Personal Data Treatments
In compliance with the provisions of the applicable Data Protection regulations, we inform you that the data will be processed as the Data Controller by CIRIA AYALA S.L., with the purpose of providing the service requested by the user through our contact form. For this purpose, we need you to check the box indicating acceptance of this policy; if you do not do so, we will not have your express consent and therefore, we will not be able to respond to your request.
For the proper provision of the services offered by CIRIA AYALA S.L., it is necessary for the user to answer each and every one of the questions on the forms on our website. Likewise, the user declares that they are of legal age.
The processing of the requested personal data will also have the purpose of sending commercial information regarding products and services currently and in the future offered by CIRIA AYALA S.L.; this information includes advertising and promotional communications, through postal mail, email, or any other means. To carry out this processing, it is necessary for the user to check the box provided for this purpose on the website form.
Given the personal nature of the data provided, CIRIA AYALA S.L. undertakes to treat them with strict confidentiality and to maintain due secrecy. To this end, the entity has implemented appropriate security measures according to the risk analysis carried out.
We inform you that your data will not be transferred to third parties nor will international data transfers be made, except for legal obligation or necessary transfer only and exclusively when it is necessary for the provision of the requested service, in which case consent will be requested for this purpose.
Rights
The data collected and processed will be retained for a limited period of time, which will be necessary to comply with the legal obligations imposed on CIRIA AYALA S.L. by the various applicable regulations.
The user, as the data subject, can exercise the following rights at any time at the address indicated in the Legal Notice:
Right of access: the data subject may request from the Controller the data processed and, if so, which specific personal data are being processed.
Right to rectification: the data subject may request from the Controller the correction of their personal data if they are not accurate.
Right to erasure: the data subject may request from the Controller the erasure of their personal data.
Right to object: the data subject may object to the Controller processing their personal data.
Right to restriction of processing: the data subject may request from the Controller that their personal data not be processed temporarily in specific cases.
Right to data portability: the data subject may request from the Controller their automated data in a structured, commonly used, and machine-readable format.
More information about your rights at www.agpd.es.
Likewise, you have the right to lodge a complaint with the Spanish Data Protection Agency.
Cookies
The data that will be stored in each ‘cookie’ are as follows: language, date and time of the user’s last visit to our website, content design that the user chose on their first visit to our website, and security elements involved in controlling access to restricted areas.
From this website, we study the preferences of our users (demographic characteristics, traffic patterns, and other aggregated information to understand the behavior and profile of our users). Tracking our users’ preferences helps us improve our website and services.
To do this, we use the Google Analytics system (Google tool for measuring website traffic), which may store cookies on your computer to help us collect information that will be used solely for statistical purposes and for studying the behavior of users of our website. The information collected by the cookie (including the IP address) is stored and transmitted to Google servers in the United States. Google will use this data to collect your activity on our site and generate reports for the purpose of identifying your use of the site. Google may provide this information to third parties as required by applicable law. Acceptance of this policy implies acceptance of Google’s use of the information collected by Google Analytics.
You can configure your browser to reject the storage of cookies on your computer. You can find more information in our Cookie Policy.
Comprehensive information on the processing of personal data, data controller
Who is responsible for processing your data?
– Identity: CIRIA AYALA S.L.
– Postal Address: C/Sol, 12, 26223 Hormilleja
– Email: bodegas@cunadereyes.es
PURPOSE OF PROCESSING
For what purpose do we process your personal data?
At CIRIA AYALA S.L., we process the information provided by interested parties for the following purposes:
– Management and administration of the contractual relationship established with suppliers, clients, and employees.
– Providing interested parties with commercial information about products and services that may be of interest to them.
– Video surveillance of the premises in case you access our facilities.
– Responding to your queries and questions if you submit any through the website.
– Evaluating your candidacy for a future job vacancy, in case you have submitted your CV to us.
How long will we keep your data?
The personal data provided will be kept:
a) For as long as the commercial relationship is maintained.
b) Until deletion is requested by the data subject.
c) Information that must be retained for a specific period by legal requirement will not be deleted until the time specified by law has elapsed.
Legitimization of processing
What is the legal basis for processing your data?
The legal basis for processing your data is as follows:
– Execution of the contract in case you are an employee, client, or supplier.
– Legitimate interest in case you have been recorded by the surveillance cameras.
– Consent of the data subject provided on the website in case you make a request or inquiry through our contact form or subscribe to the newsletter or blog.
– Consent of the data subject in case you have submitted your CV.
– Legitimate interest in sending advertising materials.
Recipients of the provided data
To whom will your data be disclosed?
a) The data will be disclosed to the following entities by legal requirement:
– Social security agencies (in the case of employees)
– Tax administration (in the case of employees, suppliers, and clients)
– Other public administration bodies (in the case of employees, suppliers, and clients)
– Law enforcement agencies (in the case of video surveillance)
– Insurance companies (in the case of employees)
b) The data will be disclosed to the following entities by contractual requirement:
– Banks, savings banks, and rural savings banks
c) The data (images) of Workers, Clients, and event attendees will be disclosed with their consent to the following Social Networks:
– Facebook
– Instagram
Rights of the data subjects
What are your rights?
Any person has the right to obtain confirmation as to whether or not CIRIA AYALA S.L. is processing personal data concerning them.
Right of access: the data subject may request from the Controller the data processed and, if so, which specific personal data are being processed.
Right to rectification: the data subject may request from the Controller the correction of their personal data if they are not accurate.
Right to erasure: the data subject may request from the Controller the deletion of their personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Right to object: the data subject may object to the Controller processing their personal data.
Right to restriction of processing: the data subject may request from the Controller that their personal data not be processed temporarily in specific cases.
Right to data portability: the data subject may request from the Controller their automated data in a structured, commonly used, and machine-readable format.
How can rights be exercised?
By sending a written request to CIRIA AYALA S.L. – C/Sol, 12 – 26223 – Hormilleja.
What avenues for complaints exist?
If you believe that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency, C/ Jorge Juan, 6. 28001 – Madrid.