Privacy Policy

Introduction

The privacy policy of the Regulatory Council of the Protected Designation of Origin “Cava” follows international data protection legislation. Furthermore, the Regulatory Council of the Protected Designation of Origin “Cava” intends to inform the user through this document of their rights and obligations regarding the privacy of their data, explaining the reasons for its storage and use.
Paragraph

Data collected by the Consejo Regulador de la Denominación de Origen Protegida “Cava”.

The Consejo Regulador de la Denominación de Origen Protegida “Cava” collects all information entered into the application by the user and stores it on its own servers or on the servers of the storage provider of the Regulatory Council of the Protected Designation of Origin “Cava”. As a cloud service, server storage is required for the application to function, and the user therefore accepts this.

Finally, the Consejo Regulador de la Denominación de Origen Protegida “Cava” also collects data from the connected device through cookies. The user can disable cookies in their browser so that the Consejo Regulador de la Denominación de Origen Protegida “Cava” does not collect this information if the user so desires. This information is used to conduct browsing and access studies on the application, as well as for its use. Browsing information includes the type of device and its characteristics, location, and connection times. Please read our COOKIE POLICY for more information.

If you are a natural person registered in any of the Cava DOP Operator Registries, you should be aware that the purposes for which we process your personal data are:

1. Maintaining the vineyard and winery registries managed by this Regulatory Council.
2. Carrying out the control, inspection, supervision, and verification tasks assigned to this Regulatory Council.
3. Reviewing the labels of the protected Cava product.
4. Managing the back labels, seals, and guarantee stamps that certify the protected Cava product.
5. Setting up the electoral roll of the Consejo Regulador de la DOP “Cava”.
6. Identify the bodies and functions linked to the conduct of elections for the governing bodies of the Consejo Regulador de la DOP “Cava”, such as the Electoral Board, Polling Stations, Supervisors, etc.
7. Identify the governing bodies of the Consejo Regulador de la DOP “Cava” for their management and proper functioning.
8. Manage collections and payments.

If you are an individual who is a supplier or collaborator of the Consejo Regulador de la DOP “Cava” you should be aware that the purposes for which we process your personal data are:

1. Maintaining control of the protected product through the corresponding Tasting Committees.
2. Managing payments, withholdings, accounting, and any other tasks related to the financial and supplier management of the Consejo Regulador de la DOP “Cava”
3. Carrying out acts, shipments, and events specific to the promotional activities of Cava, which are the responsibility of this Cava Regulatory Council.

If you are an individual submitting a written request to the Consejo Regulador de la DOP “Cava”, you should be aware that the purpose for which we process your personal data is:

1. The maintenance of the Register of incoming and outgoing documents of the Consejo Regulador de la DOP “Cava”.

In any case, we inform you that we will only use your personal data for the purposes stated above and that it will not be used in any way incompatible with those purposes.

Who is responsible for processing your data?

Identity: Consejo Regulador de la Denominación de Origen Protegida “Cava”.

Tax ID No.: Q-0871003-J.

Postal address: Av./ Tarragona, 24, 08720 VILAFRANCA DEL PENEDÉS (Barcelona).

Telephone: (34) 93 890 31 04.

Email: consejo@cava.wine

Security Officer: General Secretariat of the Council.

For what purpose do we store your personal data?

The basis for this processing is the legal relationship that binds the data subject to the Regulatory Council, whether as a result of voluntary registration in the aforementioned Registries, as a supplier or collaborator of the Council, or as an interested party submitting an application or request to the Council’s Entry and Exit Registry, for the fulfillment of the functions and obligations of the Consejo Regulador de la DOP “Cava”, legally established in Law 6/2015, of May 12, on Designations of Origin and Protected Geographical Indications in the supra-autonomous territorial scope, as well as for the achievement of the public interest attributed to the Regulatory Council.

Providing data in each case is mandatory for the establishment of this relationship, and would otherwise be impossible.

How long will we retain your data?

The personal data provided will be retained for the time necessary to provide the requested service or market the product and for the legally established periods.

To which recipients will your data be disclosed?

The data will not be disclosed to third parties except when legally required.

What are your rights when you provide us with your data?

Everyone has the right to obtain information about whether or not the Consejo Regulador de la Denominación de Origen Protegida “Cava” is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, its deletion when, among other reasons, it is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims.

You can exercise your rights by sending an email to consejo@cava.wine, properly identifying yourself and expressly indicating the specific right you wish to exercise.

If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If you consider that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights. If you have any questions, please send an email to: consejo@cava.wine

Data shared by the user or with other users

Except as described in this Privacy Policy, the Consejo Regulador de la Denominación de Origen Protegida “Cava” will not sell or otherwise disclose your or your Guest’s contact information to any third party.

Many of our services allow you to share information with other users. Remember that when you share information publicly, it may be indexed by search engines. Our services offer you different options for sharing and deleting your content. How to access and update your personal information: Each time you use our services, our goal is to provide you with access to your personal information. If that information is inaccurate, we strive to provide you with ways to delete or update it quickly, unless we need to retain that information for legitimate business or legal reasons. When updating your personal information, we may ask you to verify your identity so we can process your request.

For email recipients: You may receive an invitation by email from the Consejo Regulador de la Denominación de Origen Protegida “Cava” or publicly on social media. The invitation will include a link to this Privacy Policy.

If you open an invitation sent by email through the Consejo Regulador de la Denominación de Origen Protegida “Cava” you agree to receive that invitation and any email communications about associated events, unless you withdraw your consent by unsubscribing or opting out (“opt-out”). You may opt out at any time through the preferences page linked in the footer of each email sent through the Services, or on the home page of the Site.

Accessing and Modifying User Data

Users may modify their user data or the accounts they own at any time. The Consejo Regulador de la Denominación de Origen Protegida “Cava” does not store the modified information, so once the user modifies or deletes the information, it is permanently lost within the application.

Under the conditions established by applicable regulations, you have the right to:

● Request information about whether the Regulatory Board of the Cava PDO holds personal data about you and, if so, what data it processes, why it is held, and what its purposes are.

● Request access to your personal data. This allows you to receive a copy of the personal data we hold about you and check that we are processing it lawfully.

● Request correction of the personal data the Regulatory Board holds about you. This allows you to correct any incomplete or incorrect information held by the Regulatory Board.

● Request deletion of your personal data. This allows you to request that the Regulatory Board delete or erase your personal data when no other legitimate grounds for continuing to process it prevail. You also have the right to request that the Board delete or erase your personal data when you have exercised your right to object to processing.

● Object to the processing of your personal data where such processing is based on the Council’s legitimate interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on that basis.

● Request restriction of the processing of your personal data. This allows you to request that the Council suspend the processing of your personal data.

● Request portability or transfer of your personal data to you or a third party in a structured electronic format. This allows you to retain the data the Council holds about you in a commonly used electronic format and to transfer your data to a third party in a commonly used electronic format.

● Withdraw your consent. In the limited circumstances where you have given your consent to the collection, processing, and transfer of your personal data for a specific purpose, you have the right at any time to withdraw your consent for that specific processing. Once we have received notification that you have withdrawn your consent, we will no longer process your data for the purpose or purposes you originally consented to, unless we have another legitimate basis to continue doing so under the law.

The data we share

We do not share personal information with companies, organizations, or individuals not affiliated with the Consejo Regulador de la Denominación de Origen Protegida “Cava” unless one of the following circumstances applies:

● Consent: We will share your personal information with companies, Organizations or individuals outside the Consejo Regulador de la Denominación de Origen Protegida “Cava” when you have given us your consent to do so. Your consent will be required to share specially protected personal data.

● External processing: We will provide personal information to our affiliates or other trusted individuals or companies for processing by the Consejo Regulador de la Denominación de Origen Protegida “Cava”,, following our instructions and in accordance with our Privacy Policy, and taking other appropriate security and confidentiality measures.

● Legal reasons: We will share your personal data with companies, organizations, or individuals outside the Consejo Regulador de la Denominación de Origen Protegida “Cava” if we believe in good faith that there is a reasonable need to access, use, retain, or disclose such information to comply with any applicable legal or regulatory requirements; Comply with the provisions of these Terms of Service, including the investigation of potential violations, the detection or prevention of fraud or technical or security incidents, or any other form of processing thereof, and the protection of the rights, property, or security of the Consejo Regulador de la Denominación de Origen Protegida “Cava” our users, or the general public to the extent required or permitted by applicable law.

Data Security

For the Consejo Regulador de la Denominación de Origen Protegida “Cava” security is paramount. Currently, data storage is provided through specialized providers with security certificates and anti-hacking systems. The Consejo Regulador de la Denominación de Origen Protegida “Cava” has decided to outsource storage to ensure that the provider meets the strictest security standards, at levels that the Consejo Regulador de la Denominación de Origen Protegida “Cava” could not offer on its own storage servers.

We strive to protect the Consejo Regulador de la Denominación de Origen Protegida “Cava” and our users from any unauthorized modification, disclosure, or destruction of the data we hold, or from unauthorized access to it. In particular: We encrypt many of our services using the SSL protocol. We review our data collection, storage, and processing policies, including physical security measures, to prevent unauthorized access to our systems. We limit access by contractors, agents, and employees of the Consejo Regulador de la Denominación de Origen Protegida “Cava” to the personal information they are required to process for the Consejo Regulador de la Denominación de Origen Protegida “Cava” and ensure that they comply with strict contractual confidentiality obligations and are subject to appropriate disciplinary action or termination of employment if they fail to meet these obligations. When this Privacy Policy Applies: Our Privacy Policy applies to all services offered by the Consejo Regulador de la Denominación de Origen Protegida “Cava” and its affiliates, including, but excluding, services that are subject to separate privacy policies that do not incorporate this Privacy Policy.

Minors

The cavameeting.com website is not directed at minors. The website owner declines any responsibility for failure to comply with this requirement.

Compliance with the Law

At the Consejo Regulador de la Denominación de Origen Protegida “Cava” we regularly verify compliance with our Privacy Policy. We also adhere to various self-regulatory codes. If we receive a formal written complaint, we will contact the person who followed up on it. We will work with the relevant regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that we have not been able to resolve directly with you.

Modifications

Our Privacy Policy may be modified at any time. We will not limit your rights under this Privacy Policy without your express consent. We will post all modifications to this Privacy Policy on this page and, if significant, provide a more prominent notice (for example, by emailing you if the modification affects certain services). We will also archive prior versions of this Privacy Policy for your reference.