Privacy policy

Your privacy is important to us. At Bodegas La Catedral, we are committed to protecting your personal data and treating it transparently.

1) Data Controller

Bodegas La Catedral (hereinafter, "we")
Contact: admin@bodegaslacatedral.com

2) Purposes of processing

• Manage your purchases: orders, payments, shipping, and after-sales service.
• Customer service: respond to inquiries via email, form, or chat.
• Commercial communications (if you authorize): news, offers, and events.
• Security and fraud prevention.
• Website improvement: statistics and cookies (see cookie policy).

3) Data we process

Identification and contact information (name, email, telephone number), purchase and shipping information, payment information (managed via a secure gateway), communications, and technical browsing data (IP, device, cookies).

4) Legal Basis

• Execution of contract (your purchases).
• Consent (newsletter and non-essential cookies).
• Legitimate interest (security and service improvement).
• Legal obligation (billing and taxes).

5) Data retention periods

• Orders and billing: up to 6 years (legal obligation).
• Inquiries: up to 12 months.
• Newsletter: until you unsubscribe.
• Cookies: depending on their purpose (see cookie policy).

6) Recipients

We share data with providers who act as data processors to provide the service (e.g., Shopify as the platform and hosting provider, payment gateways, logistics, email/marketing, and analytics), always under contract and according to our instructions.

7) International Transfers

Some providers (e.g., Shopify) may process data outside the EEA. Standard contractual clauses or other appropriate safeguards apply in these cases.

8) Your rights

You can access, rectify, delete, object to, restrict the processing, and transfer your data, as well as withdraw your consent when appropriate. To exercise these rights, please write to admin@bodegaslacatedral.com.

If you wish, you can also file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9) Minors

Our products and services are intended for adults. If we detect data from minors, we will delete it.

10) Security

We implement technical and organizational measures to protect your data from unauthorized access, misuse, or loss.

11) Changes to the Policy

We may update this policy from time to time. We will post the current version on this page.

Last updated: 2025