Privacy policy

This privacy policy applies to the website: https://www.gaztañaga.eus.
The purpose of this privacy policy is to inform users of the website:

The methods used to collect personal data. Personal data is considered to be any information that can identify the user. This includes first and last name, age, postal address, e-mail address, user location or IP address.
What are the rights of users in relation to this data.
Who is responsible for the processing of the personal data collected and processed.
To whom this data is transmitted.
Where applicable, the policy on “cookies” files.

These complete privacy policy, the legal notice and the general conditions of use that the user can consult at: Legal notice.

GENERAL PRINCIPLES FOR THE COLLECTION AND PROCESSING OF DATA

In accordance with the provisions of article 5 of the European Regulation 2016/679, the collection and processing of user data respects the following principles:

Legality, fairness and transparency: data may be collected and processed only with the consent of the user who is the owner of such data. Whenever personal data are collected, the user will be informed that they are collected, and the reasons why such data are collected.
Limited purposes: the collection and processing of data is carried out for one or more purposes specified in these general conditions of use.
Minimisation of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the website will be collected.
Data retention for a limited period of time: data will be retained for a limited period of time, of which the user is informed.
Integrity and confidentiality of the data collected and processed: the data controller undertakes to ensure the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of article 6 of the European Regulation 2016/679, the collection and processing of personal data may not take place unless at least one of the conditions listed above is met:

The user has expressly consented to their processing.
The processing is necessary for the proper performance of the contract.
The processing is carried out in response to a legal obligation.
The processing is explained by a need to safeguard the vital interests of the person concerned or of a natural person.
The processing can be explained by a necessity for the performance of a task carried out in the public interest or arising from the exercise of public authority.
The processing and collection of personal data are necessary for the purposes of legitimate and private interests pursued by the controller or by third parties.

PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF BROWSING THIS WEBSITE

Data collected and processed and how it is collected

The personal data collected on the website www.gaztañaga.eus are as follows:

First name.
Surname.
Your address.
E-mail address.
Bank details.

This data is collected when the user carries out one of the following operations on the website:

When the user contracts a service via the site.

In addition, on the occasion of a payment on the site, proof of the transaction containing the order form and the invoice will be kept on the site editor’s computer systems.

The data controller shall store all the data collected in its computer systems on the site under reasonable security conditions for a period of: 2 months.

The data is collected and processed for the following purposes:

The data are recorded in order to offer a service provided by Sidrería Gaztañaga.

Transmission of data to third parties

The personal data collected by the website may be transmitted solely and exclusively to GIPUZKOAKO SAGARDOGILEEN ELKARTEA; Association with registered office at NABARRA OÑATZ 7 BAJO, 20115, ASTIGARRAGA (SPAIN) registered in the Territorial Delegation of Labour and Social Security of Gipuzkoa; with CIF G20132650 and CIE number: 2446.

Data hosting

The website https://www.gaztañaga.eus is hosted by: Sidrería Gaztañaga, whose registered address is at: Barrio Buruntza 0, Andoain (Gipuzkoa).

Contact number: 943 59 19 68.

The data collected and processed by the website will be transferred to the following countries: Spain.

DATA CONTROLLER AND DATA PROTECTION OFFICER

Person responsible for data processing

The person responsible for the processing of personal data is: Axier Gaztañaga.

He can be contacted by e-mail: info@sidreriagaztanaga.com.

The person in charge of data processing is responsible for determining the purposes and means used for processing personal data.

Obligations of the data controller

The data controller undertakes to protect the personal data collected, not to pass it on to third parties without the user having been informed and to respect the purposes for which the data was collected.

The website is equipped with an SSL certificate in order to ensure that the information and the transmission of data circulating on the site are secure.

An SSL certificate (“Secure Socket Layer” Certificate) guarantees the security of the data exchanged between the user and the site.

The data controller also undertakes to notify the user of any rectification or deletion of data, unless this involves disproportionate formalities, costs or formalities.

Should the integrity, confidentiality or security of the user’s personal data be compromised, the data controller undertakes to inform the user by any means.

Data protection officer

Furthermore, the user is informed that the person designated as Data Protection Officer is: Axier Gaztañaga.

The function of the Data Protection Officer is to ensure compliance with national and supranational provisions relating to the collection and processing of personal data. He or she can be appointed (Data ProtectionOfficer).

The Data Protection Officer can be contacted by e-mail: info@sidreriagaztanaga.com.

USER RIGHTS

In accordance with the regulations relating to the processing of personal data, the user has the rights listed below.

In order for the data controller to comply with your request, you must provide the data controller with your first and last name and e-mail address.

The data controller is obliged to reply to the user within 30 days.

Presentation of the user’s rights with regard to data collection and data processing

a. Rights of access, rectification and erasure

The user may learn about, update, modify or request the deletion of data concerning him/her by following the procedure below:

Send an e-mail to the data controller, indicating the purpose of your request and using the contact e-mail address provided above.

b. Right to data portability

The user may request the portability of his/her personal data held by the website to another website by following the procedure below:

The user must submit the request for portability of his personal data, indicating the purpose of his request and using the contact e-mail address indicated above.

c. Right to restrict and object to the processing of data

The user may request the restriction of or object to the processing of his/her personal data by the website, without the website being able to refuse, unless it can demonstrate the existence of legitimate and compelling reasons, which may prevail over the interests, rights and freedoms of the user.

To request the limitation of the processing of their data or to object to the processing of their data, the user must follow the following procedure:

The user must submit a request to limit the processing of his personal data, indicating the purpose of his request and using the contact e-mail address indicated above.

d. Right not to be subject to a decision based exclusively on an automated procedure

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated procedure in the event that the decision could produce legal effects concerning him or her, or significantly affect him or her in a similar way.

e. Right to determine the destination of data after death

The user is reminded that he/she can organise the destination of his/her data collected and processed in the event of death.

f. Right to appeal to a competent supervisory authority

In the event that the data controller decides not to respond to the user’s request, and the user wishes to challenge that decision, or if he/she feels that one of his/her rights listed above has been violated, he/she has the right to appeal to the Spanish Data Protection Agency or any competent judge.

g. Personal data of minors

In accordance with the provisions of Article 8 of the European Regulation 2016/679 only persons 15 years of age or older may consent to the processing of personal data.

If the user is a minor under the age of 15, the consent of a legal representative is required for personal data to be collected and processed.

The site editor reserves the right to verify by all means that the user is over 15 years of age, or has obtained the consent of a legal representative before browsing the website.

CONDITIONS OF MODIFICATION OF THE PRIVACY POLICY

This privacy policy can be consulted at any time at the following address:

https://www.gaztañaga.eus.

The editor of the website reserves the right to modify it in order to ensure its conformity with the regulations in force.

The user is therefore invited to consult this privacy policy regularly in order to be informed of the latest changes.

ACCEPTANCE BY THE USER OF THE PRIVACY POLICY

By browsing the website, the user accepts that he/she has read and understood this privacy policy and accepts the conditions, particularly with regard to the collection and processing of his/her personal data, as well as the use of “cookies” files.