PROCESSING OF PERSONAL DATA THROUGH THE WEBSITE

In compliance with the applicable Data Protection regulations, we inform you that your data will be processed by VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L., as Data Controller, for the purpose of providing the service you request through our contact form. To do so, it is necessary that you tick the corresponding box indicating acceptance of this policy; otherwise, we will not have your express consent and therefore will be unable to respond to your request.

For the proper provision of the services offered by VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L., the user must answer all questions included in the forms on our website. The user also declares that he/she is of legal age.

The processing of the personal data requested will also have the purpose of sending commercial information relating to products and services currently offered or which may be offered in the future by VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L. Such information includes advertising and promotional communications sent by post, fax, e-mail or any other means provided and for which the user has given consent. For this processing to take place, the user must tick the corresponding box in the website form.

If you subscribe to our newsletter, your e-mail address will be incorporated into our database for the sending of news updates. To subscribe to this service, it is necessary that you tick the subscription box. If you do not do so, you will not be subscribed to our newsletter.

Given the personal nature of the data provided, VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L. commits to processing them with strict confidentiality and maintaining the required secrecy. To this end, the company has implemented appropriate security measures in accordance with the risk analysis carried out.

We also inform you that your data will not be disclosed to third parties, nor will international data transfers be made, except where legally required, where disclosure is necessary for the performance of a contract, or where you provide your express consent.

COOKIES

The data stored in each “cookie” are as follows: language, date and time of the user’s last visit to our website, content design selected on the user’s first visit, and security elements involved in controlling access to restricted areas.

We analyse user preferences through this website (demographic characteristics, traffic patterns and other aggregated information to better understand user behaviour and profiles). Tracking user preferences helps us improve both our website and our services.

To this end, we use Google Analytics (a Google tool for measuring website traffic). Google Analytics may store cookies on your device to help us collect information used solely for statistical purposes and to analyse user behaviour on this website. The information collected through the cookie (including the IP address) is stored and transmitted to Google servers in the United States. Google will use this data to track your activity on our website and generate reports aimed at identifying how the site is used. Google may provide such information to third parties when required by law. Acceptance of this policy implies acceptance of Google’s use of the information collected through Google Analytics.

You may configure your browser to reject the storage of cookies on your device. More information is available in our Cookies Policy.

FULL INFORMATION ON PERSONAL DATA PROCESSING

DATA CONTROLLER

Who is responsible for processing your data?

• Identity: VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L. 
• Postal address: Calle Herrería nº 76 — 01307 Villabuena (Álava) 
• E-mail: info@valserrano.com 

PURPOSE OF PROCESSING

For what purpose do we process your personal data?
At VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L., we process the information provided by data subjects for the following purposes:

• Management and administration of the contractual relationship with suppliers, customers, and employees. 
• Providing interested parties with commercial information about products and services that may be of interest. 
• Creating corporate and promotional publications if your image is used on websites, social media, or corporate materials. 
• Ensuring the security of facilities and individuals in the event that you are recorded by our CCTV cameras. 
• Assessing your candidacy for potential future job vacancies if you have submitted your CV. 
• Responding to your enquiries submitted through the website. 
• Managing the personal data collected through the cookies installed on the website, as set out in the cookies policy. 

How long will we retain your data?

Personal data provided will be retained as follows:

a) While the commercial relationship remains in force.
Data required to comply with the resulting obligations will be kept for as long as necessary to comply with those obligations, and will remain blocked until their definitive deletion.
This includes administrative and financial data, as well as any other data necessary for fulfilling the commercial relationship.

• Contact and communication data: retained until consent is withdrawn or objection is raised. 
• Stored images: retained until consent is withdrawn. 
• Newsletter or service subscription data: retained until consent is withdrawn. 

b) Until the data subject requests erasure.

c) Data that must be retained for a legally required period will not be deleted until the specified retention period has elapsed.

• Accounting documentation: 4 years (Article 30 of the Commercial Code) 
• Tax documentation: 6 years (Articles 66–70 of the General Tax Law) 
• Social security documentation: 4 years (Legislative Royal Decree 5/2000) 
• Occupational Risk Prevention documentation: 5 years, with extended periods in specific cases (e.g., asbestos) 
• CCTV images: 1 month (LOPDGDD, Article 22) 

LEGAL BASIS FOR PROCESSING

What is the legal basis for processing your data?

The legal basis depends on the nature of the processing:

• Execution of a contract, if you are an employee, customer, or supplier. 
• Legitimate interest with regard to sending advertising communications to our customers. 
• Consent provided by you if we publish your image in corporate publications, on the website, or on social media. 
• Public interest if you have been recorded by CCTV cameras for physical security reasons. 
• Pre-contractual measures requested by the data subject if you have submitted your CV. 
• Consent given on the website when submitting a request or enquiry through our contact form or when subscribing to our newsletter or blog. 
• Consent provided when accepting the installation of cookies through the website. 

RECIPIENTS OF THE DATA PROVIDED

Who will receive your data?

a) Data disclosed due to legal requirements:

• Social Security bodies (employees) 
• Tax authorities (suppliers and partners) 
• Other public administration entities (partners and customers) 
• Law enforcement authorities (CCTV recordings) 

b) Data disclosed due to contractual requirements:

• Organisations/persons related to the Controller 
• Banks and savings institutions 

c) Data (IMAGES) of employees/customers disclosed to the following social networks:

• Facebook 
• Twitter (X) 
• Instagram 
• LinkedIn 

The disclosures described in section c) involve an international data transfer to the United States, of which the data subject has been informed.

RIGHTS OF DATA SUBJECTS

What are your rights?

Any person has the right to obtain confirmation as to whether VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L. is processing personal data concerning them.

• Right of access: to request information about which personal data are being processed. 
• Right to rectification: to request correction of inaccurate personal data. 
• Right to erasure: to request deletion of personal data when, among other reasons, they are no longer necessary for the purposes for which they were collected. 
• Right to object: to object to the processing of personal data. 
• Right to restriction of processing: to request temporary suspension of data processing in specific cases. 
• Right to data portability: to request delivery of automated personal data in a structured, commonly used, easily readable format. 

How can these rights be exercised?
By sending a written request to:
VIÑEDOS Y BODEGAS DE LA MARQUESA, S.L.
Calle Herrería nº 76 — 01307 Villabuena (Álava)

What are the available complaint channels?
If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), Calle Jorge Juan 6, 28001 Madrid.
More information on your rights is available at www.aepd.es.