1.- DATA CONTROLLER INFORMATION

Entity name: JAVIER SANZ VITICULTOR, S.L. (hereinafter, BODEGA JAVIER SANZ).

Address: C/ San Judas, 2, 47491 – La Seca (Valladolid), Spain.

Telephone: 983816669

2.- DATA PROCESSING COLLECTED THROUGH THE WEBSITE

The data that BODEGA JAVIER SANZ may collect through the use and browsing of the website, through our forms, via email, or as a result of the contractual relationship that binds you to BODEGA JAVIER SANZ, are personal data. When completing each of the forms available on our website, there will be a series of mandatory fields, which are marked with the symbol *. If these fields are not completed, the purposes described for each form cannot be fulfilled. On some occasions, we inform you that simply by using and browsing our Website, BODEGA JAVIER SANZ will store data relating to:

* IP address
* Browser version
* Operating system
* Duration of the visit or browsing session on the Website

Such information may be stored through Google Analytics, and therefore we refer you to Google’s Privacy Policy, as Google collects and processes such information.

BODEGA JAVIER SANZ reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. In the event that the user has registered on the website and accesses their account or profile, upon accessing it they will be informed if there have been substantial changes regarding the processing of their personal data.

1. Contact forms.

a. Purpose. The purpose of this form is to respond to your request for information submitted through the contact forms.

b. Legal basis. The data subject’s consent.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

2. Information provided through the email addresses made available on the website.

a. Purpose. To respond to your request for information.

b. Legal basis. The consent granted by you at the moment you send the request via email.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

3. Unsolicited job applications.

a. Purpose. To include you in recruitment processes carried out by BODEGA JAVIER SANZ.

b. Legal basis. Performance of a contract to which the data subject is a party, or the application of pre-contractual measures at the request of the data subject.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

4. User registration form.

a. Purpose.

* To manage your user registration on our website

* To manage purchases made through our website

* To provide you with information regarding the processing and status of your purchases.

* Historical record of purchases made through our website

* Likewise, we inform you that you may receive communications via email and/or phone in order to inform you of possible incidents, errors, problems and/or the status of your orders.

* Your personal data may be provided to third parties in order to carry out certain procedures and/or services requested by the user:

* Payment platform

* Possible intermediaries

* Website maintenance company

* International transfers

b. Legal basis. Performance of a contract and the data subject’s consent.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

3.- OTHER DATA PROCESSING

1. For professional contacts only.

a. Purpose. At BODEGA JAVIER SANZ, we process your personal data for the purpose of maintaining the professional relationship between us.

b. Legal basis. The legitimate interest pursued by the data controller.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

2. For contacts through social media only

a. Purpose. At BODEGA JAVIER SANZ, we process your personal data for the following purposes:

* To respond to inquiries, requests, or petitions.
* To manage the requested service, respond to the request, or process a petition.
* To establish a user-controller relationship and create a community of followers.

b. Legal basis. The legitimate interest of the data controller, as well as acceptance of a contractual relationship within the environment of the corresponding social network.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations. However, we recommend reviewing the privacy policy of the social networks we mainly use, since these networks, being American, may transfer data to the United States.

3. For attendees of our events and activities only.

a. Purpose. At BODEGA JAVIER SANZ we process your data for the purpose of managing and processing your registration request for the corresponding activity, as well as sending you information through different means, including electronic means, related to our events and activities, provided that you have granted your consent.

b. Legal basis. Performance of a service contract and the data subject’s consent.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

4. Exclusive processing of images from video surveillance cameras.

a. Purpose. Our facilities are equipped with permanent video surveillance systems for security reasons.

b. Legal basis. The legitimate interest pursued as a legal obligation by BODEGA JAVIER SANZ, for the security of its facilities, provided that the interest or fundamental rights and freedoms of the data subject do not prevail. Likewise, the public interest is based on offering sufficient guarantees and protection for the security of assets, facilities, and persons whose personal data are processed through the video surveillance system operated by and on behalf of BODEGA JAVIER SANZ.

c. Recipients. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

5. For customers only.

a. Purpose.

– Invoices, delivery notes, quotations, and contracts. At BODEGA JAVIER SANZ, we process your personal data for the purpose of managing the services arising from the contractual relationship, as well as the commitments derived from the contract.

* Advertising. At BODEGA JAVIER SANZ, we process your data for the purpose of offering you our products and services/courses, activities and workshops/our activity.

b. Legal basis.

– Invoices, delivery notes, quotations, and contracts. The legal basis for processing your data is the performance of a service contract and compliance with the following applicable legal obligations:

– The data retention periods once the contractual relationship has ended are based on compliance with the provisions of the Spanish Commercial Code.

– The communication of your data when requested by the Tax Inspection is covered by Law 58/2003, of 17 December, General Tax Law.

– Advertising The legal basis for processing your data is the data subject’s consent.

c. Recipients.

– Invoices, delivery notes, quotations, and contracts. Data will not be disclosed to third parties, except when legally permitted in accordance with current data protection regulations.

* In cases where necessary, customer data may be disclosed to the following bodies in compliance with a legal obligation:

– The Spanish Tax Agency may receive the necessary data to comply with the legal obligation.

– The corresponding banking entities, in order to remain up to date with payments.

– If requested, your data will be disclosed to the Labour Inspectorate.

* Advertising. The recipients of your data will be the different departments of our entity, as well as the third parties to whom we disclose your data, in accordance with current data protection regulations.

4.- RETENTION PERIODS

5. International transfers.

BODEGA JAVIER SANZ does not plan to carry out international data transfers. If they become necessary, they will only be made to entities under the authorization of the US-EU Data Privacy Framework agreement (Adequacy decision EU-US Data Privacy Framework_en.pdf (europa.eu), (more information: [www.dataprivacyframework.gov](http://www.dataprivacyframework.gov)), to entities that have demonstrated compliance with the required level of protection and safeguards in accordance with the parameters and requirements set out in current data protection regulations, such as the European Regulation, or where there is legal authorization to carry out the international transfer, such as the data subject’s consent. In all cases, the corresponding information will be provided to the data subject.

6. What are your rights in relation to data processing?

As a data subject, you have the right to obtain confirmation as to whether your data is being processed, to access your personal data, to request the rectification of inaccurate data, or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected or you withdraw the consent granted. BODEGA JAVIER SANZ will process and retain your data in accordance with current regulations, without prejudice to your right as a data subject to request the restriction of processing of your data at any time. In certain cases, you may exercise your right to data portability, and your data will be provided in a structured, commonly used, machine-readable format to you or to the new data controller you designate. You will have the right to withdraw consent at any time for any of the processing activities for which you have granted it. To exercise your rights, please contact us via the email address [info@bodegajaviersanz.com](mailto:info@bodegajaviersanz.com). We have forms available for exercising all the rights mentioned above; however, you may also use those provided by the Spanish Data Protection Agency. You have the right to lodge a complaint with the Spanish Data Protection Agency if you believe that your rights have not been properly addressed. The maximum period for resolution will be one month from receipt of your request. If any of your data changes, we would appreciate it if you would notify us in writing so that we can keep your data up to date.