At BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. we care about the personal data that we process and that prevailing legislation on personal data protection is strictly complied with. In particular we care about Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
As such, we provide information on the following matters relating to the personal data processing that we perform at BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L.:
Name: BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L.
Tax identification number (NIF): B01414531
Postal address: Calle Torrea, no. 1
01340, Elciego, Álava, Spain
Telephone number: (+34) 945 60 60 00
Email address: marquesderiscal@marquesderiscal.com
Any interested party can contact our Data Protection Officer for any topics related to personal data processing, either through the postal address mentioned above or by sending an email to dpo@marquesderiscal.com.
The personal data processing performed respects the principles laid down in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter GDPR):
• Principle of legality, fairness and transparency: the data that we collect is processed in a legal, fair and transparent manner, with the prior consent of the interested parties where necessary, or, where appropriate: for the execution of a contract to which the interested party has entered into; for the application of pre-contractual measures at the request of the interested party; where processing is necessary for the compliance of an applicable legal obligation, to protect vital interests of the interested party or another individual; to satisfy the legitimate interests pursued by the processor or a third party, provided that the fundamental rights and interests of the interested party requiring personal data protection do not prevail over these interests, especially when the interested party is a minor.
• Principle of limitation of purpose: the personal data we process is used for the purposes indicated in the section “What do we use your personal data for?”
• Principle of data minimisation: in accordance with this principle, the only personal data that we collect from users are those that are strictly necessary for the purposes described in the section “What do we use your personal data for?"
• Principle of accuracy: the personal data that we collect will be accurate, and if necessary, updated. For this reason, should there be any change to their personal data, users should relay this to us so that we can update it appropriately.
• Principle of limitation of storage: the personal data we process is stored for the period indicated in the section “How long do we keep your personal data for?”
• Principle of integrity and confidentiality: to respect this principle, personal data will be processed in such a way so as to ensure its security, including protection against unauthorised or illegal processing and against its loss, destruction or accidental damage, applying the appropriate technical and organisational measures.
To organise the draw related to this promotion, contact the winners and award them with a prize.
We will also use identification and contact details of the participants to send, via electronic means or otherwise, newsletters and marketing information on offers, promotions, discounts and new Marqués de Riscal products related to the wine, tourism, hotel and catering sectors.
Under Whereas 14 of the GDPR it is established that "the protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person."
This implies that this regulation and the obligations and rights contained within do not apply to some of the data processing performed by BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L., such as those relating to clients who are legal persons and suppliers.
The statutory or legal grounds for processing participants' personal data is the execution of the contract which they enter into by participating in the draw.
With regards to sending marketing material, the legal grounds are to satisfy the legitimate interests sought by BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. in accordance with article 6.1. f) of the Spanish Registry of Data Protection. This is without prejudice to the possibility that the participant can oppose the sending of this marketing material.
All the personal data that we process at BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. is provided to us by the interested parties themselves or their legal representatives.
The personal data that we collect through this website has been gathered through various forms provided for that purpose or via the email addresses provided to establish contact with us.
To better manage the information we send out by email in a more efficient, dynamic and functional way, we use MailChimp, a platform developed by The Rocket Science Group LLC, an entity certified under the EU-US Privacy Shield Framework. Information to this regard is available at: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
The Rocket Science Group LLC’s privacy policy is available at https://mailchimp.com/legal/privacy/.
The personal data provided to us will be stored for as long as the interested parties do not withdraw their consent.
• Right to request access to your personal data: to learn and verify the legality of the processing, you may request confirmation as to whether BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. is processing your personal data at any time and if this is the case, we will inform you, among other items, of the data we are processing, its purpose, source, expected data storage period and where appropriate, recipients or categories of recipients.
• Right to request amendment of data: you can request the amendment of any personal data that is inaccurate or ask us to complete any incomplete data through an additional declaration. In such a case you must indicate in your request which data you are referring to and the correction that should be made, attaching, where appropriate, supporting documentation of the inaccuracy or incompleteness of the data being processed.
• Right to request data deletion (“right to be forgotten”): you can request that your personal data be deleted and no longer processed if it is no longer necessary for the purposes for which it was collected or if processed in another way, withdraw consent, or it has been processed illegally or must be deleted to comply with a legal obligation.
• Right to request limitation of personal data processing: in this case BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. will only hold your personal data for the formulation, exercise or defence of claims, or with a view to protecting the rights of another legal entity or individual or for overriding public interest.
• Right to the portability of your personal data: you can request that we hand over your personal data, to you or another person as indicated by you, in a structured, usable and readable format.
• Right to oppose the processing of your data: BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. will stop processing your personal data as you indicate, unless we have to continue processing it for compelling legitimate grounds or for the formulation, exercise or defence of potential claims.
How to exercise your data protection rights: to exercise your rights please send a written request to BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. Calle Torrea, 1, 01340, Elciego, Álava, Spain or send an email to dpo@marquesderiscal.com, attaching in any case a photocopy of your national identity document.
BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. will respond to the requests within the periods and under the conditions required by prevailing personal data protection legislation.
How to lodge a complaint with the Spanish Data Protection Agency: if you consider that we have not properly processed your personal data or that we have not duly assisted you in exercising your data protection rights, you can lodge a complaint with the Spanish Data Protection Agency, either via its website or its address, at 6, Calle Jorge Juan, 28001, Madrid.
Further information on data protection rights and complaints to the supervisory authorities is available on www.agpd.es.
In accordance with that provided in article 32 of the GDPR, BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. has adopted the appropriate technical and organisational measures to ensure a level of security that is appropriate to the risk presented.
Data processing risks have been taken into account in order to assess the appropriate security level, in particular as a result of the destruction, loss or accidental or illegal alteration of the personal data transferred, stored or processed in a different way, or the communication or unauthorised access to such data.
BODEGAS DE LOS HEREDEROS DEL MARQUÉS DE RISCAL, S.L. has adopted measures to ensure that any person acting under its respective authority with access to personal data provided by users, can only process them by following the company's instructions, as well as maintaining their professional confidentiality, which will be of an indefinite duration.
To this effect, our employees have signed a confidentiality and obligation to secrecy document regarding the information and personal data that they process in the course of their existing employment relationship with the company.
We ask our users to read the policies on the use of the website by minors that we have published on the "Legal notice" section of our website.
Cookies are small text files which are stored on the hard-drive or memory of the computer used to access or visit the pages of certain websites, storing user preferences for when they next connect. The cookies stored on the hard-drive cannot read the data stored on the hard-drive, access personal information or read cookies created by other providers.
For further information on cookies used on this website, read the "Cookie policy" section.