Privacy Policy

1. Responsible for the treatment

For the purposes of the provisions of current legislation on the protection of personal data, by means of this Privacy Policy, Codorniu, S.A. (hereinafter, "CODORNIU") informs the Users (hereinafter, the "User" or "Users") of the Website (hereinafter, the "Website") about its policy for the protection of personal data collected from the Users of the Website, so that they may freely and voluntarily determine whether they wish to provide CODORNIU with the personal data that may be required of them or that may be obtained about them on the occasion of their access and use of the services offered on the Website. The only personal data to which CODORNIU will have access through the Website will be those that the User voluntarily provides and which will be processed in accordance with the provisions of Organic Law 15/1999, of December 13, 1999, on the Protection of Personal Data (hereinafter, "LOPD"), and its implementing regulations. In this sense, it is necessary that the User knows that for the provision of the services offered through the Website, personal data will be requested, the collection of any of which is absolutely necessary for the provision of the services that the User may have requested. In compliance with the regulations in force, CODORNIU expressly states that it has adopted all the technical and organizational measures necessary to guarantee the security and integrity of the personal data processed, as well as to prevent their possible loss, alteration and/or access by unauthorized third parties.

2. Personal data processed

Without prejudice to the provisions indicated in each of the forms on the Website, the personal data provided by the Customer will form part of a file owned by CODORNIU for the purpose of managing and attending to your request, as well as to send you information about products and services, both by postal and electronic means. You may exercise your rights of access, rectification, cancellation and opposition, as well as revoke the consent given for the sending of commercial communications, by sending an e-mail to the address reservas@codorniu.es or a letter addressed to the Legal Department of Codorniu, Av. Països Catalans, 38, 2ª Planta, 08950, Esplugues de Llobregat, Barcelona.

3. Purposes of the treatment, legitimate bases and conservation period

Codorníu will only process your personal data for the purposes described in this privacy policy. These purposes, with their respective legitimate bases and retention periods, are:

- To verify that you are of legal age. At Codorníu we must verify that you are of legal age to legally purchase alcoholic beverages. In this case, we process your data by legal obligation and for the time strictly necessary to comply with this obligation. For more information, please see our cookies policy.

- Manage your queries. We also need to process your data in order to manage and resolve your queries sent through our contact form, in which case the legitimate basis for processing will be your consent. In this case, we will keep your data for the time necessary to adequately respond to your query and for three months thereafter.

- To open and maintain your user account to manage your orders. The processing of your data to open your user account is legally based on your consent. The data will be retained for as long as you remain registered and for up to five years thereafter for possible legal action.

- Formalize and execute the contract of sale of products or services through our website. When you decide to purchase a product or contract a service from Codorníu, we need to process a series of data in order to fulfill the contract. In this purpose we can include different treatments such as the issuance of invoices or proof of purchase, the collection of products, the shipment of products to your home, the debt claim by any means in case of non-payment, communication with you by any means to send information about the status of your order or the management of warranties, cancellations and returns. In particular, it may be necessary to process identification, contact and economic data.

In any of the above cases, we will process your data on the legal basis of contractual performance.

These data will be retained for up to 5 years after you lose your customer status in order to exercise or defend ourselves from legal actions arising from our relationship. You will cease to be considered a customer 24 months after your last purchase. Invoices and other accounting documents that may contain your personal data will be kept for 6 years in compliance with the document retention obligations established in the Commercial Code.

- Personalize your bottles according to your order. In this case, we will process the personal data you enter in accordance with the execution of the contract. This data will be kept for up to five years after you lose your customer status.

- Manage your participation in sweepstakes and other promotions. If you decide to benefit from any of our promotions, we will process your data to manage your participation and, where appropriate, to communicate and deliver your prize. The legal basis for the processing will be your consent, given at the time of completing the form and confirming your participation. You may revoke your consent at any time by contacting us. We will keep your data for the purpose described for the duration of the promotion, unless you withdraw your consent. Thereafter, we will retain your data for up to 5 years, which is the statute of limitations for legal action.

- Advertising purposes when you are a Codorníu customer, i.e. when you have purchased any of our products.

To send you commercial communications by any means, including electronic means, about wine and wine tourism products and services offered by us, by the brands we market and by other companies in the Unideco group. When you are a Codorníu customer because you have made a purchase, we may send you commercial communications by any means about wine and wine tourism products and services (visits and leisure activities in wineries and vineyards) offered by us, by the brands we sell and by other wine companies in the Unideco group.

This processing will take place on the basis of our legitimate interest, consisting in building customer loyalty in order to ensure the continuity of our relationships and our business. In this respect, we inform you that we have duly weighed the various interests at stake to ensure that this data processing does not infringe your rights and freedoms. If you wish, you can contact us to ask for a copy of the weighting examination carried out.

These data will be kept as long as you are a customer or until you exercise your right of opposition, which you can do at any time by contacting us or unsubscribing from our newsletter from any of the communications you receive.

Communicate your personal data to companies of the Unideco group to send you commercial communications by any means about their wine and wine tourism products and services. If you are a Codorníu customer, we may communicate your personal data to the different companies that make up the Unideco business group, in which Codorníu is integrated. All the companies of the Unideco group belong to the wine sector and the sole purpose of the communication of data will be to send you commercial communications by any means about their wine products and services and wine tourism (visits and leisure activities in wineries and vineyards).

The data processing described in this section is carried out on the basis of our legitimate interest, consisting of building customer loyalty by sending them content from the wine sector that may be of interest to them, thereby maximizing commercial relations and ensuring the continuity of the activity of all the companies in the group. In this regard, we inform you that we have duly weighed the various interests at stake to ensure that this data processing does not violate your rights and freedoms. If you wish, you can contact us to request a copy of the weighting examination carried out. This data will be kept for as long as you are a customer or until you exercise your right to object, which you may do at any time by contacting us. For more information on these communications of your personal data, please read the section "Data communications between the Unideco group of companies".

- To create a basic commercial profile with your data in order to personalize the commercial communications you receive. If you are a Codorníu customer, we will be able to personalize the commercial communications we send you. To do this, we will create a commercial profile using only the personal data we have collected directly from you: place of residence, age, gender, purchase history and visits recorded by all the companies in the group. Additionally, we may use data extracted from your navigation through cookies or pixels. In addition, we may segment through external platforms such as Facebook, Google or Criteo in accordance with their own terms of use and privacy policies.

This treatment is based on our legitimate interest, consisting of sending you advertising only about products and services that may be of interest to you. In this way, we improve our chances of building customer loyalty by avoiding sending them unwanted advertising and, at the same time, we facilitate the continuation of our business relationships and our activity. In this regard, we inform you that we have duly weighed the various interests at stake to ensure that this data processing does not violate your rights and freedoms. If you wish, you may contact us to request a copy of the balancing test performed. Notwithstanding the above, we will only include your browsing data in your profile if you have previously given us your express consent. This data will be kept for as long as you are a customer or until you exercise your right to object or withdraw your consent, which you can do at any time by contacting us.

- Create new audiences. If you are a Codorníu customer, we may transfer some of your contact information to external platforms (Criteo, Google or Facebook) to search for potential customers with similar characteristics to yours. This communication of data will be made according to the conditions and privacy policies of these platforms and using encryption techniques that ensure the confidentiality of the information.

This treatment is based on our legitimate interest, consisting of reaching new customers who may be interested in our products. In this regard, we inform you that we have duly assessed the various interests at stake to ensure that this data processing does not violate your rights and freedoms.

If you wish, you can contact us to request information about the assessment carried out. This data will be kept for as long as you are a customer or until you exercise your right to object, which you may do at any time by contacting us.

- Advertising purposes when you are not a Codorníu customer, i.e. when you have not purchased or contracted any of our products or services.

- To send you commercial communications by electronic means about wine and wine tourism products and services offered by us, by the brands we market and by other wine companies in the Unideco group. When you are not a Codorníu customer, only with your consent will we be able to send you commercial communications by electronic means about wine and wine tourism products and services (visits and leisure activities in wineries and vineyards) offered by us, by the brands we market and by the wine companies of the Unideco group.

In this case, the legitimate basis for the processing will be your consent, which you may withdraw at any time.

The data collected for this purpose will be retained until you withdraw your consent, which you can do at any time by contacting us or unsubscribing from our newsletter from any of the communications you receive.

- Communicate your personal data to wine companies of the Unideco group to send you electronic commercial communications about their wine and wine tourism products and services. If you are not a Codorníu customer, only if we have your consent can we communicate your personal data to the various companies that make up the Unideco business group, in which Codorníu is integrated. All companies in the Unideco group belong to the wine sector and the sole purpose of the communication of data will be to send you electronic commercial communications about their wine products and services and wine tourism (visits and leisure activities in wineries and vineyards). In this case, the legitimate basis of the treatment will be your consent, which you can withdraw at any time. These data will be kept as long as you do not withdraw your consent, which you can do at any time by contacting us. For more information on communications of your personal data, please read the section "Data communications between the Unideco group of companies".

Create a basic commercial profile with your data to personalize the commercial communications you receive. We may personalize the commercial communications we send you. To do this, we will create a profile with data extracted from your browsing using cookies or pixels. In addition, we may segment through external platforms such as Facebook, Google or Criteo in accordance with their own terms of use and privacy policies.

This treatment is based on our legitimate interest, consisting of sending you advertising only about products and services that may be of interest to you. In this way, we improve the chances of building loyalty with our users by avoiding sending them unwanted advertising and, at the same time, we facilitate the continuation of our business relationships and our activity. In this regard, we inform you that we have duly weighed the various interests at stake to ensure that this data processing does not violate your rights and freedoms. If you wish, you may contact us to request a copy of the balancing test performed.

Notwithstanding the above, we will only include your browsing data in your profile if you have previously given us your express consent.

This data will be kept for as long as you are a customer or until you exercise your right to object or withdraw your consent, which you can do at any time by contacting us.

4. Origin and recipients of the data

- Communications of your data between the Unideco business group. Codorníu S.A. is part of the Unideco business group, made up of the wine sector companies specified here. In this context, we may receive personal data of customers from other companies in the group and, likewise, we may communicate personal data of our customers to these companies. The purpose of this flow of information is to facilitate the commercial and operational relations of the group of companies and to offer you products and services related to the wine sector. If you are not a customer, we will only share your data if you have given us your express consent.

For more information, see the section "Communicating your personal data to companies in the Unideco group to send you commercial communications" here if you are a customer and here if you are not a customer.

- Communication of your data to companies in charge of processing. We inform you that, in the event that we have some kind of relationship with you (because you are a customer, because you have subscribed to our newsletter or because you have sent us a query), we may communicate your personal data to third party service providers that support us in carrying out our activity. These companies are our data processors and we have signed appropriate contracts with them to ensure that your data will be processed at all times in accordance with the provisions of this privacy policy and applicable law. In particular, we have signed contracts with entities that provide us with the following services:

Computer maintenance.
Office automation, cloud, e-mail
Management of business resources
Implementation of commercial actions.
Data protection consultancy.
Parcel transport.
Platforms and social networks.

We inform you that, as a result of the service provided by certain providers, your personal data may be transferred outside the European Economic Area. In particular, the use of management and cloud tools provided by Microsoft, Google or SAP may involve your data being partially transferred to the USA. In such cases, any international transfer of data will take place in accordance with the GDPR and, in particular, by signing standard clauses or binding corporate rules that the providers have in place, as well as by adopting additional measures as recommended by the European Data Protection Board.

- Communication of your data due to legal obligation. In case of legal obligation, we must communicate your data to authorities, administrations, courts or tribunals in accordance with applicable laws.

5. Data protection rights

We inform you that you have the right to exercise your data protection rights before us at any time. To do so, you must send us an e-mail to cuentanos@Codorníu.com. In your letter, you must indicate your name, surname and the right you wish to exercise. If we have doubts about your identity, we will ask you for additional information to ensure that you are entitled to exercise the right. In particular, we inform you that you have the right to exercise the following rights free of charge, as long as they are not unjustifiably repetitive requests:

- Access. You have the right to know what data we process about you, for what purposes, where they come from, to whom they have been communicated or for how long they are kept.

- Rectification. You have the right to request that your data be corrected from our files when they have become obsolete or have not been correctly incorporated. For example, if you change your postal address, you may request that we modify the information in our databases.

- Deletion. You have the right to request that we delete all of the personal information we maintain about you. We will not be able to comply with your request if we must continue to process your information in order to perform our contractual relationship with you. For example, if there are outstanding debts or if we have not yet delivered your order. We will also not be able to delete your data if we are required to retain it by law, for example, in the case of invoices. In the event that the above circumstances do not apply and we are therefore obliged to fulfill your right of deletion, your data will be blocked in accordance with data protection regulations for possible legal action. After the 3-year statute of limitations period for legal action has expired, your data will be completely destroyed.

- Limitation. You may request the limitation of the processing of your data when you contest the accuracy of the data; when the processing is unlawful, but you oppose the deletion; when they are no longer necessary for the purpose for which they were collected, but you need them for the formulation, exercise or defense of claims; and when you oppose the processing and it must be verified whether our legitimate interest prevails.

- Opposition. You may object at any time to the processing of your data when the processing is carried out on the basis of our legitimate interest, including the sending of commercial communications and profiling. In that case, we will stop using your data for these purposes. However, we may refuse your right to object if we need the data for the formulation, exercise or defense of claims.

- Portability. You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format for transmission to another data controller. You may exercise this right when the processing is based on your consent or contractual performance. - Withdrawal of consent. You have the right to freely withdraw your consent at any time when that was the legal basis for which we were processing your data.

We inform you that, in addition, you have the right to file a complaint regarding the processing of your personal data before the Spanish Data Protection Agency.