Privacy policy
The Owner informs you about its Privacy Policy regarding the processing and protection of personal data of users and customers that may be collected while browsing, buying a product or hiring a service through the Web Site: https://www.clubcontubernio.com
In this regard, the Holder guarantees compliance with current regulations on the protection of personal data, reflected in the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
The use of the Web site implies the acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.
Identity of the Responsible
- Responsible: Somos vinateros sl.
- TAX ID: B01636224
- Address: Santa engracia 108 4º I, Madrid – Spain.
- E-mail: contact@clubcontubernio.com
- Contact telephone number: +34 919 04 90 58
- Web site: https://www.clubcontubernio.com
Principles applied in data processing
In processing your personal data, the Data Controller will apply the following principles that comply with the requirements of the new European Data Protection Regulation (GDPR):
Principle of lawfulness, loyalty and transparency: The Holder will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Holder will previously inform the User with absolute transparency.
Principle of data minimization: The Data Subject shall request only the data strictly necessary for the purpose or purposes for which it is requested.
Principle of limitation of the retention period: The Data Controller shall keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Data Controller will inform the User of the corresponding retention period according to the purpose.
In the case of subscriptions, the Registrant will periodically review the lists and eliminate those registrations that have been inactive for a considerable period of time.
Principle of integrity and confidentiality: The personal data collected will be treated in such a way that their security, confidentiality and integrity is guaranteed.
The Holder takes the necessary precautions to prevent unauthorized access or improper use of its users’ data by third parties.
Collection of personal data
You do not need to provide any personal information to browse the Web site.
The cases in which you do provide your personal data are the following:
- By contacting us through the contact forms or sending an e-mail.
- When commenting on an article or a page.
- When purchasing a product or contracting a service.
- By signing up for a subscription form or newsletter that the Owner manages with MailChimp.
Rights
The Holder informs you that about your personal data you have the right to:
Request access to stored data.
Request a correction or deletion.
Request the limitation of your treatment.
Opposing treatment.
You may not exercise your right to data portability.
The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly to the Data Controller, which means that any customer, subscriber or collaborator who has provided their data at any time, can contact the Data Controller and request information about the data stored and how it has been obtained, request the rectification of the same, oppose the treatment, limit its use or request the deletion of such data in the files of the Data Controller.
To exercise your rights, please send your request together with a photocopy of your National Identity Card or equivalent to the following e-mail address: contact@clubcontubernio.com.
The exercise of these rights does not include any data that the Data Controller is obliged to retain for administrative, legal or security purposes.
You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you is in breach of the Regulation.
Purpose of personal data processing
When you connect to the Website to send an email to the Owner, write a comment on an article or a page, subscribe to its newsletter or purchase a product or service, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, e-mail address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by – CDMON – only as described on the pages:
The personal data and the purpose of the processing by the Holder is different according to the information capture system:
- Contact forms: The Holder requests personal data which may include: name and surname, email address, telephone number and website address in order to respond to queries from Users, provide information and demonstrations of the products and services of the Holder, including budgets.
For example, the Holder uses such data to respond to messages, doubts, complaints, comments or concerns that Users may have regarding the information included on the Website, the products and services provided through the Website, the processing of personal data, questions concerning the legal texts included on the Website, as well as any other query that the User may have and that is not subject to the terms and conditions of the Website or the terms and conditions of contract. - Comment forms: The Holder requests personal data among which may be: name and surname, email address, and website address in order to respond to Users’ comments.
- Forms for contracting products or services: The Holder requests personal data among which may be: name and surname, identity document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, telephone number and payment data (payment methods or bank details) in order to maintain a business relationship with the User, to carry out the shipment of orders, to provide the contracted services and to perform the billing and collection of the contracted products or services.
- Content subscription forms: The Owner requests the following personal data: name and surname, e-mail address, telephone number and website address to manage the subscription list, send newsletters, promotions and special offers. The personal data provided to the Data Controller will be located on the servers of The Rocket Science Group LLC d/b/a, domiciled in the USA. (Mailchimp).
There are other purposes for which the Data Controller processes personal data:
- To ensure compliance with the conditions contained in the Legal Notice page and applicable law. This may include the development of tools and algorithms to help the Website ensure the confidentiality of the personal data it collects.
- To support and improve the services offered by this Web Site.
- To analyze user navigation. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to the User’s computer when browsing the Website, the characteristics and purpose of which are detailed in the Cookies Policy page.
-
To manage social networks. The Holder has a presence in social networks. If you become a follower in the social networks of the Holder, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and that you have previously accepted.
You can consult the privacy policies of the main social networks in these links:The Holder will process your personal data in order to properly manage its presence in the social network, inform you of its activities, products or services, as well as for any other purpose that the regulations of social networks allow.
In no case shall the Holder use the profiles of followers in social networks to send advertising on an individual basis.
Personal data security
To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction.
The Web site is hosted by: CDMON. Data security is guaranteed by taking all the necessary security measures. Please refer to their privacy policy for more information.
The Owner informs the User that his/her personal data will not be transferred to third party organizations, except when such transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a data processor. In the latter case, the transfer of data to the third party will only be carried out when the Owner has the express consent of the User.
However, in some cases, collaborations with other professionals may be carried out, in which case the User will be asked to give his/her consent, informing about the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest safety standards.
Content from other websites
The pages of this Web site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.
These Web sites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.
Cookies Policy
In order for this Web site to function properly it needs to use cookies, which is information that is stored in your Web browser.
You can consult all the information related to the policy of collection and treatment of cookies on the Cookies Policy page.
Legitimation for data processing
The legal basis for the processing of your data is:
- The consent of the interested party.
- Execution of the contract or the implementation of pre-contractual measures with the data subject, in order to provide a product or service purchased from the Data Subject.
- To comply with legal obligations.
Categories of personal data
The categories of personal data processed by the Data Controller are:
- Identifying data.
- No specially protected categories of data are processed.
Retention of personal data
The personal data provided to the Data Subject will be kept until he/she requests its deletion.
Recipients of personal data
- Mailchimp The Rocket Science Group LLC d/b/a , domiciled in the USA.
More information at: https://mailchimp.com
The Rocket Science Group LLC d/b/a processes the data for the purpose of providing its email marketing services to the Data Subject. - Google Analytics is a web analytics service provided by Google, Inc. a Delaware company headquartered at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”).
Google Analytics uses “cookies”, which are text files placed on your computer, to help the Owner analyze how Users use the Website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
More information at: https://analytics.google.com
You can read about how Google manages privacy regarding the use of cookies and other information on Google’s Privacy Policy page: https://policies.google.com/privacy?hl=es.
You can also see a list of the types of cookies used by Google and its partners and all information regarding their use of advertising cookies at:
Web Browsing
As you browse the Website, non-identifying data may be collected, which may include, IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.
The Web site uses the following third-party analytics services:
- Google Analytics.
The Owner uses the information obtained to obtain statistical data, analyze trends, administer the site, study browsing patterns and to gather demographic information.
The Holder is not responsible for the processing of personal data by websites that you can access through the various links contained in the Website.
Accuracy and veracity of personal data
You agree that the data provided to the Holder are correct, complete, accurate and current, as well as to keep them properly updated.
As User of the Website is solely responsible for the accuracy and correctness of the data submitted to the Website exonerating the Holder of any liability in this regard.
Acceptance and consent
As User of the Web Site declares to have been informed of the conditions on protection of personal data, accepts and consents to the processing of such data by the Holder in the manner and for the purposes stated in this Privacy Policy.
To contact the Owner, subscribe to a newsletter or make comments on this Web site you must accept this Privacy Policy.
Changes in the Privacy Policy
The Holder reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices.
These policies shall remain in effect until modified by other duly published policies.
PRIVACY STATEMENT
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase products from our store, we collect personal information provided by you as part of the buying and selling process
such as your name, address and email.
When you browse our store, we also automatically receive your computer’s internet protocol address (IP)
in order to provide us with information that helps us learn about your browser and operating system.
Email marketing: With your permission, we send you emails about our store, new products and other updates
SECTION 2 – CONSENT
How do you obtain my consent?
When you provide us with your personal information during the completion of a transaction, verification of your credit card, place an order, request shipping or place a return, this implies that you agree to the collection of such information only for that specific reason.
If we request your personal information for a secondary reason, such as for marketing purposes, we will ask you for your express consent directly or give you the option for refusal.
How can I withdraw my consent?
If, for any reason, you change your mind, you can withdraw your consent at any time regarding the collection, use or disclosure of your personal information by sending us an email to contact@clubcontubernio.com or by writing us at: Somos vinateros sl Calle Santa Engracia 108 4º Interior izquierda, Madrid, MD, 28003, Spain
SECTION 3 – DISCLOSURE
We may disclose your personal information if we are required to by law or if you violate our Terms of Service.
SECTION 4 – PAYMENTS
All our credit card payments are made by a provider called STRIPE that stores your credit card data. This is encrypted by the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only to the extent necessary in order to complete the purchase transaction. Once your purchase transaction is complete, all the information is erased.
All direct payment gateways adhere to the standards set out by PCI-DSS as outlined by the PCI Security Standards Council, which is a joint effort for brands such as Visa, MasterCard, American Express and Discover.
The requirements of PCI-DSS help ensure the secure handling of credit card information for stores and their service providers.
For a clear understanding, you may also want to read the Terms of Service for STRIPE here or the Privacy Statement here.
SECTION 5 – THIRD PARTY SERVICES
In general, third party providers used by us only collect, use and disclose your information to the extent necessary allowing them to perform the services provided to us.
However, some third-party providers, such as payment gateways and other payment transaction processors, have their own privacy policy regarding the information that we are required to provide them with regarding purchase related transactions.
We recommend that you read the privacy policy of these providers so you can better understand how your personal information is handled.
Specifically, remember that some providers may be located or have facilities that are in a different jurisdiction than you or us. So, if you wish to proceed with a transaction that involves the services of third-party providers, your information may be subject to the laws and jurisdiction (jurisdictions) where the service providers or their facilities are located.
For example, if you are in Canada and your transaction is processed by a payment gateway based in the United States, then your personal information used to complete the transaction may be subject to disclosure under the laws of the United States, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party site or application, you are no longer governed by this Privacy Policy or the Terms of Service from our website.
Links
When you click on links in our store, you may be redirected outside of our website. We are not responsible for the privacy practices of other sites and we recommend that you read their privacy policies.
SECTION 6 – SAFETY
To protect your personal information, we take reasonable precautions and follow industry best practices to ensure improper loss, misuse, access, disclosure, modifications or destruction of such information.
IF you provide us with your credit card information, this is encrypted using the Secure Socket Layer (SSL) technology and this information is stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional industry-accepted standards. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional industry-accepted standards.
SECTION 7 – AGE OF CONSENT
When using this site, you declare that you are of legal age in your state or province of residence, or that you are of legal age in your state or province of residence and that you have given us your consent to allow any of your dependents or minors to use this site.
SECTION 8 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and corrections take place immediately after they are posted on the website. If we make significant changes to this policy, we will notify you here of the updates so that you are aware of the information we collect, how we collect it and under what circumstances we use and/or disclose it.
If our store is acquired or merges with another company, your information may be transferred to the new owners, wo that we can continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you need to: access, correct, amend or delete the personal information we have regarding your personal data, register a complaint, or simply need further information, please contact our Privacy Compliance Officer by email at contact@clubcontubernio.com or by mail at Somos vinateros sl
[Re: Privacy Compliance Officer]
[Calle Santa engracia 108 4º Interior izquierda, Madrid, MD, 28003, Spain]
