Data Protection Policy - Sierra Cantabria


  1. Who is the Processor of your personal data?

The Processor of the personal data in relation to the difference procedures regarding the management of our users, customers or suppliers is “VIÑEDOS DE PÁGANOS, S.L.”, with its registered office situated at Carretera de Navaridas s/n and with V.A.T. No. B01270172.

For the purposes of our data protection policy, our contact telephone is (+34) 902 334 080 and our contact email address is:

What type of information do we have regarding you and how have we obtained said information?

The categories of personal data that our company processes in relation to our customers and suppliers include:

  • Identification particulars
  • Professional particulars such as employment position, powers and functions, etc.
  • Postal or electronic addresses
  • Commercial information
  • Economic and transaction information
  • Under no situations whatsoever do we process any specially protected information.

All of the aforementioned information has been obtained by us directly from you by means of the remittance of a contact form or via the presentation of a commercial offer, contractual proposal, etc. or by your company that has provided us with the identification particulars as well as other information necessary for the performance of the contractual relationship between the parties. You or your company must provide us with the updated information in the case of any modification thereof.

  1. For what purposes do we process your personal data?

We process the personal data for the purposes of managing the different activities in relation to the specific procedures regarding sales, after sales services, management of suppliers, service quality, etc. Accordingly, we shall use your personal data in order to carry out any of the following actions:

  • Remittance of the information that you request from us by means of the contact form of our website or via any other form of contact with our company,
  • Provide both to potential customers as well as to our existing customers, offers for products and services that may be of interest to you,
  • Carry out the administrative, tax and accounting management of our customers and/or suppliers,
  • Carry out satisfaction surveys, market studies, etc. in order to offer you more adequate and optimised quality services, etc.

We shall not create commercial profiles based upon the information provided to us and accordingly we shall also not make any automated decisions regarding you based upon any commercial profile.

  1. How long will we store your personal data for?

The personal data in relation to natural persons associated with potential customers, existing customers and suppliers that is obtained via the different contact forms and/or that is provided to us shall be stored until the deletion thereof is requested by the interested party. The personal data provided by our customers and suppliers shall be stored for the term of the commercial relationship between the parties, and shall, in any case, comply with the minimum legal periods for the storage of said information as provided for at law.

In any event, we shall store your personal data during the period of time that is reasonably necessary taking into account our needs to provide responses and replies to questions that have been voiced or in order to resolve problems, carry out improvements, activate our services and to comply with the requirements provided for under applicable law. The foregoing means that we may store your personal data during a reasonable period of time even after you have ceased to use our products or after you have ceased to use our website. After said period, your personal data shall be deleted from all of the systems within our company.

  1. What is the justification for the processing of your personal data?

Depending upon the type of data processing, we hereby summarise the justification of said data processing hereinbelow:

  • Accounting Management: management of billing with customers and/or suppliers
    • Maintenance, performance and control of the contractual relationship between the parties
  • Tax Management: application of withholding tax, bonuses, etc.
    • Maintenance, performance and control of the contractual relationship between the parties; Compliance of legal obligations
  • Administrative Management: management of logistics, warehouse, deliveries to customers, receipt of goods, etc.
    • Maintenance, performance and control of the contractual relationship between the parties
  • Marketing: Commercial actions regarding our products or services aimed at our customers or persons that have requested information from us in the past, including the carrying out of satisfaction surveys with our customers, the remittance of commercial information and latest news regarding our services and products, etc.
    • Free and unequivocal consent of the interested party (potential customers), we hereby state that the revocation of said consent may not, under any circumstances whatsoever, condition the performance of the contract that may exist between the parties; Legitimate interest of the company regarding the promotion and marketing of similar products or services to those obtained or requested by the interested parties in the past.

In relation to the foregoing justifications for the processing of your personal data, you are required to provide said personal data, and in the case that you do not provide your personal data, then the corresponding contract may not be performed, including the legal obligations regarding public powers.

  1. Who are the recipients of your personal data?

Our company shall never share your personal data with any other third party company that intends to use said personal data as part of its direct marketing actions, except when you have expressly authorised said disclosure.

We hereby inform you that we may provide your personal data to Public Authorities and competent authorities in the cases in which we receive a legal request from said authorities or in the cases that, acting in good faith, we consider that said action is reasonably necessary in order to comply with any judicial procedure; to respond to any claim or legal action; or to protect the rights of our customers and the general public.

We hereby inform you that your personal data shall not be assigned or disclosed to any third parties and our company shall be exclusively responsible for the data processing and storage thereof.

  1. What are your rights when you provide us with your personal data?

All persons have the right to request a confirmation as to whether we process any personal data thereof or not.

In particular, all interested parties may request to exercise their right of access to their personal data, as well as to receive said personal data in a common format as well as a machine-readable format if the data is processed via electronic channels (right to data portability).

Furthermore, the interested parties may request to exercise their right of rectification of any inaccurate data or, as the case may be, may request the erasure thereof when, among other grounds, the data is no longer necessary for the purposes for which said data was provided.

Moreover, in certain situations, the interested parties may request the restriction of the processing of their personal data, or in certain circumstances and on grounds related to their particular situation, the interested parties may exercise their right to challenge the processing of their data. Our company shall cease to process the data, except when required based upon legitimate grounds, or for the filing or defence of any possible claims or in the exceptions established under applicable regulations.

Furthermore, we hereby inform you that you have the right to revoke your consent at any time whatsoever, without said revocation affecting the validity of the data processing carried out based upon your prior consent.

Moreover, you are hereby informed that, at any time whatsoever, you may exercise the foregoing rights by way of written communication forwarded to us at the contract addresses provided for in Section 1, ‘Processor of your personal data’ of this Data Protection and Privacy Policy, and you must attach a copy of your D.N.I. (National Identification Document). You shall also have the right to file a claim before the Spanish Data Protection Agency, especially when you have not been satisfied with the exercise of your rights.

  • Spanish Data Protection Agency.
    • C/ Jorge Juan, 6. 28001 – Madrid
    • Tel.: (+34) 901 100 099 / (+34) 912 663 517
  1. Data protection vis-à-vis users of the website.

In accordance with Regulation (EU) 2016/679, we hereby inform you that the personal data of the Users of the website shall be processed for the data processing activities set out in each data collection form of our website by the company. Said data processing shall be authorised by your express consent thereto. By clicking on the “SEND” button, the User consents to the data processing by our company.

Furthermore, we hereby inform you that, except in the case of any legal obligation or your express consent, our company shall not transfer or disclose your personal data to any third party.

Moreover, the User is hereby informed that, at any time whatsoever, the rights of access, rectification or erasure of the personal data may be exercised, as well as any other rights provided for in this document and established under Regulation (EU) 2016/679, by way of notification forwarded to “VIÑEDOS DE PÁGANOS, S.L.”, via email address:

On the other hand, in accordance with the provisions of the Information Society and e-Commerce Services Act 34/2002, of 11 July, our company hereby undertakes to not forward any advertising via email without first having obtained the express authorisation from the recipient thereof. The User may reject the remittance of advertising by ticking the corresponding box.

  1. Other information of interest regarding our privacy policy

8.1 Security Measures

Our company adopts the required security levels as provided for under European and Spanish data protection regulations taking into account the state of technology, the costs of application and the nature, scope, context and the foregoing purposes of the data processing, as well as the probability and seriousness risks for your individual rights and freedoms.

8.2 Processing of the personal data of minors

Pursuant to the GDPR EU 679/2016 and of Royal Decree 1720/2007, minors over the age of 14 may provide their consent for the contracting of information society services, such as the registration in forums, the completion of a contact form, etc. Notwithstanding the foregoing, it shall be necessary to verify the veracity of the age stated by the minor.

For the processing of the personal data of minors over the age of 14, said data collection shall always be carried out subject to the express consent of the parents or the legal guardians thereof.

8.3 Modifications of our Data Protection and Privacy Policy

Occasionally, our company may carry out modifications and corrections to this section of the Data Protection Policy for Users, Customers and Suppliers. Please periodically review this section in order to query any changes that may exist and how said changes may affect you.

8.4 Why is it necessary to accept this Data Protection and Privacy Policy?

This section of the Data Protection Policy for Users, Customers and Suppliers provides to you, in an easily accessible manner, all of the information necessary so that you may understand the type of data that the company stores regarding its potential customers, existing customers and/or suppliers, the purposes thereof, the rights that the data protection regulations provide to you as an interested party and the way in which you may exercise said rights. Accordingly, by means of your consent to the remittance of your personal data by way of our contact forms and/or by way of the establishment of a commercial relationship with our company, we shall consider that you have understood and accepted the processing of your personal data as described in this policy. The foregoing personal information shall only be used for the purposes for which you have provided said information to us or in accordance with the provisions of applicable national or regional data regulations.

In any event, we must warn you that any refusal by you to provide us with certain information may hinder the performance of the contractual relationship between the parties with possible serious consequences when providing the different services provided for within the commercial contract formalised with the contracting party.

If you have any question whatsoever in relation to this section of the Data Protection Policy for Potential Customers, Existing Customers and Suppliers of our company, please contact the company via the address provided for in Section 1 ‘Processor of your personal data’ and we shall be delighted to respond to any other questions that you may have.

  1. Applicable law

These terms and conditions shall be governed by the provisions of Spanish and European data protection and privacy law.

Acceso a Bodega Privada de la Familia