Data protection
Privacy policy
This policy explains what personal data is collected through this website, what it is used for, how long it is kept and what rights you have over it. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Last updated:
1. Data controller
- Controller
- [RAZÓN SOCIAL] (NIF [CIF/NIF]), [DIRECCIÓN COMPLETA], [CP] [LOCALIDAD] ([PROVINCIA])
- Data protection contact
- info@mateonieves.com
- Website
- https://mateonieves.com
No data protection officer has been appointed, as none of the circumstances in article 37 GDPR apply.
2. Data collected and purposes
This website does not sell products or create user accounts. The only processing of personal data is the following:
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form | Name, email address and message content | Consent of the data subject (art. 6.1.a GDPR) given by submitting the form | Until the enquiry is resolved and then 1 year as evidence of the response |
| Direct email | Whatever data you include in your message | Legitimate interest in responding to communications received (art. 6.1.f GDPR) | 1 year from the last contact |
| Web analytics (Google Analytics 4) | Device identifier, pages viewed, session duration, country and language, truncated IP address | Explicit consent given in the cookie notice (art. 6.1.a GDPR) | 14 months |
| Age verification | Only a local flag in your browser with the date of confirmation | Legal obligation to restrict access by minors (art. 6.1.c GDPR) | 30 days on your own device; never sent to the winery |
No automated decisions are taken and no profiling with legal effects on individuals is carried out.
3. Whether data is mandatory
The contact form fields marked as required are necessary in order to reply. Without them the enquiry cannot be processed. All other processing is optional and depends on your consent.
4. Recipients and processors
Your data is not shared with third parties except where legally required. The following providers act as processors under article 28 GDPR contracts:
- Resend, Inc.
- Delivery of the emails generated by the contact form. United States, under European Commission standard contractual clauses.
- Google Ireland Limited
- Google Analytics 4, only if you accept analytics cookies. Transfers to the United States may occur under the EU-US Data Privacy Framework.
- Hosting provider
- Servers where the site is published and where technical access logs are generated.
5. International transfers
Where a provider processes data outside the European Economic Area, the transfer relies on a European Commission adequacy decision or on standard contractual clauses, supplemented by additional technical measures such as encryption in transit and at rest.
6. Your rights
You may exercise the following rights at any time by writing to info@mateonieves.com, stating the right you wish to exercise and attaching a copy of a document proving your identity:
- Access: find out what data of yours is being processed.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion when the data is no longer necessary.
- Objection: object to processing based on legitimate interest.
- Restriction: ask that data be kept but not processed while a claim is resolved.
- Portability: receive your data in a structured, commonly used format.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
A reply will be given within one month at most. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
7. Security measures
Technical and organisational measures appropriate to the risk are applied: TLS encryption for all communications, restricted access to the contact inbox, validation of incoming data and minimisation of the information requested.
8. Changes to this policy
This policy may be updated to reflect regulatory changes or new processing activities. The date of the last revision appears at the top of the document. For any questions: info@mateonieves.com.