PRIVACY

The Privacy Policy forms part of the General Terms and Conditions governing this Website.

VERSION 1.1 dated 17/07/2020

Who is responsible for processing your data?

JUAN RAMON LOZANO, S.A.U
Registered address: Avda. Reyes Católicos, 156
Postcode: 02600
Villarrobledo.
Tax ID: A02031664
Tel.: 967141907
Email: info@bodegas-lozano.com

You may contact us in any way you wish to communicate with us.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any changes.

If you belong to any of the following groups, please consult the expandable information:

WEBSITE OR EMAIL CONTACTS

Bodegas Lozano newsletter.

To unsubscribe from our newsletter service and database, you must send an email with the word “unsubscribe” to info@bodegas-lozano.com

What data do we collect through the Website?

We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data via the contact form, you will identify yourself so that we can contact you, if necessary.

For what purposes will we process your personal data?

• To respond to your enquiries, requests, or applications.
• To manage the requested service, respond to your request, or process your application.
• Information by electronic means relating to your request.
• Commercial or event information by electronic means, provided that you have given your express authorisation.
• To carry out analysis and improvements on the Website regarding our products and services. To improve our commercial strategy.

What is the legal basis for processing your data?

The data subject’s acceptance and consent, granted through a voluntary action, such as in cases where, to submit a request, it is necessary to complete a form and click the submit button; doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to that form or to acceptance of the privacy policy.

All our forms include the * symbol for mandatory fields. If you do not provide those fields, or do not tick the checkbox accepting the privacy policy, the information cannot be sent. It usually follows this wording: “I am over 18 and I have read and accept the Privacy Policy”.

How long will we keep personal data?

Until the consent granted is withdrawn.

NEWSLETTER CONTACTS

What data do we collect through the newsletter?

On the Website, you may subscribe to the Newsletter by providing an email address to which it will be sent.

We will store only your email in our database and will send you emails periodically until you request to unsubscribe or we stop sending emails.

You will always have the option to unsubscribe in any communication.

For what purposes will we process your personal data?

• To manage the requested service.
• Information by electronic means relating to your request.
• Commercial or event information by electronic means, provided that you have given your express authorisation.
• To carry out analysis and improvements in mailings to improve our commercial strategy.

What is the legal basis for processing your data?

The data subject’s acceptance and consent. In cases where you subscribe, you must accept a checkbox and click the submit button. This will necessarily imply that you have been informed and have expressly given your consent to receive the newsletter.

If you do not tick the checkbox accepting the privacy policy, the information cannot be sent. It usually follows this wording: “□ I am over 18 and I have read and accept the Privacy Policy.”

How long will we keep personal data?

Until the consent granted is withdrawn.

CUSTOMERS

For what purposes will we process your personal data?

• Preparation of the quotation and follow-up through communications between both parties.
• Information by electronic means relating to your request.
• Commercial or event information by electronic means, provided that you have given your express authorisation.
• To manage the administrative, communications, and logistics services carried out by the Data Controller.
• Invoicing and filing the relevant taxes.
• To carry out the corresponding transactions.
• Control and debt recovery procedures.

What is the legal basis for processing your data?

The existence of a contractual relationship between the parties. Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the data subject’s request prior to entering into a contract.

How long will we keep personal data?

For the duration of the relationship between the parties and for the limitation periods arising therefrom.

QUALITY SURVEYS

For what purposes will we process your personal data?

• To assess the level of quality of the service provided.
• To improve the services offered, in accordance with ISO compliance.

What is the legal basis for processing your data?

The legal basis is the respondent’s express consent.

How long will we keep personal data?

Until the consent granted is withdrawn.

SUPPLIERS

For what purposes will we process your personal data?

• Information by electronic means relating to your request.
• Commercial or event information by electronic means, provided that you have given your express authorisation.
• To manage the administrative, communications, and logistics services carried out by the Data Controller.
• Invoicing.
• To carry out the corresponding transactions.
• Invoicing and filing the relevant taxes.
• Control and debt recovery procedures.

What is the legal basis for processing your data?

The legal basis is acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products through any channel.

How long will we keep personal data?

For the duration of the relationship between the parties and for the limitation periods arising therefrom.

SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• To respond to your enquiries, requests, or applications.
• To manage the requested service, respond to your request, or process your application.
• To engage with you and create a community of followers.

What is the legal basis for processing your data?

The legal bases that legitimise processing are the data subject’s voluntary consent to get in touch and, where applicable, acceptance of a contractual relationship within the relevant social network environment. Data processing within the Social Network will be carried out in accordance with its Privacy Policies.

How long will we keep personal data?

We can only view or delete your data in a restricted manner, as we have a specific profile. We will process your data for as long as you allow us by following us, being friends, or clicking “like”, “follow”, or similar buttons.

Any rectification of your data or restriction of information or posts must be carried out through your profile or user settings on the social network itself.

JOB APPLICANTS

For what purposes will we process your personal data?

• To organise recruitment processes for hiring employees.
• To invite you to job interviews and assess your application.
• If you have given us your consent, we may share it with collaborating or related companies, solely to help you find employment.
• If you tick the checkbox accepting the privacy policy, you give us your consent to share your job application with the entities that make up the group of companies in order to include you in their recruitment processes.

We also inform you that, one year after receiving your curriculum vitae, we will proceed to securely destroy it.

What is the legal basis for processing your data?

The legal basis is your unequivocal consent when you send us your CV.

How long will we keep personal data?

For a minimum period of 1 year or until the consent granted is withdrawn.

Do we include personal data of third parties?

No. As a general rule, we only process data provided by the data subjects. If you provide us with third-party data, you must first inform those persons and obtain their consent; otherwise, you release us from any liability for failure to comply with this requirement.

What about data from minors?

We do not process data from persons under 18 years of age. Therefore, please refrain from providing such data if you are not that age or, where applicable, from providing data of third parties who are not of that age. JUAN RAMON LOZANO, S.A.U disclaims any liability for failure to comply with this provision.

Will we communicate by electronic means?

• Only to manage your request, if it is one of the contact methods you have provided us with.
• If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?

You can rest assured: we have adopted an optimal level of protection for the Personal Data we handle, and we have installed all technical means and measures at our disposal, in line with the state of the art, to prevent loss, misuse, alteration, unauthorised access, and theft of Personal Data.

To which recipients will your data be disclosed?

Your data will not be disclosed to third parties, except where legally required. Specifically, it will be disclosed to the Spanish State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement.

In the event of a purchase or payment, if you choose any application, website, platform, bank card, or other online service, your data will be disclosed to that platform or processed within its environment, always with maximum security.

When instructed by us, the web development and maintenance company and the web hosting provider will have access to our website. They will have signed a service agreement that obliges them to maintain the same level of privacy as we do.

Any international data transfer when using US applications will be subject to the Privacy Shield framework, which ensures that US software companies comply with European data protection policies on privacy.

What rights do you have?

• To know whether or not we are processing your data.
• To access your personal data.
• To request rectification of your data if it is inaccurate.
• To request erasure of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent granted.
• To request restriction of the processing of your data in certain cases, in which case we will only retain it in accordance with applicable regulations.
• To data portability, which will be provided to you in a structured, commonly used, machine-readable format. If you prefer, we can send it to the new controller you designate. This is only valid in certain cases.
• To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority if you believe we have not handled your request properly.
• To withdraw consent for any processing to which you have consented, at any time.

If you change any data, we would appreciate it if you let us know so we can keep it up to date.

Would you like a form to exercise your rights?

• We have forms for exercising your rights; request them by email or, if you prefer, you may use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be electronically signed or accompanied by a photocopy of your ID card.
• If you are represented by someone else, you must attach a copy of their ID card, or have them sign with their electronic signature.
• Forms may be submitted in person, sent by post, or by email to the Data Controller’s address at the beginning of this text.

How long does it take us to respond to the exercise of rights?

It depends on the right, but no later than one month from your request, and two months if the matter is very complex and we notify you that we need more time.

Do we process cookies?

If we use cookies other than those that are necessary, you may consult the cookie policy via the corresponding link from the beginning of our website.

How long will we keep your personal data?

• Personal data will be kept for as long as you remain associated with us.
• Once you are no longer associated with us, the personal data processed for each purpose will be kept for the legally established periods, including the period during which a judge or court may require it, in accordance with the limitation period for legal actions.
• The processed data will be kept until the aforementioned legal periods expire, if there is a legal obligation to retain it, or if there is no such legal period, until the data subject requests its erasure or withdraws the consent granted.

We will keep all information and communications relating to your purchase or the provision of our service for as long as product or service warranties remain in force, in order to handle any potential claims.