Rioja Paired Privacy Policy

Privacy Policy

Who We Are

This Privacy Policy governs the collection, use, and storage of personal data by this website. The data controller responsible for your personal data is identified in the site’s Disclaimer. By using this website, you acknowledge that you have read and understood this policy.

What Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, username, or similar identifiers provided voluntarily (e.g. via contact forms).
Contact data: email address, telephone number, and postal address where provided.
Technical data: IP address, browser type and version, time zone, operating system, and device type, collected automatically when you visit the site.
Usage data: information about how you navigate and interact with this website.
Communications data: any correspondence you send us, including enquiries submitted via contact forms.

We do not knowingly collect personal data from children under the age of 16. If you believe a minor has provided us with personal data without parental consent, please contact us so we may delete it.

How We Collect Your Data

We collect personal data through the following means:

Direct interactions: data you provide when completing forms, subscribing to services, or contacting us.
Automated technologies: data collected automatically as you browse the site, including cookies and similar tracking technologies (see our Cookie Policy).
Third parties: data received from analytics providers such as Google Analytics.

How We Use Your Data

We use the personal data we collect for the following purposes:

To operate, maintain, and improve this website and its content.
To respond to enquiries and provide requested information or services.
To analyse website usage and measure the effectiveness of our content.
To comply with legal obligations to which we are subject.
To protect the security and integrity of the website.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that another purpose is compatible with the original. We will notify you if we intend to use your data for a materially different purpose.

Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

Consent: where you have given clear consent for us to process your data for a specific purpose.
Contract: where processing is necessary to perform a contract with you, or to take steps at your request prior to entering into one.
Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.
Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your rights and interests.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and the applicable legal requirements.

Sharing Your Data

We do not sell, rent, or trade your personal data. We may share your data with trusted third parties in the following limited circumstances:

Service providers: third parties who provide IT, analytics, or administrative services on our behalf and who are bound by appropriate data processing agreements.
Legal authorities: where required by law, court order, or other legal process.
Business transfers: in connection with any merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy.

International Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms, in accordance with applicable data protection law.

Your Rights

Under the General Data Protection Regulation (GDPR) and applicable national law, you have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data where there is no compelling reason for its continued processing.
Right to restriction: to request that we limit the processing of your data in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details provided in the site’s Disclaimer. We will respond to all legitimate requests within one month. If you are not satisfied with our response, or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the supervisory authority in your country of residence.

Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to your data is restricted to those with a legitimate need to process it, and they are subject to a duty of confidentiality. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator where we are legally required to do so.

Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections