HAMMEKEN CELLARS is committed to protecting your personal information. Your privacy and trust are important to us, so we recommend that you read the following carefully. If you have any questions after doing so, you can contact us at our email address cellars@hammekencellars.com
Data Controller and Declaration of Regulatory Compliance.
This website is the responsibility of HAMMEKEN CELLARS, S.L., (hereinafter “HAMMEKEN CELLARS”), a company registered in the Alicante Mercantile Registry, volume 2275, folio 125, page A55801, with CIF number B53417622 and registered office at Calle del Llavador, 20, 03700 Denia (Alicante, Spain). HAMMEKEN CELLARS declares that it complies with current Spanish and European legislation regarding the Protection of Personal Data, specifically Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016. In accordance with the state of the technology, the nature of the data, and the risks to which they are exposed, HAMMEKEN CELLARS declares that it applies appropriate technical and organizational measures to guarantee the confidentiality and privacy of the personal data that may be collected through this website or through the HAMMEKEN CELLARS contact email; as well as the integrity, availability, and security of said data, taking the necessary actions to prevent any alteration, loss, unauthorized access, or fraudulent use of the data processed. HAMMEKEN CELLARS guarantees that the User’s personal data is processed lawfully, fairly, and transparently, and that it has been collected with the User’s explicit consent after being informed of the purposes of the processing expressly indicated in this Privacy Policy. HAMMEKEN CELLARS will not process or share Users’ personal data except as permitted by current regulations, at the request of competent authorities, and with the User’s express and prior informed consent. HAMMEKEN CELLARS will not use Users’ personal data for purposes other than those previously informed prior to the User submitting their data.
Personal information.
Personal information refers to any information that relates to an identified or identifiable natural person, directly or indirectly (name, identification number, location data, or factors specific to the physical, psychological, genetic, mental, economic, cultural, or social identity of that person, etc.). Specially protected personal information is information related to race or ethnic origin, political opinions, religious beliefs, membership in labor unions, physical or mental health, additional medical information, including biometric and genetic data or sexual preferences, and criminal records or convictions.
HAMMEKEN CELLARS does not collect or process data from specially protected categories. This data is exclusively used to process customer and supplier contact information, resulting from requests for information, order management, and tasting events, as well as data from our employees for the management of employment relationships and legal obligations.
How we use personal information: Transparency and information on personal data protection.
We want to clarify our privacy practices so that Users can make informed decisions about HAMMEKEN CELLARS’ use of their personal information. Operations, processes, and technical procedures, whether automated or non-automated, that enable the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination, or any other form of access or interconnection, restriction, erasure, or destruction of personal data or sets of personal data are considered personal data processing. We collect, use, disclose, transfer, and store personal information when necessary to provide our services and for our operational and business purposes, as described in this Privacy Policy.
Lawfulness and fairness
We will always require your prior consent to process your personal data for one or more specific purposes, which will be communicated to you prior to submitting your data. If you contact us to request information or place an order, we understand that a pre-contractual relationship exists. In any case, in our response, we will inform you of the processing of your personal data and refer you to this privacy policy.
Minimization
We only require from Users the data strictly necessary in relation to the purposes of data processing.
Retention Limitation
We retain data for the time necessary depending on the purpose of the processing. We inform you of the retention period in each case, and in cases where the purpose is a periodic service, we review and update personal databases, deleting inactive records.
Confidentiality
We apply appropriate technical and organizational security measures for the processing of personal data, ensuring its confidentiality and minimizing the risk of unauthorized access or misuse of Users’ personal data by third parties.
Your commitment: the accuracy of the data you provide to us. The User declares that the personal data provided to HAMMEKEN CELLARS is truthful. As a User, you should be aware that you are solely responsible for any direct or indirect damage or harm that may be caused to HAMMEKEN CELLARS, as the entity responsible for this website, or to a third party if you send us false data or data from third parties that cause deception, damage, or harm. To ensure we can keep your data accurate and up-to-date, we ask that you inform us of any changes that may occur in the data provided.
Consent of minors.
Under no circumstances does HAMMEKEN CELLARS process data from minors.
Purpose of processing by HAMMEKEN CELLARS.
HAMMEKEN CELLARS informs you that all personal data provided by the User by sending any communication to our email address will be incorporated and processed by HAMMEKEN CELLARS as the data controller for the following purposes:
To manage inquiries made through the contact email address on this website and provide a timely response.
To manage job applications received through the contact email address or any other means of communication.
To send you electronic communications in response to your inquiries, providing information or commercial communications. HAMMEKEN CELLARS may occasionally send you advertising communications about its commercial activities or invitations to events it organizes. You may opt out at any time by sending an email to cellars@hammekencellars.com and completing your request in accordance with the requirements explained in the “Exercise of Rights” section of this Privacy Policy. Manage registrations and deregistrations of Users in HAMMEKEN CELLARS databases for electronic communications.
Conduct website analytics for statistical purposes to improve the information offered through this website.
Manage our social media platforms with respect to the data of those who become followers. In this regard, data processing is governed by the provisions of this Privacy Policy and by the terms and conditions, privacy policies, and access regulations specific to each social media platform.
We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of crime, loss or fraud prevention, or to comply with internal and external audit requirements, in addition to our information security objectives. This may involve processing: (a) under applicable law, which may include laws outside the User’s country of residence; (b) to respond to requests from courts, law enforcement agencies, regulatory bodies, and other public and governmental authorities, which may include authorities outside the User’s country of residence; (c) and to protect our rights, privacy, safety, or property, or those of others.
Before submitting any request or information through any form on this website, you must expressly acknowledge that you have read this Privacy Policy, which, for legal purposes, implies that you have given your unequivocal, free, specific, and informed consent to the processing of your personal data for the purposes indicated. If you decide to send us any communication through our email address, we will understand that you are also giving your express consent for us to process your personal data in accordance with this Privacy Policy. This express consent implies authorization for HAMMEKEN CELLARS to process your data under the terms established in this Privacy Policy, as well as by the joint controllers and data processors with whom HAMMEKEN CELLARS maintains an obligatory contractual and compliance monitoring relationship.
International transfers.
In some cases, HAMMEKEN CELLARS uses third-party tools and services to manage this website and to perform analytics. Some of these services may be owned by third parties located outside the European Union (Google, WordPress, etc.). HAMMEKEN CELLARS strives to use secure tools whose servers are preferably located in Spain, or failing that, in a European Union member state, or that comply with European law according to the guidelines and recommendations of the Spanish Data Protection Agency, the European Commission, and the relevant EU agreements on international data transfers, including obtaining certification on the Privacy Shield list. Most of these third parties declare that they comply with European data protection regulations and even have their servers and/or headquarters in Europe. However, in the event that an international data transfer is necessary, acceptance of this Privacy Policy means that, as a User, you expressly consent to said transfer.
Security Measures Applicable to the Processing of Personal Data.
In order to protect the personal data of Web Users and subscribers, HAMMEKEN CELLARS ensures itself and supervises its data processors in the application of appropriate technical and organizational measures based on the state of the art to protect personal data, taking into account the scope, context, and purposes of the processing, as well as the risks of varying probability and severity for the rights and freedoms of data subjects, striving to ensure the confidentiality, integrity, availability, and resilience of the processing systems and services. In particular, HAMMEKEN CELLARS has implemented a connection encryption and authentication protocol that guarantees that the personal data you send us is transmitted to our servers through a secure SSL (Secure-Socket-Layer) connection, in order to protect it from third parties. Our information security policies and procedures are regularly reviewed and updated to meet the needs of our business, technological changes, and regulatory requirements. We implement technical and organizational measures to securely store and transfer information, protecting it from attacks or accidental loss, as well as unauthorized access, use, destruction, or disclosure.
We have a privacy and security risk assessment strategy and an incident response plan designed within the personal data protection management system to safeguard the continuity of our services and protect our staff and the personal data for which we are responsible or in charge.
We apply appropriate restrictions on access to personal information.
We regularly train and educate our staff on security and personal data protection issues and require our data processing providers to provide certification of the appropriate security controls they implement in each case.
We require our employees and contractors to undergo ongoing training in information security, as well as in other relevant areas, as they have access to personal information and other confidential company data.
HAMMEKEN CELLARS declares that it is capable of acting quickly and effectively to restore the availability and access to personal data in the event of a physical or technical incident. To this end, it maintains an IT maintenance service that keeps an up-to-date Incident Log, an Incident Response Plan, and the necessary backup management and control activities to ensure information recovery in the event of a potential security incident. HAMMEKEN CELLARS declares that it stores Users’ personal data on secure servers, protected against the most common types of attacks, and located in Spain, Europe, or, in the case of storage outside Europe, after verifying compliance with European agreements (Privacy Shield).
Notification of personal data security breaches.
In the event of a personal data breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons, HAMMEKEN CELLARS will notify the Spanish Data Protection Agency within 72 hours of becoming aware of the incident, describing the nature of the breach, the potential consequences that may arise, and the measures taken or proposed to remedy the breach; and, if possible, stating the categories and approximate number of data subjects and data affected. Furthermore, HAMMEKEN CELLARS will notify data subjects as soon as possible when a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, describing the potential consequences that may arise and the measures taken or proposed to remedy the breach.
Exercise of rights.
At any time, the User may withdraw their consent and/or exercise their rights of access, rectification, erasure, restriction of processing, objection, and data portability, as provided for in European personal data protection regulations, by sending an email to cellars@hammekencellars.com or by sending a letter to C/ LA MUELA Nº 16, 03730 JÁVEA (ALICANTE).
In such cases, the User must indicate the right they wish to exercise and attach a copy of their ID or any other valid identification document that legitimizes them to do so, including any document that allows for electronic identification.
What do these rights consist of?
The right of access entitles the User to obtain information about what personal data is being processed, the purpose of the processing, the categories of data processed, the retention period or criteria, the recipients or categories of recipients; if profiling is created, significant information about the logic applied and the expected consequences of the processing; the exercise of the rights to rectification or erasure of personal data, restriction of processing, or objection to processing, as well as the right to lodge a complaint with the Supervisory Authority. To exercise this right, the User does not need to provide justification, unless they have exercised it within the previous six months. If they exercise their right of access, HAMMEKEN CELLARS is legally obliged to resolve the access request within a maximum period of one month from receipt of the request, providing a copy of the personal data being processed or allowing remote access to it. HAMMEKEN CELLARS will also provide any additional copies requested by the data subject, upon payment of the fee generated by the administrative costs of issuing them. HAMMEKEN CELLARS may deny access and, where appropriate, invoke the protection of the Data Protection Agency due to the exercise of such access within the previous six months, or because it is provided for or prevented by a national or European regulation. The right to rectification entitles the User to request that HAMMEKEN CELLARS rectify data they believe to be inaccurate or incomplete. To do so, the User must indicate which data they are referring to and the correction that needs to be made, providing supporting documentation. In such a case, HAMMEKEN CELLARS must make the rectification as soon as possible and, in any case, within one month of receiving your request. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. HAMMEKEN CELLARS will inform the interested party of the extension within one month of the request.
The right to erasure (or “right to be forgotten”) means that the User has the right to have their data erased when the processing is unlawful, the data subject has withdrawn their consent or exercised their right to object, and other legitimate grounds for processing do not prevail; the data is no longer necessary in relation to the purposes for which it was collected or processed; or the data must be erased to comply with a legal obligation of HAMMEKEN CELLARS. The data subject does not have the right to have HAMMEKEN CELLARS erase their data when processing is necessary to exercise the right to freedom of expression and information; to comply with a legal obligation of HAMMEKEN CELLARS; for the formulation, exercise, or defense of legal claims; for public interest based on current legislation for reasons of public health or for historical, statistical, or scientific research purposes. HAMMEKEN CELLARS will respond to your request as soon as possible and, in any case, within one month of receiving your request. This period may be extended for another two months if necessary, taking into account the complexity and number of requests. HAMMEKEN CELLARS will inform the data subject of the extension within one month of the request.
The right to object means that the User has the right to request that their personal data not be processed or to cease processing in cases where the processing is based on direct marketing or profiling; the interests or rights and freedoms of the data subject, especially if they are a child, prevail over the legitimate interests of HAMMEKEN CELLARS or third parties; or historical, statistical, or scientific research, unless processing is necessary for reasons of public interest. HAMMEKEN CELLARS will respond to your request as quickly as possible and, in any case, within one month of receiving your request. This period may be extended for another two months if necessary, taking into account the complexity and number of requests. HAMMEKEN CELLARS will inform the data subject of the extension within one month of the request.
The right to restriction of processing means that the User has the right to decide which personal data they do not wish to be processed in the future. This right may be exercised when they have previously contested the accuracy of the data; when the processing is unlawful and, instead of exercising its deletion, they decide to restrict its processing for future processing; or when they consider that HAMMEKEN CELLARS no longer requires the personal data for the authorized processing purposes, but the User instead requires it for the formulation, exercise, or defense of legal claims. In the event of restriction of processing, the restriction may be lifted if the data subject consents; there is a possibility that the processing may affect the protection of the rights of another natural or legal person; there is a justifiable legal proceeding; or there is an important reason of public interest based on current legislation. HAMMEKEN CELLARS will respond to your request as soon as possible and, in any case, within one month of receiving it. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. HAMMEKEN CELLARS will inform you of the extension within one month of the request.
The right to data portability means that the User has the right to receive the personal data provided to HAMMEKEN CELLARS or to have HAMMEKEN CELLARS transmit it to another controller in a structured, commonly used, machine-readable format, provided that the processing is carried out by automated means and the processing is based on the consent the User once gave for one or more specific purposes, or for the execution of a contract to which they were a party. The right to data portability does not apply when transmission is technically impossible; or when it may negatively affect the rights and freedoms of third parties; or when the processing serves a mission of public interest based on current legislation. HAMMEKEN CELLARS will respond to your request as soon as possible and, in any case, within one month of receiving your request. This period may be extended by another two months if necessary, taking into account the complexity and number of requests. HAMMEKEN CELLARS will inform the data subject of the extension within one month of the request.
How do we share information with third parties? Data processors.
We share personal information with third parties for the purpose of providing services or conducting business operations under the terms described in this Privacy Policy or when we believe it is permitted or required by law. Most of the time, we share non-personal, anonymous, or statistical data with third parties. When we share personal information, we do so in accordance with the privacy and data security requirements established in this Privacy Policy. HAMMEKEN CELLARS informs the User that their personal data may be transferred to:
Our third-party service providers, to provide services to other companies and/or brands, offer content, software support, systems and platforms, marketing services, cloud hosting services, advertising, data analysis, or to hold events. In such cases, data will only be transferred to the third party when HAMMEKEN CELLARS has the User’s express consent and maintains a contractual relationship with the data processor that guarantees confidentiality, the non-use of the personal information of the Users to whom we make the personal information available for purposes other than those indicated above, as well as compliance with our internal privacy and information security regulations.
When such data transfer is covered by a legal obligation or is required by competent authorities to respond to legal requests, a criminal investigation of possible illegal activity, or claims alleging that content infringes the rights of third parties, or to protect the rights, property, or safety of third parties, in the event of a merger, sale, restructuring, acquisition, joint venture, assignment, transfer, or other disposition, in whole or in part, of our business, assets, or shares.
If HAMMEKEN CELLARS is required by competent authorities to respond to legal requirements, a criminal investigation into possible illegal activity, or claims alleging that content infringes the rights of third parties, or to protect the rights, property, or safety of others, it may communicate Users’ personal information to the competent authorities. If the rights to the website are transferred to another entity, HAMMEKEN CELLARS undertakes to agree on the subrogation and commitment of the new managing entity responsible for the processing of personal data to the continuation of this Privacy Policy. It is committed to notifying the User in advance if the personal information is to be used in a manner contrary to this policy.
Cookie Policy
HAMMEKEN CELLARS and third-party service providers use cookies (small information files that are downloaded to a User’s terminal device when accessing a website, in order to store data that can be updated and retrieved by the person responsible for their installation) to perform certain functions that are considered essential for the correct operation and display of the website and, in some cases, to store and manage User preferences, enable content, and collect analytics, usage, or traffic data. To obtain these analyses, this website may automatically store certain information in server logs through the use of cookies that collect usage and navigation data related to the User’s use of this website.
These logs typically include information such as browser type, browser language, date and time of access request, URL, device or equipment model, operating system version, unique identifiers (IP addresses), and data about the mobile network used to access and navigate this website. HAMMEKEN CELLARS may use cookies that record IP addresses during access and browsing to analyze and measure access and time spent on the various pages of this website and draw conclusions about web traffic trends. Users should be aware that we use Internet tools and platforms that install cookies that are not controlled by HAMMEKEN CELLARS. Therefore, the owners of these tools may use such data for other purposes for which HAMMEKEN CELLARS is not responsible. If you wish to obtain more information about our use of cookies and how you can prevent their installation, you can visit our Cookie Policy.
For how long will we process your data?
The personal data provided will be retained as long as the User does not request its deletion. This data is used to keep them informed about the actions taken by HAMMEKEN CELLARS, and as long as it is adequate, relevant, and limited to what is necessary for the purposes for which it is processed in accordance with this Privacy Policy.
Reuse of this policy.
HAMMEKEN CELLARS does not authorize the copying, reproduction, or reuse of this privacy policy, which has been specifically analyzed by its trusted technology law advisors to meet the obligations inherent to this website.
Applicable law and jurisdiction.
HAMMEKEN CELLARS is headquartered in Spain; therefore, the content of this Privacy Policy has been drafted in accordance with Spanish law and applicable European Union regulations. The User agrees that any claims or complaints against HAMMEKEN CELLARS arising from or related to the use of this website and, more specifically, the processing of their personal data will be resolved by the court of competent jurisdiction located in Alicante. Should HAMMEKEN CELLARS be required to file any claim, it will do so before the competent court of the User’s domicile, or in Alicante for legal entities or non-consumer professionals. If the User accesses this site from a location outside of Spain, they are responsible for complying with all applicable local and international laws.
Reservation of the right to modify the Privacy Policy.
HAMMEKEN CELLARS may modify this Privacy Policy at any time, taking into account the evolution of this website and the content offered therein, if it deems it necessary, whether for legal or technical reasons, or due to changes in the nature or layout of the website. There is no obligation to notify or inform the User of such modifications; publication on the website will be deemed sufficient.
Any modification will be effective for Users who use this website after such modification. Continued use of this site after the publication of any changes will be deemed acceptance of them. Therefore, the date of their last update will always be published at the end of these Terms of Use, so the changes will be effective as of that date. If the User does not agree with the updates to our Privacy Policy, they may opt out by not entering their personal data in the website’s contact forms or by exercising their right to object, cancel, or delete their data under the terms established in the Exercise of Rights section of this Privacy Policy.
Last updated: 09/13/2019