Privacy Policy

IDENTIFICATION DATA OF THE DATA CONTROLLER
Responsible for the treatment:

Pago de los Abuelos S.L.
CIF: B24714867
Addres: Travesía del Toral nº 16, 24380 Puente Domingo Flórez (León)
Phone: +34 692890494
Email: bodega@pagodelosabuelos.com

INFORMATION TO USERS OF THE WEB PAGE AND CONSENT
In accordance with what is indicated in the European Data Protection Regulation (EU) 2016/679 and with Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, in the event that the acceptance of the present privacy policy on the occasion of the sending of any of the contact web forms that may be enabled on the page, the web user expresses with said acceptance his express, free, informed and unequivocal consent for the personal data that he could provide are incorporated into the files and archives of the company. The person responsible for the treatment informs the interested parties that, as the current applicable regulations establish, the corresponding technical and organizational security measures have been applied to the personal data processing activities, which have been implemented after the relevant risk analysis.

WHAT IS THE PURPOSE WITH WHICH WE TREAT THE PERSONAL DATA COLLECTED?
The personal data collected by the person responsible for the treatment through the web and those that could be collected from the interested party by any other means at a later time will be processed solely for the purpose of developing and managing the works, services and activities of the company. , manage orders, inquiries or requests made by web users, send newsletters or informative documents related to company services, and generally comply with the legally established obligations. Commercial communications will only be made to those users who had previously expressly authorized it, and they may withdraw their consent to receive commercial communications from the person responsible for the treatment at any time.

FOR HOW LONG WILL WE KEEP THE PERSONAL DATA COLLECTED?
The personal data provided by the users of the web to the person responsible for the treatment will be kept as long as the relationship for the provision of services is maintained and the data is needed for the development of the activities of the company, and as long as the suppression of the same or revoked the consent by the interested parties, in which case the data will be kept blocked during the legal limitation periods that are applicable in each specific case, with a generic term of 5 years. After the statute of limitations, the blocked data will be deleted.

WHAT IS THE BASIS OF LEGITIMATION THAT ALLOWS US TO PROCESS THE DATA COLLECTED?
The legal basis of legitimacy that allows us to process the personal data collected through the web is based on the express and informed consent of the interested party or their representative collected and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which the interested parties will have the right to withdraw the consent previously granted at any time, without said withdrawal affecting the legality of the treatments based on the consent that had previously been granted. The person in charge informs that the data requested through the forms will be those strictly necessary for the development of the requested services or to attend the query or specific request made by the interested party through the website, so that if it is not provided by the interested parties, it may not be possible to attend the query or request or proceed with the development of the requested services.

TO WHAT RECIPIENTS COULD THE PERSONAL DATA COLLECTED BE COMMUNICATED?
The personal data provided by the users of the web will only be processed by the person in charge of the company and by the authorized personnel that may have been hired, neither international data transfers nor data transfers to third parties being foreseen, except those that may have to be carried out by legal obligation to Authorities and Public Administrations, or those that are carried out to the contracted treatment managers and that is necessary for the development of the company's activities or for the provision of the services contracted to them, and always within the framework provided for in the treatment manager contract formalized between the controller and the contracted managers. The data controller undertakes in any case to inform the interested parties about the need to make extraordinary transfers of data to third parties to manage the provision of services so that the interested parties can express their consent for the transfer of data as a requirement for that this is carried out.

WHAT ARE THE RIGHTS THAT CAN BE EXERCISED BY THOSE WHO PROVIDE US WITH YOUR DATA?
Interested parties will have the right of access to their data to ask us what data we have collected and stored about them. They will have the right to rectify their data so that they are modified when they are inaccurate or incomplete. They will have the right of deletion to request the deletion of their personal data. They will also have the right to exercise their right of opposition so that their personal data is not processed. They will have the right to limit the processing of their data while proceeding to resolve the challenge to the accuracy of the data, or when the processing of the data turns out to be illegal but despite this the interested party opposes the deletion of the data, or when the company does not need to process the data but the interested party does need it for the exercise or defense of claims, or when the interested party has opposed the processing of their data and the existence of a fulfillment of missions of public interest has been raised or satisfaction of a legitimate interest and while it is verified whether the alleged legitimate reasons prevail over yours. The interested parties will have the right to the portability of their data to receive in electronic format the data they have provided us and those that have been obtained as a result of the relationship with the company, as well as to have the data transmitted to another entity if this were possible. They will also have the right not to be the subject of decisions based solely on automated data processing. They will also have the right to withdraw the consent initially granted and without said withdrawal affecting the legality of the treatments based on that consent that had been previously granted.

For the exercise of the aforementioned rights, the interested parties may go to the contact addresses indicated above to request the form provided by the person in charge for this purpose in compliance with their legal obligations, a form that the interested party must accompany when it is presented or sent from a Copy of your ID or equivalent document proving your identity. The exercise of these rights will be free, and the person in charge will keep the necessary forms at the disposal of the interested parties at all times to facilitate the exercise of the aforementioned rights, the request can be delivered by hand to the company staff once covered, or sent by post or email to the contact addresses indicated. The person in charge informs the interested parties that it has established and implemented protocols and specific measures for compliance with the data protection regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and of the Organic Law 3/2018 on Protection of Personal Data and Guarantee of Digital Rights.

If the interested parties consider that we have not processed their personal data in accordance with the indicated reference regulations, they may file a claim of their rights before the Spanish Agency for Data Protection as a national control authority at the address of the organization in Calle Jorge Juan, 6 - 28001 - Madrid or through the contact channels indicated on the institution's website (www.aepd.es), including the electronic office.

Last update of the privacy policy: November 10, 2020