CASA MONTE ORIBIO is the owner of the website www.casamonteoribio.com and is responsible for the processing of personal data provided by users through this website.

CASA MONTE ORIBIO informs users of this website about its policy regarding the processing and protection of personal data of users and customers that may be collected by the navigation and use of this website.

The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights they have and all the necessary information established by current regulations.

By using this website we understand that you have read and understood the information provided in relation to the processing of your personal data.

Our main objective is to process personal data in a lawful, fair and transparent manner.

Data collected, purpose and lawfulness

The personal data processed are those provided by users through the forms or mail casamonteoribio@gmail.com available on this website and are the minimum required to send information about our products / services, to place orders, as well as to prepare the corresponding invoices, report on the status of orders, handle complaints and any other management arising from the provision of the service provided through this website.

Personal data required by the Web Site

In order to provide our services we need some identifying information depending on the service that Web Site provides you:

*For the blog:

If we have activated that the Users can leave comments:

• Name: to identify the User
• Email: to know the email from which the comment was made.

*For Newsletter: 

If users want to receive notifications:

• Name and surname: to identify the user.
• Email: to receive notifications

*For the online store:

Only data that is mandatory to process an order will be requested.

• Name and surname: to manage the order.
• NIF/tax code: to manage the order.
• Address: to manage the order.
• Postal Code: to manage the order.
• Location: to manage the order.
• Province: to manage the order.
• Country: to manage the order.
• Telephone: to manage the order.
• E-mail: to manage the order, to be able to send copies of the order and other communications related to the order.
• Bank or financial data of the User involved in the payment.

*For the private customer area:

The customer area is a private area. The client will create a user and password to access this restricted service, understanding that he/she accepts all the legal conditions.

These purposes are based on legal principles for the processing of data collected by the regulations in force: for the performance of a contract or the provision of a service to users, for the fulfillment of legal obligations, for the legitimate interest and with the consent of the users. 

Data category

The data collected by the Web Site is not considered sensitive or protected data. 

According to article 9.1 of the new general data protection regulation of the European Union (GDPR), personal data are considered sensitive or protected data if they reveal:

• Ethnic or racial origin.
• Political opinions.
• Religious or philosophical convictions.
• Union membership.
• The processing of genetic data.
• Biometric data aimed at uniquely identifying a natural person.
• Health-related data.
• Data relating to the sex life or sexual orientation of a natural person.

We only work with the minimum identification data to carry out our work.

Data collected for the request of information through the web form or e-mail.

The personal data collected through the web form or email for the request of information are intended to send commercial information about our products and services.

The processing of the data in this specific case is legitimized by the express consent that you give us by accepting the sending of the information provided through the form or e-mail.

*For the contact form:

• First and last name: in order to be able to answer the query.
• Telephone: in order to be able to respond to your inquiry
• Email: in order to be able to respond to the inquiry

Operations carried out with personal data

Personal data are recorded through the website and stored on electronic media controlled and supervised by the data controller. The supports are equipped with the necessary technical and organizational measures that guarantee the due confidentiality in the treatment of the data.

The personnel involved in data processing operations: access, editing, deletion, etc... are trained and committed to our data protection policy.

In accordance with the provisions of Law 34/2002, of Services of the Information Society and Electronic Commerce in Article 21, we ask for your consent to send advertising communications that we believe may be of interest to you, by email or any other means of electronic communication equivalent, this consent.

Data retention

The personal data will be kept as long as necessary to meet the purpose / purposes for which they were. Therefore we will keep your personal information as long as there is a contractual and/or commercial relationship with you or as long as you do not exercise your right of deletion, cancellation and/or limitation of the processing of your data.

In these cases, we will keep the information properly blocked, without giving it any use, while it may be necessary for the exercise or defense of claims or may derive some kind of judicial, legal or contractual liability from its treatment, which must be attended and for which its recovery is necessary.

Recipients of your personal data

We inform users that their personal data will not be communicated to third parties, with the exception that such communication of data is covered by a legal obligation or when for the proper provision of the service or the execution of the contract is necessary to communicate your data to other responsible such as other group companies, processors.

Companies and entities and other organizations that have been contracted to provide services, such as: hosting, marketing services, communication, platform design and information society services. Businesses, companies or other organizations to whom you have asked us or agreed that we may share your personal data.

Companies or other organizations related to MONTE ORIBIO HOUSE identified on the Web Site: www.casamonteoribio.com     

Providers of professional services, such as lawyers, attorneys, notaries, registrars or other similar professionals.

Public bodies, courts, regulators and other administrative authorities, when we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect against claims against us or third parties, or the safety of individuals, as well as to prevent, or otherwise combat, fraud or for safety or security reasons.

For cases in which the communication of data to third parties is not covered by the legal bases established in the previous section, the communication of data to other recipients will only take place if the user has given his express consent.

MONTE ORIBIO HOUSE maintains strict criteria for the selection of data processors and is contractually committed to each of them to comply with and enforce compliance with the obligations established in the field of data protection.

Social plugins

On our Website we offer links and services related to different social networks. If the User is a member of a social network and clicks on the corresponding link, the provider of the social network may link your profile data with information about your visit to the Website.

Therefore, the User must be informed about the functions and policies on the processing of personal data of the respective social network. Whether you access one of our web pages with any of their profiles on social networks or share information through them.

The User can access at all times to the privacy policies of the different social networks, as well as configure their profile to ensure their privacy. 

• Facebook:

www.facebook.com/privacy

• Instagram:

www.instagram.com/terms

• Youtube: 

https://policies.google.com/privacy

Exercise of rights

In accordance with the rights conferred by current legislation on the protection of personal data, users may exercise their rights of access, rectification, limitation of processing, deletion, portability and opposition to the processing of their data by sending their request to the postal address indicated above or by e-mail to casamonteoribio@gmail.com

To exercise your rights, you must identify yourself by presenting your ID card. For any claim you can contact the same mail indicated. You may also contact the Spanish Data Protection Agency: www.agpd.es