Privacy Policy

Identification of the Data Controller

BODEGAS YZAGUIRRE, SL is the Data Controller of the User’s personal data and the User is hereby informed that their data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

The User may contact the Data Controller using the email address vermut@vermutyzaguirre.com.

The address for the purpose of complaints is that of the company’s registered office.

Purposes of the processing

To respond to questions and requests that the data subject sends the Controller.

• Storage period: The data will be stored until the data subject’s questions and requests have been answered. Subsequently, and where necessary, the data will be blocked for the legally required period.
• Legal basis: Legitimate interest of the Controller and the Data Subject’s consent.

To manage the User’s subscription and account.

• Storage period: The data will be processed for as long as the Data Subject is interested in continuing the relationship with the company. Subsequently, and where necessary, the data will be blocked for the legally required period.
• Legal basis: Contractual relationship.

To process orders and requests for products or services from the User.

• Storage period: The data will be processed for as long as the Data Subject is interested in continuing the relationship with the company. Subsequently, and where necessary, the data will be blocked for the legally required period.
• Legal basis: Contractual relationship.

To send the Data Subject commercial communications about our products (newsletters) that may be of interest to them.

• Storage period: The information will be stored until the Data Subject withdraws their consent.
• Legal basis: The data subject’s express consent.

Recipients of the data

The Controller engages third parties (data processors) in order to provide its services. The User’s data will not be disclosed to other third parties outside of these companies. If the data has to be disclosed to third parties for any reason, the User will be informed in advance and, where applicable, their consent will be obtained, and the purposes of disclosure and the identity of the third party will be specified.

An exception to the above are cases where disclosure to a third party is required by law.

Rights

Persons who provide their data may exercise the following rights over their data:

• Right of access
• Right of rectification and erasure
• Right of restriction of processing
• Right of data portability
• Right of objection
• Right to withdraw consent

For more information about your rights, we suggest you visit the website of the Spanish Data Protection Agency.

The above rights may be exercised by sending an email to vermut@vermutyzaguirre.com, clearly indicating the right you wish to exercise and providing a photocopy of your national identity card as proof of identity. Alternatively, you may write to the registered office of the Data Controller, which is indicated in the first section of this Privacy Policy.

You may also lodge a complaint with the competent supervisory authority, which is the Spanish Data Protection Agency, particularly if you failed to obtain satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency by phoning 901 100 099 or 912 663 517 or visiting C/ Jorge Juan, 6, 28001 – Madrid (Spain).

Data security measures

The Controller assures the User that processing operations are carried out in accordance with all the provisions of the above data protection regulations and legislation (GDPR and LOPDGDD), that their personal data is processed in accordance with the principles of lawfulness, fairness and transparency, and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Furthermore, the Controller warrants that it has implemented appropriate technical and organisational policies to apply the security measures required under the GDPR and the LOPDGDD to protect the rights and freedoms of the Users, and that the latter have received appropriate information on how to exercise their rights. c

Origin of the data

All data collected were provided by the Data Subject.