PRIVACY POLICY

This Privacy Policy applies to the processing of the personal data of customers and/or users of the website [www.bodegascruzconde.es](https://www.bodegascruzconde.es), whose data controller is BODEGAS Y DESTILERÍAS DEL SUR, S.A.

CONFIDENTIALITY AND DATA PROTECTION

The purpose of this Privacy Policy is to provide you with information about your rights under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and under Spanish Organic Law 3/2018. In this document, we provide you with the information on the processing of your personal data required by Article 13 of the aforementioned Regulation and by Organic Law 3/2018.

By providing us with your data, you declare that you have read and understood this Privacy Policy, and give your unequivocal and express consent to the processing of your personal data for the purposes and under the terms set out herein.

BODEGAS Y DESTILERÍAS DEL SUR, S.A. may amend this Privacy Policy in order to adapt it to changes in legislation, case law or the interpretation of the Spanish Data Protection Agency (Agencia Española de Protección de Datos). These privacy conditions may be supplemented by the Terms of Use, the Cookie Policy and any General Terms and Conditions that may apply to certain products or services, where such access involves any specific considerations regarding the protection of personal data.

BASIC INFORMATION ON DATA PROTECTION

  • Website: www.bodegascruzconde.es
  • Data Controller: BODEGAS Y DESTILERÍAS DEL SUR, S.A. (the «Company»).
  • Purpose: The Company will process your personal data solely for specified, explicit and legitimate purposes, and such data will not be processed in a manner incompatible with those purposes. Principally, the Company may process your data in order to manage your registration as a user of this website, manage your purchases, respond to your enquiries, comply with its legal obligations, improve our services and products and, where you so request, send you personalised communications.
  • Legal Basis: The Company will only process your data where at least one of the following conditions is met:
    • You have given your consent for one or more specific purposes.
    • The processing is necessary for the performance of a contract to which you are a party.
    • The processing is necessary for compliance with a legal obligation to which the Company is subject.
    • The processing is necessary for the purposes of the legitimate interests pursued by the Company (or by a third party), except where such interests are overridden by the interests or fundamental rights and freedoms of the user.
  • Legal Age of Consent: Since, by accessing this website, you certify that you are over 18 years of age, you have the legal capacity required to give your consent to the processing of your personal data, in accordance with the provisions of this Privacy Policy and the Terms of Use of this website.
  • Recipients: Data will be disclosed to third parties providing services to the Company, which may be located either within or outside the European Union, in order to carry out the purposes described in this Privacy Policy. Under no circumstances will data be transferred to third parties for purposes other than those described in this document.
  • Rights: To access, rectify and erase your data, as well as other rights, as explained in the additional information in our Privacy Policy.
  • Additional Information: Further detailed information on our Privacy Policy is set out below.
  •  

INTRODUCTION

In this document, you will find detailed information on the following matters:

  • Who owns this website.
  • Who is the controller of your data.
  • How we collect your personal information.
  • For what purposes we will process your data.
  • How long we will retain it.
  • What legal basis applies in each case.
  • To which recipients we will disclose your data and any possible international transfers.
  • What rights you have.

ADDITIONAL INFORMATION ON DATA PROTECTION

1.1.- Who owns this website?

  • Identity: BODEGAS Y DESTILERÍAS DEL SUR, S.A.
  • CIF: A-14059778
  • Address: Calle Ronda del Canillo, 4 – 14550 Montilla (Córdoba), España.
  • Telephone: 957 65 12 50
  • Email: info@bodegascruzconde.es
  •  

1.2.- Who is the controller of your personal data?

  • Controller: BODEGAS Y DESTILERÍAS DEL SUR, S.A. (the «Company»).
  • Address / Contact: the same postal address, telephone number and email address as in section 1.1.

1.3.- How we collect your personal information?

The Company may collect information about you through the following means:

  • Information you provide to us through the website: when you submit an enquiry using the contact form or, where applicable, when you make a purchase. At the time your data is collected, you will be informed of the identity of the data controller, the purpose of the processing, the recipients and how to exercise the rights available to you. The data you provide to us through the contact form is: first name, surname, email address, telephone number and the content of your enquiry. When you make a purchase, you will also be asked for the information required to process your order, such as your delivery address and billing details. Payment details are handled directly by the relevant payment provider.
  • Information collected when you browse the website: when you browse our website, we may obtain limited information that allows us to understand how it is used, improve its performance and offer you a better service. This information includes your device's IP address (in anonymised form), the browser and operating system you use, the date and time of access and information on how you use our website. This information is collected through analytics cookies, only if you accept them. For further information, please see our Cookie Policy.

1.4.- For what purposes will we process your personal data and how long will we retain it?

The Company will process your personal data solely for specified, explicit and legitimate purposes, and such data will not be processed in a manner incompatible with those purposes.

The main uses we may make of your personal information are described below:

PURPOSES

The Company will retain your personal data for as long as necessary in accordance with the information provided and the retention periods laid down in applicable legislation.

The Company will process the personal data provided by users through the online forms on the website www.bodegascruzconde.es for the purposes identified below:

  • Purpose 1: If you browse the website → analysis of user behaviour when using the website.
  • Purpose 2: If you register as a user of the website → statistical analysis and market research on user profiles.
  • Purpose 3: If you submit an enquiry or complaint, or request information → management, review and resolution of enquiries and complaints; provision of the information requested.
  • Purpose 4: If you make a purchase or take out a service → further details are set out in the following sections.

a) In relation to the "Contact Form":
Purpose: to handle and respond to the enquiries you send us through the contact form.
Legal Basis: the consent of the data subject, given by ticking the box accepting this Privacy Policy, which may be withdrawn at any time.
Retention: for as long as necessary to respond to your enquiry and, thereafter, for the periods required by law.

b) In relation to the "Order Form":
Purpose: management of registration requests for placing orders online; accounting, tax and administrative management; conducting satisfaction surveys to improve our products and services; carrying out market research and commercial prospecting, reports on consumer habits, statistical data and market trends, in order to offer you products and/or services that may be of interest to you; and compliance with legal obligations, provided that the data subject has consented to the processing of their personal data for this purpose.
Legal Basis: the consent of the data subject, which may be withdrawn at any time.

Where the data requested in the online forms is necessary to access specific features of the website, BODEGAS Y DESTILERÍAS DEL SUR, S.A. will indicate that it is mandatory at the time the data is collected, and failure to provide it will mean that the corresponding request cannot be dealt with.

1.5.- What is the legal basis for processing your data?

  • Legitimate interest of the Company. If you browse the website: analysis of user behaviour when using the website.
  • Legitimate interest of the Company. If you register as a user of the website: statistical analysis and market research on the profiles of website users.
  • Legitimate interest of the Company. If you contact us to submit an enquiry, request information or make a complaint: management, review and resolution of enquiries and complaints submitted through the website.
  • User consent / Performance of the contract / Legitimate interest of the Company / Legal obligation. If you make a purchase or take out a service: accounting, tax and administrative management; conducting satisfaction surveys to improve our products and services; statistical analysis and market research on customer profiles; carrying out market research and commercial prospecting, reports on consumer habits, statistical data and market trends, in order to offer you products and/or services that may be of interest to you; and compliance with legal obligations.
  • User consent. If you agree to receive communications, including news, events, competitions and commercial communications about products and services: keeping you informed about products, services, offers, etc.
  • Legal obligation / Legitimate interest / Management of the competition or promotion. If you take part in a competition or promotion: managing your participation in promotions or competitions and notifying you of the result; arranging delivery of the prize; and managing the publicity of the promotion and its results through any medium, which may include the name and image of the winners and, in some cases, of all participants.

1.6.- To which recipients will your data be disclosed?

In order to fulfil the purposes described in this Privacy Policy, the data may be disclosed to third-party companies that provide services to the Company in the ordinary course of its business and in connection with the services provided to the user, such as:

  • Technology service providers: systems and IT, website development and hosting, data hosting and sending of communications.
  • Web analytics service providers (Google Analytics), only if you accept analytics cookies.
  • Marketing and advertising service providers.
  • Advisory service providers.
  • Financial institutions.

Where required by applicable legislation, and in compliance with the Company's obligations, the data may be disclosed to public administrations and authorities.

Under no circumstances will data be transferred to third parties for purposes other than those described in this document.

The aforementioned recipients of the data (the Company's service providers) may be located outside the European Union. In such cases, your data will be transferred with appropriate safeguards and with due regard for its security:

1.7.- What are your rights when you provide us with your data?

The Company guarantees the exercise of your rights. To this end, you may contact the Company at its postal address or at the email address provided in this document in order to exercise the following rights:

a) The right to request access to the personal data concerning the data subject.
b) The right to request its rectification or erasure.
c) The right to request the restriction of its processing.
d) The right to object to processing.
e) The right to data portability.
f) The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You may request the forms required to exercise these rights by sending an email to the address provided in this document.

Given the strictly personal nature of the exercise of any of these rights, you must attach to your request a copy of your identity document or an equivalent identification document.

You may contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos) to obtain further information about your rights or to lodge a complaint with it, particularly where you have not obtained satisfaction in exercising your rights. All the necessary information is available on its website: www.aepd.es

1.8.- What security measures are applied?

BODEGAS Y DESTILERÍAS DEL SUR, S.A. adopts the levels of security required by the GDPR, appropriate to the nature of the data being processed at any given time. Nevertheless, you should bear in mind that system security is not impregnable and that wilful misconduct by third parties may occur, although BODEGAS Y DESTILERÍAS DEL SUR, S.A. uses all the means at its disposal to prevent it. You may request further information about our security measures by emailing info@bodegascruzconde.es

Last updated: 27 October 2026

Scroll to Top