We take the respect for privacy and the protection of our users’ personal data very seriously. Below, we explain how we collect data and how we process it.
DATA CONTROLLER INFORMATION
- Company Name: OFFERENDUS | LA VINOTECA DEL CASTILLO DE LA CORACERA
- CIF:
- Address: Calle Salamanca, Nº2
- Activity: Wine shop
- Website: https://offerendus.com/
APPLICABLE LEGISLATION
This Privacy Policy has been designed in accordance with EU Regulation 2016/679 of the European Parliament and Council of April 27, 2016, relating to the Protection of Natural Persons regarding the Processing of Personal Data and the Free Movement of such data, L.O. 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights, and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSICE or LSSI).
PRINCIPLES APPLIED TO PERSONAL INFORMATION
In the processing of personal data, the following principles are applied:
- Principle of lawfulness, fairness, and transparency: Personal data will be lawful, requiring consent or processing necessary to comply with a legal obligation. Data will be provided in an understandable and accessible manner.
- Principle of data minimization: Personal data will be adequate, relevant, and limited to what is necessary for the purposes for which they were collected.
- Principle of limitation of storage period: Personal data will be canceled when they are no longer useful for the purpose they were collected.
- Principle of integrity and confidentiality: Personal data will be processed in such a way that ensures adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, through the application of appropriate technical or organizational measures.
PURPOSES OF PERSONAL DATA PROCESSING
The processing of personal data serves the following purposes:
- To address your request and provide you with information related to the services offered by OFFERENDUS and its partner companies regarding training, consulting, and technology.
- To collect personal data through various contact forms on the website that gather identifying personal data (name, surname, phone number, and email address).
- To send commercial communications, newsletters, promotions, and special offers related to the services offered when the user checks the “I wish to receive marketing communications” box.
- To manage social networks: The processing of data for those who follow our social media accounts will be governed by this privacy policy. Data will be processed to properly manage our presence on the social network, informing about activities, products, or services of OFFERENDUS.
If you request any of our services, consent will be requested for the corresponding purpose.
LEGITIMATE BASIS FOR PERSONAL DATA PROCESSING
The legal basis for processing your data is consent. By filling out the corresponding forms and checking the “I have read and accept the privacy policy and LOPD” box and clicking to send the data, or by sending emails through the accounts provided for this purpose, the user expressly acknowledges having read and accepted this privacy policy, giving their unequivocal and explicit consent to the processing of their personal data according to the purposes and terms stated herein.
You may revoke the consent given for the processing of your personal data at any time. Such revocation will not have retroactive effects. You can revoke consent by sending an email to:
CATEGORIES OF PERSONAL DATA PROCESSED
The categories of data that will be processed for the indicated purposes are as follows:
- Identifying data: name and surname, email address, and phone number.
- Other non-identifying data obtained through some cookies that are downloaded to the user’s computer when browsing the web.
Mandatory data will be distinguished in the data collection forms. If you decide not to provide any of the mandatory data, we will not be able to fulfill the intended purpose and data processing will not be carried out.
You guarantee that the personal data you provide us are truthful and correct and are responsible for communicating any changes to them.
SECURITY MEASURES APPLIED
OFFERENDUS is committed to processing users’ personal data with respect to their confidentiality and using them within the purpose for which they were collected.
As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organizational measures to ensure the security of personal data and avoid its alteration, loss, unauthorized processing, or access, considering the state of technology, the nature of the stored data, and the risks they are exposed to. However, the user should be aware that security measures on the Internet are not impregnable.
Regarding the confidentiality of processing; it will be ensured that any person authorized to process data (staff, collaborators, and providers) is under the appropriate obligation of confidentiality.
You can obtain more information about the security measures we apply by contacting us through the details provided in the first section of this privacy policy.
DATA RETENTION PERIOD
Personal data will be retained for as long as necessary to respond to the corresponding request or, in general, for the duration of the business relationship or for the time required to comply with legal obligations.
RECIPIENTS TO WHOM DATA IS COMMUNICATED
The user knows and accepts that their personal data may be provided to public organizations, third parties when necessary to fulfill the purposes of processing, and partner companies for internal administrative purposes, always respecting the security measures required by current legislation on personal data protection. Internally, the data may be transferred to:
- OFFERENDUS with CIF __, contact email: vinotecaofferendus@gmail.com, address: C. Salamanca, 2, San Martín de Valdeiglesias, Madrid, Spain.
Additionally, data is shared with the following providers under their respective privacy conditions:
- SERED HOSTING, S.L., the entity that provides us with web storage service.
The corresponding data processing agreement has been signed as required by applicable legislation. Data will not be transmitted to third parties without express authorization or legal obligation.
USER RIGHTS
The user has the following rights regarding the processing of their personal data:
- Right to access their personal data.
- Right to rectify inaccurate data.
- Right to delete data that is no longer necessary for the purposes for which it was collected.
- Right to limit the processing of data for a specific purpose.
- Right to data portability.
- Right to object to the processing of personal data.
- Right to file a complaint with the Spanish Data Protection Agency (the competent data protection authority), especially when they have not obtained satisfaction in the exercise of their rights.
You can exercise your rights by sending a request accompanied by a copy of your ID to the address or email indicated in the first section of this privacy policy.
SOCIAL MEDIA PRIVACY POLICY
In compliance with the aforementioned legislation, users are informed that a profile has been created on the social networks Facebook, LinkedIn, Instagram, and Twitter, primarily to advertise its products and services.
The user with a profile on the same social network and who has decided to join the page created, thus showing interest in the information advertised on the network, provides their consent for the processing of those personal data published in their profile.
The user can access the privacy policies of the social network at any time, as well as configure their profile to ensure their privacy.
OFFERENDUS has access to and processes public information about the user, especially their contact name. This data is only used within the social network. It is not incorporated into any file.
OFFERENDUS will carry out the following actions:
- Access to public profile information.
- Publication on the user’s profile of all the information already published on their page.
- Sending personal and individual messages through social network channels.
- Status updates on the page that will be published on the user’s profile.
The user can always control their connections, delete content that no longer interests them, and restrict who they share their connections with by accessing their privacy settings.
Once the user has joined the social network, they can publish comments, links, images, or photographs or any other type of multimedia content supported by the social network. The user, in all cases, must be the owner of these, have rights to the intellectual property, or have the consent of the affected third parties. It is expressly prohibited to publish any content on the page, whether text, graphics, photographs, videos, etc., that infringe or may infringe on moral rights, ethics, good taste, or decorum, and/or infringe, violate or break intellectual or industrial property rights, the right to image or the law. In such cases, OFFERENDUS reserves the right to remove the content immediately and may request the user’s permanent blocking.
OFFERENDUS will not be responsible for the content freely published by a user. The user must be aware that their publications will be known by other users, making them the primary person responsible for their privacy.
Images that may be published on the page will not be stored in any file by us but will remain on the social network.
OFFERENDUS reserves the right to conduct contests and promotions, in which the user joined to their page can participate. The rules of each will be published on the social network platform when used for this purpose. Always complying with the LSSI-CE and any other applicable regulations.
The social network does not sponsor, endorse, or administer, in any way, any of our promotions, nor is it associated with any of them.
OFFERENDUS may also use social networks to advertise its products and services. In any case, if it decides to process your contact data for direct marketing actions, it will always comply with the legal requirements of the GDPR, the LOPD, and the LSSI-CE.
CHANGES IN THE PRIVACY POLICY
OFFERENDUS may modify this privacy policy to adapt it to new legislative, jurisprudential, or interpretation developments by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Conditions that, where applicable, are
collected for certain products or services if such access implies a specialty in terms of personal data protection.