from the following link. Fill out the form and send it to us at the following email address.
More information about the processing: info@bodeguesvidalserra.com