Privacy Policy

BODEGAS ARRAYÁN S.L., (hereinafter BODEGAS ARRAYÁN S.L.), in compliance with Regulation (EU) 2016/679 of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, informs its customers of the policy implemented with regard to the treatment and protection of personal data of those people who voluntarily use the forms to obtain, from BODEGAS ARRAYÁN S.L., any of the services offered, which entail communicating their personal data to BODEGAS ARRAYÁN S.L.

1.- Controller

BODEGAS ARRAYÁN S.L., empresa con domicilio en C/ Jorge Manrique, nº4 28006 MADRID con C.I.F. B88116330 ,inscrita en el Registro Mercantil de Registro Mercantil de Madrid, Tomo: 37.840 Folio: 130 Sección: 8 Hoja: M-674000 Inscripción: 1, informa a sus clientes y usuarios, que es el titular de la presente Web www.arrayan.es, y el responsable de los tratamientos de datos personales, debidamente registrados en la Agencia Española de Protección de Datos, donde se recogen y almacenan los datos personales que los clientes, destinatarios de campañas comerciales, encuestas de satisfacción u otra índole y personas de contacto comunican a BODEGAS ARRAYÁN S.L.

2.- Policy updates

BODEGAS ARRAYÁN S.L. will modify this privacy policy without prior notice whenever it is necessary to adapt it to any change in legislation, regulations, case law or administrative rules or in order to adapt the policy to the instructions issued by the Spanish Parliament, the European Parliament and the Council of the European Union or to changes in the legitimate object of BODEGAS ARRAYÁN S.L. Nonetheless, any amendment of this policy will be published and flagged by BODEGAS ARRAYÁN S.L. Consequently, BODEGAS ARRAYÁN S.L. recommends that its customers read these policies regularly in order to be aware of any changes made in them.

3.- Purpose of processing

The communication of personal data by customers to BODEGAS ARRAYÁN S.L. using its forms can only be understood to take place when they voluntarily use the subscription form feature to contact BODEGAS ARRAYÁN S.L. since, in these cases, processing of the data is inevitable and implicit to the system of consultation and/or trading. For these cases and for those described in the following section, the entity informs its customers that the data is processed for the following purposes: To carry out all the administrative, accounting, tax and logistical procedures related to the acquisition and rendering of the services of BODEGAS ARRAYÁN S.L. in relation to the commercialization of BODEGAS ARRAYAN products.

4.- Processing venue

The files of personal data of which BODEGAS ARRAYÁN S.L. is the controller are processed at:

• -The data processing centre of the web hosting provider, DIGIVAL®, located in Spain.
• -The headquarters of BODEGAS ARRAYÁN S.L. in Madrid, Spain.

and they are processed by technical personnel of BODEGAS ARRAYÁN S.L. who are designated as processors and occasionally by external personal entrusted with maintenance work.

5.- Consent

BODEGAS ARRAYÁN S.L. informs you that this privacy policy sets out all aspects of the processing of personal data that BODEGAS ARRAYÁN S.L. carries out as controller. Additionally, where a customer has a business relationship with BODEGAS ARRAYÁN S.L. or otherwise, and send e-mail or a communication to BODEGAS ARRAYÁN S.L. containing other personal data, that customer is deemed to have given free, unequivocal, specific, informed and express consent for their personal data to be processed by BODEGAS ARRAYÁN S.L. for the purposes established above, and for the purpose of communication or sending documentation.

To that same end, if a customer sends an email or communicates to BODEGAS ARRAYÁN S.L. their personal data by virtue of the position they hold in a company, whether as director, manager, representative and/or any another position as contact person in the company, it will be understood that such communication entails their free, unequivocal, specific, informed and express consent for their personal data to be processed by BODEGAS ARRAYÁN S.L. for the purposes established above, and for the purpose of communication and sending documentation.

Minors

BODEGAS ARRAYÁN S.L. is aware that the Website and the Services and products offered in it may be of interest to minors.
BODEGAS ARRAYÁN S.L. does not permit the collection or processing of any personal data of minors.
Accordingly, only persons of legal age are allowed to register.

6.- Registration on the Website

In order to enjoy some reserved Services (newsletter, list of favourites, etc.), the User must register by entering a specific area of the Website.

Those Special Services are subscribed for via a list of favourites and/or a newsletter, a regular communiqué sent by e-mail to the e-mail indicated by the User through which registered Users are informed of exclusive initiatives that BODEGAS ARRAYÁN S.L. makes available to Users ("Newsletter"). The Newsletter may contain banner ads, inserts and advertising offers from BODEGAS ARRAYÁN S.L. and third parties. At the time of registration, the User will be asked for their personal data, some of which (specifically flagged) will be mandatory (e.g. the e-mail address at which to receive the Newsletter).Entering the other data is optional, at the User's election, but failure to provide it may make it impossible to participate in some of our competitions or initiatives or may result in the User being able to make only partial use of the service.

7.- Identification of the parties to which BODEGAS ARRAYÁN S.L. intends to transfer data or provide third-party access.

Normalmente los sitios BODEGAS ARRAYÁN S.L. únicamente tiene prevista la realización de comunicaciones de datos:

• In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data, as required to fulfil its obligations to the Public Administrations where so required in accordance with the legislation in force in each matter at any given time and, as appropriate, to other bodies such as judges, public prosecutors, courts, Ministry of Finance, government auditors, official ombudspersons or similar.
• Financial institutions, for direct debiting of fees, IT companies for support and maintenance of its computer system, and other professionals as required to provide the arranged service.

BODEGAS ARRAYÁN S.L. also informs its customers that any other transfer of data that must be made will be brought to their attention when so required by the Data Protection Act, notifying them in an express, precise and unambiguous way of the recipients of the information, the purpose for which the data will be used, and the nature of the data transferred, or as appropriate, where the Data Protection Act so requires, the customer's prior specific informed consent will be requested.

Nevertheless, BODEGAS ARRAYÁN S.L. informs its customers that any processing of personal data is subject to the legislation in force in the European Union regarding data protection, established by the Regulation (EU) 2016/679 of 27 April 2016 and its supplementary and secondary legislation. Accordingly, BODEGAS ARRAYÁN S.L. accepts liability for, and guarantees, only the confidentiality of the personal data requested from the customer and accepts no liability whatsoever for processing and subsequent use of the personal data by third-party providers of information society services to the company who might gain access to such data by virtue of providing their services or engaging in their activity.

BODEGAS ARRAYÁN S.L. may obtain and handle personal data provided by customers or recipients of campaigns, in its capacity as processor, under commission from a third party, which will be the controller of the processing in which such information is included. BODEGAS ARRAYÁN S.L. will duly disclose this situation, indicating the controller of the process in question, and the form and address where the rights of Access, Rectification, Cancellation, Opposition, Deletion, Limitation of processing treatment and Portability of the data in question may be exercised.

The term "third-party providers of information society services" will be understood to include, but not be limited to, natural or legal persons providing the following services: a) Transmission by a communication network of data provided by the recipients of the service. b) Access to the aforementioned network. c) Data storage or hosting services. d) Provision of content or information.

8.- Data quality

BODEGAS ARRAYÁN S.L. warns customers that, apart from legally-appointed representatives, no customer may use the identity of another person and communicate their personal data; customers may only provide personal data corresponding to their own identity, which must be appropriate, pertinent, current, accurate and true. To that end, the customer will be the sole party liable for any direct and/or indirect damage caused to third parties or to BODEGAS ARRAYÁN, S.L. for the use of personal data of another person or for providing false, erroneous, out-dated, inappropriate or non-pertinent personal data about themselves. Likewise, customers who use the personal data of a third party will be required to make the disclosure to the latter as established in Regulation (EU) 2016/679 of 27 April 2016 for cases where the personal data was not collected from the interested party, and will be liable for the consequences of failure to make such disclosure.

9.- Exercise of the rights of access, opposition, rectification, cancellation, deletion, limitation of processing and portability of the data.

BODEGAS ARRAYÁN S.L. informa al cliente de la posibilidad de ejercitar sus derechos de acceso, oposición, rectificación, cancelación, supresión, limitación del tratamiento y portabilidad de los datos, dirigiéndose a BODEGAS ARRAYÁN S.L., sita en C/ Duque de Sevilla nº 14 28002 MADRID con C.I.F. B88116330, a través de correo electrónico a la dirección: privacidad@arrayan.es, argumentando su derecho en función de la Sección 2 del Reglamento Europeo 2016/679 de 27 de abril de 2016”.

10.- Security measures adopted in connection with the processing of personal data

BODEGAS ARRAYÁN S.L. informs customers that, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016, it has adopted the necessary technical and organizational measures to ensure the security of personal data and avoid alteration, loss, treatment or unauthorised access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed. BODEGAS ARRAYÁN S.L. also assures customers that it will fulfil its duty of professional secrecy with regard to customers' personal data and its duty to safeguard them.