PRIVACY POLICY

CEPA MUNDI, SL hereby informs you of its privacy policy applied to personal data.

WHO IS THE DATA CONTROLLER?

  • DATA CONTROLLER: CEPA MUNDI, SL

  • VAT ID (NIF): B73793275

  • Address: Paraje de la Hoya de los Hermanos, s/n, 30430, Cehegin, Murcia

  • DPO Email: cumplimiento@zambudio.es

  • Customer Service Email: info@bodegashydria.com

  • Phone: (+34) 687 728 472

WHAT TYPE OF DATA DO WE PROCESS?

Depending on the products, services, or functionalities you wish to enjoy at any given time, we will need to process certain data. In general, such data will be, depending on the case, the following:

  • Your identifying data: name, surname, VAT ID, NIE or passport, language, country from which you interact with us, etc.

  • Contact data: phone number, postal address, email, etc.

  • Economic and transactional information: Your payment or card data, information about your purchases, orders, returns, etc.

  • Connection, geolocation, and browsing data (if you interact with us from a mobile phone, for example).

  • Commercial information if you are subscribed to our newsletter.

  • Data regarding your tastes and preferences.

Remember that when we ask you to fill in your personal data to give you access to any functionality or service of the web, we will mark certain fields as mandatory, since this is information that we need to be able to provide the service or give you access to the functionality in question. Please bear in mind that if you decide not to provide us with this data, you may not be able to complete your registration as a user or may not be able to enjoy those services or functionalities.

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on how you interact with our website, we will process your personal data for the following purposes:

1. For the development, compliance, and execution of the Purchase Contract This purpose includes processing your data mainly to:

  • Contact you regarding updates or informative communications related to the acquired products, including sending quality surveys on the products supplied.

  • Manage payment of the products you purchase, regardless of the payment method used.

  • Activate the necessary mechanisms to prevent potential fraud against you and against ourselves during the purchase process. If we consider that the transaction may be fraudulent, this processing may result in blocking the transaction.

  • Manage potential returns once you have made a purchase and manage requests for information on the availability of different products.

  • Invoice and make available to you the tickets, invoices, and any other document accrediting payment regarding the purchases you have made on our Platform.

2. To attend to the requests or petitions you make through the different channels incorporated into our Platform. We only process personal data that are strictly necessary to manage or resolve your request or petition.

3. For marketing purposes. To the extent that you subscribe to our commercial communications, your personal data will be used for the periodic delivery of company newsletters. You should remember that you can unsubscribe from these communications at any time and at no cost by contacting us via the email of the data controller or following the instructions we provide in each of our communications.

4. Usability and quality analysis for the improvement of our services (Cookies) If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes, i.e., to understand how users interact with our Platform and thus be able to introduce improvements to it. Likewise, we occasionally carry out quality actions and surveys aimed at knowing the degree of satisfaction of our clients and users and detecting those areas in which we can improve.

5. For social media management In the event that you follow us or contact us through the different social networks in which we are present, we will process the data you provide us through them with the sole purpose of responding to your messages or comments and managing our contact list.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis that allows us to process your personal data also depends on the purpose for which we process them. Thus, we will find different legal bases according to the following purposes:

  • 1. Development, compliance, and execution of the purchase contract: The processing of your data is necessary for the execution of the purchase contract that binds us to you. We understand that the processing of these data is positive for all parties involved when the payment of a purchase occurs, and in particular for you, as it allows us to establish the appropriate measures in order to protect you against fraud attempts by third parties.

  • 2. Customer Service: We consider that we have a legitimate interest in attending to the requests or queries you raise through the various existing contact channels. We understand that the processing of these data is also beneficial for you insofar as it allows us to attend to you adequately and resolve the queries raised. When you contact us, in particular, for the management of incidents related to the product acquired through the Platform, the processing is necessary for the execution of the purchase contract. When your query is related to the exercise of the rights we inform you about below, or with claims related to our products or services, what legitimizes us to process your data is compliance with legal obligations on our part.

  • 3. Marketing: The legitimate basis to process your data for marketing purposes is the consent you give by agreeing to receive personalized information through various means. In case you have purchased products from our store, we consider that we have a legitimate interest in sending you our communications about similar products or services.

  • 4. Usability and quality analysis: The basis of legitimation is the consent provided on our website for the installation of the cookies you consider appropriate.

  • 5. Social Networks: The basis of legitimation is the informed consent to respond to queries raised through the social network, as well as the moment you follow us and wish to be part of our contact list.

HOW LONG WILL WE KEEP YOUR DATA?

  • 1. Development, compliance, and execution of the purchase contract: We will process your data for the time necessary to manage the purchase of the products or services you have acquired, and subsequently the legally established periods for the fulfillment of our tax obligations. On some occasions, we will only process some data until the moment you decide, such as payment data (bank card) that you have requested us to store for possible future purchases.

  • 2. Customer Service: We will process your data for as long as necessary to meet your request or petition.

  • 3. Marketing: We will process your data until you unsubscribe or cancel your subscription to the newsletter.

  • 4. Usability and quality analysis: As established in the cookie policy.

  • 5. Social Networks: We will process your data for the time necessary to meet your request or petition and as long as you are a follower of our profile.

Regardless of whether we process your data for the time strictly necessary to fulfill the corresponding purpose, we will subsequently keep them duly stored and protected for the time during which liabilities may arise from the processing, in compliance with the regulations in force at all times. Once the possible actions in each case prescribe, we will proceed to delete the personal data.

WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

To fulfill the purposes indicated in this Privacy Policy, it is necessary that we give access to your personal data to third parties that provide us with support in the services we offer you, detailed below:

  • Financial entities, for payment management.

  • Technological service providers that give us support.

  • Providers and collaborators of logistics, transport, and delivery services.

  • Companies of the “Group” on the legal basis of legitimate interest, exclusively for internal administrative purposes.

Furthermore, we inform you that we are present on the social networks Instagram, Facebook, and X, to keep our followers informed about the company’s news and services. You can access these social networks voluntarily and through the links available on the website itself or by accessing directly and on your own from the installed browser or app. You should know that this website is not responsible for the use of data that these social networks may carry out. However, when this data is generated on the social network and derives from an interaction with our official account, we will be jointly responsible for the processing along with the social network.

The creation of an account on a social network by this company does not mean that you must consent to the processing of the data without prior information of its scope. In order to consent to our transfer from this website and the processing of your data, you must carefully read the privacy policy of the social network you wish to access:

In this way, before clicking on the logos of the social networks present on our website, you can inform yourself and carry out a redirection with prior knowledge of the processing of your data and voluntarily.

  • Group Companies: Your data may be shared with companies of the BUSINESS GROUP, on the legal basis of legitimate interest, exclusively for internal administrative purposes. You can check the companies that are part of the business group in the Legal Notice – Zambudio.

  • International Transfers: Any international transfer of personal data (for example, in the case of the use of cookies, social networks, etc.) will be based on your express consent, in case there is no adequacy decision, appropriate guarantees, or another legal basis that legitimizes it.

WHAT ARE YOUR RIGHTS WHEN MAKING YOUR DATA AVAILABLE TO US?

We are committed to respecting the confidentiality of your personal data and guaranteeing the exercise of your rights. You can exercise them at no cost by sending us an email to the address of our DPO cumplimiento@zambudio.es, simply indicating the reason for your request and the right you wish to exercise. In case we consider it necessary to identify you, we may request a copy of a document proving your identity. In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:

  • Request access to the data we have about you.

  • Request that we rectify the data we already have. Keep in mind that by actively providing your personal data by any means, you guarantee that they are true and accurate and undertake to notify us of any change or modification thereof.

  • Request that we delete your data to the extent that they are no longer necessary for the purpose for which we need to process them as we have informed you previously, or when we no longer have the legitimacy to do so.

  • Request that we limit the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of the data or keep them beyond the necessary time when you may need it. If you have provided your consent for the processing of your data for any purpose, you also have the right to withdraw it at any time.

  • Receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, as well as to transmit them to another data controller.

Moreover, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data. Finally, we inform you of your right to file a claim with the relevant data protection supervisory authority, in particular, with the Spanish Data Protection Agency: https://www.aepd.es/en

CHANGES TO THE PRIVACY POLICY

We may modify the information contained in this Privacy Policy when we deem it appropriate. In the event that we do so, we will notify you by various means through the Platform, or we will even communicate it to your email address when the change in question is significant for your privacy, so that you can review the changes, assess them and, where appropriate, object or unsubscribe from any service or functionality.

INFORMATION ON COOKIES

We use cookies and similar devices to facilitate your browsing on the Platform, know how you interact with us and, in certain cases, be able to show you advertising based on your browsing habits. Please read our Cookie Policy to know in greater detail the cookies and similar devices we use, their purpose, and other information of interest.