1. The security of personal data has become one of the top priorities of organizations, and at PAGO VALLEGARCIA guaranteeing the inviolability of this information must be a priority objective. In this sense, we want to be transparent and make this Privacy Policy available to everyone who interacts with us.

    This policy applies to PAGO VALLEGARCIA and to all the companies that make up the group.

    References in this Privacy Policy to "PAGO VALLEGARCIA" "we", "us" and "our" refer to the entity responsible for the processing of your personal information, which, in general, will be the one that collects and processes it.
    PAGO VALLEGARCIA is committed to the processing of personal data in accordance with Regulation (EU) 2016/679, April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of these data, and other current regulations on Data Protection.
    This Privacy Policy is applicable to all Users, understanding as such, visitors to the website, as well as any other person who provides us with personal information through the different channels (hereinafter, "User" or “Users”). In this context, Channels are the different means or services that we make available to you so that you can interact with us, whether or not they imply registration, such as websites, applications, platforms, mailboxes, addresses or telephone numbers for information or customer service. User, profiles in social networks, forms, events, etc.

    Some of our online Channels may contain links to other third-party websites and applications outside of PAGO VALLEGARCIA. This Privacy Policy does not apply to them. Please also review the Privacy Policies of such third parties to familiarize yourself with their practices. They may also contain third-party cookies that are not owned or controlled by PAGO VALLEGARCIA. In this case, you can choose your configuration of third-party Cookies using our Cookie Configuration Tool, located at the bottom of the web, where you can manage your preferences and which you can access by clicking on "Cookies".

    PAGO VALLEGARCIA adopts the necessary technical and organizational measures to guarantee the security of personal data and to prevent its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the data and the risks to which they are exposed. You can also verify the presence of the SSL certificate by checking the Page properties in your browser. A connection is secure when "https://" appears instead of "http://" in the address bar of the browser and a lock symbol is displayed. You can consult more characteristics of the SSL certificate in the Legal Notice section.

    Who is Responsible for the Processing of personal data?

    Each time personal data is collected and processed, we will inform the User of the PAGO VALLEGARCIA company that is Responsible for the Treatment, and we will provide them with the corresponding identification data.

    Regarding this Privacy Policy and this website, we inform you that the Data Controller is:

    • Company name: PAGO VALLEGARCIA
    • CIF: A83387498
    • Address: Paseo de la Castellana 102, 28046 MADRID,
    • Telephone: 686457352
    • Contact email: vallegarcia@vallegarcia.com
    • The user may contact the Department of Data Protection to resolve their doubts related to the processing of their personal data at the postal address Madrid, Paseo de la Castellana 102, 28046 MADRID, or through the email address vallegarcia@vallegarcia.com

    What personal data can we collect through our Channels?

    For the purposes of this Privacy Policy, “personal data” is data that identifies a person or can be used to identify a person.

    PAGO VALLEGARCIA informs its Users that their personal data, obtained through the Channels they own or own, may only be collected for treatment when they are adequate, pertinent and not excessive in relation to the scope and purposes determined, explicit and legitimate purposes for which they have been obtained.


    We may receive the personal data provided directly by the User, through their visit to the Website, or when the User contacts Customer Service, either by email or telephone. Also, as a consequence of your interaction with us, we may receive your personal data when you fill out forms or surveys, when you request information from us, send requests, etc...

    In other cases, personal data is obtained indirectly from the user in order to analyze the use he makes of our website (See our Cookies Policy).

    When personal data is collected through our Channels for specific purposes, information will be previously provided to the User in a clear and unequivocal manner regarding i) the person responsible and their contact information, iii) the specific purposes of the processing and the basis of legitimacy. iv) the recipients or categories of recipients where applicable, as well as the existence or not of international transfers, v) the conservation criteria or periods, vi) as well as the rights that assist the interested party.

    Among the categories of data that we can process are:

    • Identification and contact information. Name and surname, ID or valid identification document, address (shipping information), country of residence, telephone number, email, etc.
    • Financial data or data related to the service provided: Billing data, Visa card, account number.

    The User is also solely responsible for the information provided, and for its veracity and legality.

    For what purpose and legitimacy does PAGO VALLEGARCIA process personal data?

    PAGO VALLEGARCIA processes the personal data of Users, collected through any of our Channels, for the following purposes and legitimate bases:

    • Manage the relationship established with us
      To provide our services through the different Channels, we process the data provided by Users with the purpose of managing, among others, access credentials; processing of memberships to the WINECLUB and the CLUB DE BARRICAS ALFONSO CORTINA; manage and supply orders, etc.

    We also process the data in order to respond to requests for services and requests for information from our Users received through any of our Channels, as well as to process, where appropriate, suggestions, claims or complaints.

    In the same way we process the data, when you subscribe to any of our alert channels, Newsletter, newsletters about our products and/or services, or request the sending of commercial communications and information of a social and cultural nature around the world of came.

    We also process the data to manage and respond to reservation requests for guided tours of our wineries, access to tasting courses, harvests, activities, etc.

    We also process the data to manage the Private Customer Area that our online sales channels make available to customers.

    Management related to the service provided, such as collection and billing management.

    In these cases, the legal basis of the treatment is the consent given by the User, as well as the execution of a contract and/or the legal relationships established with PAGO VALLEGARCIA.

    • Promotional activities and commercial communications
      We can send, by any means of communication, commercial communications, gifts, offers, information about participation in raffles, participation in contests, events, fairs, visits to our wineries and other information of a social and cultural nature around the world of wine, as well as documentation of various nature.

    Sending promotional information about services and products by any means of communication, marketed by other PAGO VALLEGARCIA companies. In these cases, the legal basis of the treatment is the consent given by the User and/or the legitimate interest in receiving products and services similar to those contracted.

    • Manage contact data in the field of contractual or commercial relationships
      We process contact data for the purpose of sending you information of interest, managing the commercial relationship that unites us, being able to manage invitations or communications about events organized or sponsored by PAGO VALLEGARCIA or in which you participate.

    The basis of legitimacy is the maintenance of the contractual and/or commercial relationship that unites us, or if it does not exist, the consent expressed when the User provides the contact information.

    • Compliance with legal obligations that affect us
      Whether these legal obligations are of a commercial, fiscal, accounting, or administrative nature; The legal basis that enables us to carry out this treatment is compliance with legal obligations.
    • fraud prevention
      Sometimes it is necessary to verify identity in order to offer protection, detect and prevent fraud or other illicit activities, unauthorized transactions, claims and other types of responsibilities, as well as manage the quality and risks associated with the business; as well as investigate, if necessary, illegal activities and potential violations of our policies and/or conditions of our services.

    The legal basis is the fulfillment of legal obligations that apply in each case.

    • Statistics and satisfaction surveys
      We may process the data obtained from satisfaction surveys in relation to our services for correct management of quality processes and improvement thereof, as well as cookies collected through browsing web environments. The legitimizing basis in this case is the consent given by the User.
    • Security and surveillance of facilities
      Our facilities have cameras and video surveillance systems, in order to safeguard the security of property and people.

    The legitimate basis of the processing is the legitimate interest of PAGO VALLEGARICA in guaranteeing security in its facilities.

    • Management of visits and third parties
      In order to control access to the facilities of visitors, collaborators or other third parties, it is possible that, in some of our facilities, identification data may be collected.

    The legitimizing basis is, in this case, consent, as well as the legitimate interest of PAGO VALLEGARCIA in guaranteeing the safety of goods and people in its facilities.

    • Information from third parties
      When the User provides us with data regarding third parties, either voluntarily or because we require it in compliance with a legal obligation, the User consents to the processing and declares that the data is accurate. Likewise, the User declares that he has proceeded to inform third parties of the content of this policy and/or of the one that applies to him and has been specifically informed, and of the corresponding rights that assist him in matters of Personal Data Protection. Notwithstanding the above, PAGO VALLEGARCIA will make every effort to act appropriately in relation to the treatment of said third parties.

    How long does PAGO VALLEGARCIA retain the User's personal data?

    In general, the data will be kept (i) for the time necessary for the purpose for which it was collected, (ii) for the applicable statute of limitations, if responsibilities arising from the processing may arise.

    With special character:

    • The data collected for the purpose of responding to requests or queries will be kept for the time necessary to respond to them.
    • The data collected based on your consent will be kept as long as it is not withdrawn.
    • For the rest of the cases, the User will be informed of the conservation periods that apply to the specific treatment.

    To whom can PAGO VALLEGARCIA provide the User's data?

    At PAGO VALLEGARCIA we undertake not to transfer or disclose the personal information of our Users except as described in this Privacy Policy or, where appropriate, at the time of data collection.

    The following data communications are planned, when necessary:

    • To public administrations and organizations with powers in tax matters, who are obliged to observe all the legal provisions contained in the regulations.
    • Other organizations with competence in matters of communications and provision of information services, or Organizations with competence in consumer matters to address possible complaints from users.
    • To financial entities and payment gateways, for the management of collections and payments, if these payment methods have been chosen.
    • To other Entities that are part of PAGO VALLEGARCIA, which have the requested activity in order to attend to and manage it, as well as the sending, by electronic means, of information about the services and products, through email. contact.
    • Outside of these cases, only personal data would be communicated, in compliance with legal obligation, to State Security Forces and Corps, Courts and Tribunals or administrations in the exercise of their administrative powers and powers.
    • We may exchange personal information with suppliers, in some cases contracted to perform services on our behalf. In these cases, whenever necessary, the corresponding processing commission contracts are signed as established by data protection regulations.
    • Likewise, we inform you that, to carry out the aforementioned purposes, we rely on the collaboration of service providers, third parties or companies of the Group, some of which could be located in territories outside the European Economic Area that are not provide a level of data protection comparable to that of the European Union. In such cases, we transfer the Users' data with adequate guarantees and always maintaining their security, such as the formalization of Standard Contractual Clauses approved by the Commission, the content of which can be consulted at the following link: https://ec .europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_es .

    Social networks

    At PAGO VALLEGARCIA we use social networks such as LinkedIn, Instagram or YouTube to share our content. We act on the networks as responsible for the data we publish, always treating it in accordance with the conditions established in each of the social networks.

    The interaction with Users through the use of said profiles or tools may involve the international transfer of data, of an analytical and technical nature, in relation to the Page and the social network profiles, being on the servers of the social network companies. where the data that users provide through said profiles are processed.

    Direct marketing

    In general, PAGO VALLEGARCIA does not use the personal data of Users for direct marketing purposes, unless consent has been previously obtained.

    As a User, you can, at any time, unsubscribe from direct marketing campaigns and oppose the future processing of your personal data for such purposes, by sending us an email to the address of the Data Controller or using the corresponding "unsubscribe" option. , included in the emails.

    automated decisions

    At PAGO VALLEGARCIA, decision-making automation is not carried out, including profiling. Attendees to Events called by PAGO VALLEGARCIA

    In those events, trainings, meetings, initiatives, etc. (hereinafter, “Events”), that are organized or promoted by PAGO VALLEGARCIA, inside or outside its facilities, we may request the User to provide us with personal data to be able to properly manage the Events and attendance at them. These data, including but not limited to, may be related to access management, accreditation, means of transportation and travel, accommodation, catering, delivery of related documentation, etc. This treatment will be based on consent, in addition to, in certain cases, compliance with a contractual relationship or legal obligation.

    These data may have to be transferred to one of the service providers or collaborating or sponsoring entities that participate or intervene in the Event, of which the User will be appropriately informed in each case. As a general rule, we will only keep this information during the period strictly necessary to carry out the Event and, where appropriate, to comply with any statute of limitations that may apply.

    Image: In addition to the treatment derived from the security and surveillance of our facilities, it may be that, as a consequence of the User's participation in Events, their image, and sometimes their voice, is captured and processed by PAGO VALLEGARCIA through photographs or the recording of video. Whenever the Events involve this treatment, we will expressly inform the User. This processing may be for internal, external and/or promotional purposes of the Events, so that said material may be used to reproduce, distribute, transform, communicate it publicly, fix it and make it available in any format or medium (including, but not limited to, , not limited to, exploitation through analog or digital means and the Internet, such as social profiles, web pages), without said activities conferring the right to remuneration, consideration or any economic benefit to the User.

    This treatment is based on consent, either derived from individual and express granting, whenever possible, by the User, or from attendance at Events whose image processing has been previously informed. The User's authorization extends to the global territorial scope, with a transferable nature (within and outside PAGO VALLEGARCIA) and for the entire duration of the intellectual property rights. The User may revoke consent at any time, through the appropriate channels.

    The intellectual and industrial property rights of the materials generated during the events and activities correspond exclusively to PAGO VALLEGARCIA.

    What are the user's rights when we process their data?

    The User may exercise their rights of access, rectification, deletion, portability of their data, and/or limitation or opposition to their processing, before the corresponding Data Controller, or by writing to the address at Paseo de la Castellana 102, 28046. MADRID, or by sending an email to the following address vallegarcia@vallegarcia.com If we consider it necessary to identify you, we may request a copy of a document proving your identity.

    Likewise, you may, at any time, withdraw the consent given by contacting the address indicated above, as well as submit a claim to the Control Authority regarding relevant data protection.

    https://www.agpd.es/portalwebAGPD/index-ides-idphp.ph ) and, in particular, before the Spanish Data Protection Agency ( www.aepd.es ).

    Observation: During periods of exceptionality such as States of Alarm or Emergency, which imply periods of confinement, or other external disturbances such as natural disasters, extreme weather conditions or wars, the rights that are not exercised through the email account and are exercise by ordinary mail, they will have a longer response period than usual, the response periods being reestablished when the recommended confinement period is lifted.

    Extended information:

    Below, we provide you with a series of links where you can obtain further information that could be useful to you in relation to other processing of personal data. You can also obtain information about the website in the Legal Notice .

    Validity

    Any change made to the Privacy Policy and information management practices will be reflected in a timely manner, and the Controller may add, modify or replace said Policy when deemed necessary.

    Last update May 9, 2022