Privacy policy

Legal Regulations and Ownership

The company BODEGAS BORSAO, S.A. with NIF A-50.889.955 will process your data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter GDPR), of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of December 5, 2018, on the Protection of Personal Data and Guarantee of Digital Rights.

Data Controller

• Trade name: BODEGAS BORSAO, S.A.
• NIF: A-50.889.955
• Address: Camino del Tejar s/n, 50540 BORJA, Zaragoza, Spain
• Email: protecciondatos@bodegasborsao.com.

Data Being Processed

In order to specify as much information as possible about each data processing, it will be divided into different blocks according to the different personal data processing activities. The purposes of such processing can be observed in detail in the following section.

The following information is collected, which will be processed in accordance with the GDPR and the LOPDGDD:

1. In order to manage the candidates for job positions in the organization, the following types of data are processed, which may be collected in paper format, via email, or through the web form:

• Identifying data.
• Contact information.
• Academic data.
• Employment information.

1. In order to address the inquiries that may be made by interested parties, the following types of data are processed, which are collected through the web form:

• Identifying data.
• Contact information.

1. For the management of suppliers and their billing, the following types of data are processed, which are collected through direct communication with the interested party:

• Identifying data.
• Contact information.
• Bank details.

1. For the management of clients and their billing, the following types of data are processed, which are collected through direct communication with the interested party:

• Identifying data.
• Contact information.
• Bank details.

1. For the management of web clients and their billing, the following types of data are processed, which are collected through the web registration form:

• Identifying data.
• Contact information.
• Bank details.

1. For sending information about the BORSAO Friends Club, the following data is processed, which is collected through the web form:

• Identifying data.
• Contact information.

1. For the visitor registration, the following types of data are processed, which are collected by completing that registration:

• Identifying data.
• Contact information.

1. For video surveillance, the following types of data are processed, which are collected through cameras in the facilities:

• Images.

Purpose of Data Processing

At BODEGAS BORSAO, we use your personal data in accordance with the legislation for the following purposes:

1. Management of the candidates for job positions in the organization.
2. Manage the inquiries that may be made by interested parties and respond to them.
3. Management of suppliers and the necessary billing with them.
4. Management of clients and the necessary billing with them.
5. Management of web clients, managing purchases, payments, and shipments.
6. Management of members of the BORSAO Friends Club, for sending promotions and commercial communications.
7. Visitor registration for the purpose of ensuring physical security.
8. Video surveillance for the purpose of ensuring physical security.

The data collected through the website will not be used to make automated decisions.

Legitimacy for Data Processing

The legal basis for the processing of your data is as follows, also separated by the processing activities shown in the previous section:

1. The data processed to manage the candidates for job positions in the organization is based on the consent of the interested party.
2. The legal basis of the data processed to address the inquiries that may be made by the interested parties is the legitimate interest of the interested party.
3. The data processed for the purpose of managing suppliers and the necessary billing with them is based on the contractual relationship between both companies.
4. The data processed for the purpose of managing clients and the necessary billing with them is based on the contractual relationship between both companies.
5. The data processed for the purpose of managing web clients will be processed based on the consent of the interested party.
6. The data processed for the purpose of managing the BORSAO Friends Club will be processed based on the consent of the interested party.
7. The data processed for visitor registration has a legal basis in public interest, to ensure the safety of people, property, and facilities.
8. The data processed for video surveillance has a legal basis in public interest, to ensure the safety of people, property, and facilities.

Temporary Limitation of Data Processing

Your personal data will be retained for the shortest time possible to fulfill the purpose of the processing, in accordance with the data retention policy of the General Data Protection Regulation 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, to comply with the required legal obligations.

The data you have provided will be retained as long as necessary for the purposes previously indicated, or will also be stored for the time required by various applicable legislation.

If you wish to limit the period of time in which your personal data is processed, you must exercise your rights as indicated below.

Again grouped by processing activity, the retention period for the data is as follows:

1. The information processed for the management of candidates for job positions in the organization will be stored for the period necessary for the purpose for which the data is collected.
2. The information processed for the purpose of managing the inquiries received and responding to them will be retained for the period necessary for management, resolution, and subsequent follow-up of that inquiry.
3. The information processed for the management of suppliers will be stored until the contractual relationship between the parties ends, or until you exercise your rights stating that you do not want BODEGAS BORSAO to continue processing your data.
4. The information processed for the management of clients will be stored until the contractual relationship between the parties ends, or until you exercise your rights stating that you do not want BODEGAS BORSAO to continue processing your data.
5. The information processed for the management of web clients will be stored until the contractual relationship between the parties ends, or until you exercise your rights stating that you do not want BODEGAS BORSAO to continue processing your data.
6. The data used for managing the BORSAO Friends Club, for sending promotions and commercial communications will be stored until you withdraw your consent or exercise your rights named below.
7. The information processed for visitor registration will be stored for the period necessary for the purpose for which the data is collected.
8. The data processed in video surveillance will be stored for a maximum period of 30 days.

Recipients of Your Data

Your data will not be transferred to other organizations for any purpose other than that which has been informed to you, except in the case of legal requirement, and may only be transferred to organizations related to BODEGAS BORSAO to manage applications for job positions or for the administrative management of contracts and invoices.

No international transfers of your data are anticipated. Should any be made in the future, you will be informed of this fact.

Data Secrecy and Security

BODEGAS BORSAO is committed to the use and processing of the personal data of users, respecting their confidentiality and using it in accordance with the purpose thereof, as well as fulfilling its obligation to safeguard it and adapting all measures to avoid alteration, loss, processing, or unauthorized access, in accordance with the provisions of current data protection regulations.

BODEGAS BORSAO has adopted the necessary technical and organizational measures to guarantee the security and integrity of the data, but BODEGAS BORSAO cannot guarantee absolute security against data breaches through fraudulent access by third parties.

Rights Regarding the Processing of Your Data

You have the right to obtain confirmation as to whether or not BODEGAS BORSAO is processing personal data concerning you.

You, as the interested party, have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

We remind you that you have the right to withdraw your consent at any time, which entails withdrawing the data that the company holds about you. To do this, you must send an email to protecciondatos@bodegasborsao.com, providing your ID, or send it by postal mail to the address indicated above.

In certain circumstances, you may request the limitation of the processing of your data, in which case we will only retain them for the exercise or defense of claims.

We inform you that you may oppose the processing of your data at any time. In such a case, we will stop processing the data, unless there are compelling legitimate grounds, or for the exercise or defense of possible claims.

You will have the right to data portability, that is, to have the personal data you provided transmitted directly to another controller in a structured, commonly used, and machine-readable format, when technically feasible.

To exercise the rights mentioned above or to make any claim about how we have processed your personal data, send an email to protecciondatos@bodegasborsao.com.

If you still consider that your personal data has not been processed appropriately according to the law, you may file a complaint with the corresponding data protection authority, being the Spanish Data Protection Agency the appropriate one in the case of Spanish territory, located at C/ Jorge Juan, 6. 28001 – Madrid.

Acceptance and Consent

You declare that you have been informed of the conditions regarding the protection of personal data, accepting and consenting to the processing of the same by BODEGAS BORSAO in the manner and for the purposes indicated in this privacy policy, based on the processing in which you are participating.

BODEGAS BORSAO reserves the right to modify this policy to adapt it to legislative or jurisprudential novelties, as well as to industry practices. In such cases, BODEGAS BORSAO will announce the changes made on this page with reasonable notice before they come into effect.