Privacy Policy
DEALTURA, S.L. (hereinafter, “DEALTURA”) as owner of the website www.dealturawines.com and associated iOS / Android mobile applications (hereinafter, the “Portals”) is aware of the value of your personal information, so it is concerned and constantly strives to protect the privacy of its users.
This document has been prepared in accordance with art. 13 of the EU Regulation 2016/679 (hereinafter the “GDPR”) in order to allow you to know our privacy policy, to understand how your personal information is treated when you browse our Portals and, where appropriate, to give your consent to the processing of your personal data in an express and informed manner.
The information and data provided by you will be treated in accordance with the provisions of the RGPD and the confidentiality obligations that inspire the activity of DEALTURA.
In accordance with the rules of the GDPR, the processing carried out by DEALTURA will be based on the principles of legality, fairness, transparency, purpose limitation, data minimization, accuracy, integrity and confidentiality.
INDEX
Responsible for the treatment
Personal data subject to processing
Navigation data
Data provided voluntarily by the data subject
Cookies
Purpose of treatment
Legal basis and mandatory or optional nature of processing
Recipients of personal data
Retention of personal data
Rights of the interested party
Modifications
1. Data Controller
The data controller is DEALTURA, S.L. with C.I.F. B86069093, registered office at Gustavo Fernández Balbuena, 11 – 28002 (Madrid) and contact email address privacy@DEALTURA.com and socios@DEALTURA.com.
2. Personal data subject to processing
We inform you that DEALTURA will only process the personal data that are strictly necessary for the correct navigation through the Portals and for the purposes described in the following point 3 “Purposes of processing” (hereinafter, “Personal Data”).
The Personal Data processed through the Portals are the following:
a. Navigation data
The computer systems and software procedures used for the operation of the Portals acquire, during their normal operation, some Personal Data whose transmission is implicit in the Internet communication protocols. This information is not collected to be associated with identified users. However, by its very nature it could, through processing and association with data held by third parties, allow the identification of such users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Portals, the URI (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the operating system and the computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Portals and to check their correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used to determine responsibility in case of hypothetical computer crimes against the Portals or third parties.
b. Data provided voluntarily by the data subject
If you are a registered user (“Customer”), you will be asked for: name and surname, email, postal address, telephone, billing information, date of birth, gender. In the case of customers who are legal entities, your company name, postal address, billing information, name and surname, email, telephone number of the representative will be required.
If you are a (potential) supplier (“Supplier”), you will be asked for: your company name, postal address, billing information, name and surname, email, telephone number of the representative.
If you are a candidate for employment (“Candidate”), you will be asked for: name and surname, email, telephone and curriculum data.
When you use purchase certain products on the website (for example, the “gift card” or the “gift subscription to The Box”), or when you sponsor a potential customer, we may process Personal Data of third parties that you submit to DEALTURA. With respect to these cases, you are the independent owner of the processing, assuming all obligations and responsibilities under the law. In this regard, you grant the broadest possible indemnification in respect of any dispute, claim, request for damages arising from the processing, etc. that may come to DEALTURA from third parties whose Personal Data have been processed through the functionalities of the Portals in violation of the applicable regulations on the protection of personal data. In any case, if you provide or otherwise process Personal Data of third parties in the use of the Portals, you hereby warrant – assuming all related liability – that this particular instance of processing is based on an appropriate legal basis in accordance with art. 6 of the GDPR legitimizing the processing of the information in question.
c. Cookies
The Portals use third-party analytical cookies to provide you with services that are tailored to the preferences you have expressed while browsing the web. You can find specific information about this section by accessing the Cookies Policy link.
3. Purposes of treatment
The processing that we intend to carry out, with your express consent where necessary, has the following purposes:
Category of interested parties | Purpose |
|---|---|
User visiting the Portals
| Usability and quality analysis for the improvement of our services
|
Customer |
|
All of the above | Comply with the legal, accounting and tax obligations that correspond to DEALTURA. |
4. Legal basis and obligatory or optional nature of the treatment
Purpose | Legitimation |
|---|---|
Usability and quality analysis to improve our services. | The fulfillment of the contractual relationship (in particular, the Terms of Use) (art. 6. 1 b) of the GDPR). |
| The processing is necessary for the maintenance of the contractual relationship or to respond to requests from the data subject (art. 6. 1 b) of the GDPR). |
Sending of commercial communications about DEALTURA products and services, including the magazine.
Development of commercial profiles through automated processing in order to develop commercial actions on DEALTURA products, based on the purchase history. |
|
| The processing is necessary to fulfill the requests of the data subject (art. 6. 1 b) of the GDPR). |
Comply with the legal, accounting and tax obligations that correspond to DEALTURA. | The regulations applicable in each case (art. 6. 1 c) of the GDPR). |
5. Recipients of personal data
Your Personal Data may be shared, for the purposes set forth in Section 3 above, with:
a. subjects that typically act as data processors, i.e.: i) individuals, companies or professional firms that provide assistance and advice to DEALTURA in accounting, administrative, legal, tax, financial and credit collection matters; ii) subjects with whom it is necessary to interact for the provision of services (e.g. hosting providers, order shipping company); iii) subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks) (hereinafter, collectively, the “Recipients”);
b. persons, entities or authorities to whom it is mandatory to communicate your Personal Data, by virtue of legal provisions or orders from authorities;
Some of your Personal Data is shared with Recipients that may be located outside the European Economic Area. In this regard, DEALTURA ensures that the processing of your Personal Data by these Recipients is carried out in accordance with the GDPR. Indeed, transfers may be based on an adequacy decision, on contractual clauses approved by the European Commission or on another appropriate legal basis.
Further information can be obtained by contacting us directly (see contact details given in paragraph 7. Rights of data subjects).
6. Data Retention
DEALTURA only stores your personal information to the extent that we need it in order to use it for the purposes for which it was collected, and according to the legal basis for processing it in accordance with applicable law. Your personal information will be kept as long as there is a contractual and/or commercial relationship or as long as you do not exercise your right of deletion, cancellation and/or limitation of the processing of your data.
Once the relationship with you has ended for any of the reasons mentioned above, the information will be kept properly blocked, without giving any use, while it may be necessary for the exercise or defense of claims or may derive some kind of judicial, legal or contractual liability of its treatment, which must be addressed and for which its recovery is necessary.
7. Rights of the interested parties
At any time, you may exercise your rights of access, rectification, deletion, limitation, cancellation, portability and opposition regarding your personal data by communicating with DEALTURA whose contact details we indicate below:
- Registered Office: Calle Gustavo Fernández Balbuena, 11 – 28002 (Madrid)
- E-mail address: socios@DEALTURA.com
- Telephone: 91 198 12 37 (Monday to Friday from 10.00 a.m. to 7.00 p.m.)
You may also contact our Data Protection Officer (“DPO”) at the following email address: privacy@DEALTURA.com
Said communication must include name and surname, petition in which the request is specified, address for notification purposes, date, signature and photocopy of ID card or other valid document that identifies you. The exercise of these rights is free of charge.
In case you have any dispute regarding the protection of your personal data, you may file a complaint with the AEPD (www.aepd.es).
8. Modifications
DEALTURA reserves the right to modify or simply update the content, in part or in whole, also due to changes in the applicable legislation. Consequently, we invite you to regularly visit this section to know the latest and most updated version of the privacy policy in order to be always updated on the data collected and the use made by DEALTURA.
In any case, when significant changes occur, the user will be notified through a notice on the Portals in order to offer the possibility to review the changes before they become effective.
More information about the treatment of your data
It is possible that through the Portals the redirection or access by Users to third party websites (service providers or distributors, among others) may be allowed. In any case, if you choose to leave any of our Portals through links to websites not belonging to our entity, neither the Portals nor their legal representatives are responsible for the content or the veracity of the privacy policies that such third parties may have, nor for the cookies that they may store on the user’s computer.
