1. Controller
Controller: Bodegas Petrón, S.L. · Spanish tax ID B27275882 · Lugar Doade, 55 · 27424 Sober (Lugo), Spain.
Privacy contact: info@bodegaspetron.es.
2. Data we use
Depending on the service, we may use your name, email, phone number, delivery address, order details, messages, visit requests and technical data required for security and operation.
The winery does not need to receive full card details: once a payment provider is enabled, those details will be entered in the provider's secure environment.
3. Purposes and legal bases
We use data to answer enquiries and requests; manage pre-contractual or contractual relationships, orders, payments, deliveries, returns and after-sales support; meet accounting, tax, consumer and security duties; and send marketing only with consent.
- Enquiries and bookings: steps requested before entering a contract.
- Orders and after-sales support: performance of a contract and legal obligations.
- Fraud prevention and legal claims: legitimate interests and legal duties, subject to applicable safeguards.
- Marketing news: consent, which can be withdrawn at any time.
4. Recipients and processors
We do not sell personal data. Data is shared only where needed with hosting, email, payment, delivery, support or management providers, banks and public authorities where legally required, under an appropriate contract or legal basis.
If a provider processes data outside the EEA, a valid transfer mechanism and appropriate safeguards will be used. The effective provider list must be reviewed before each provider is enabled.
5. Retention
Enquiries are kept while handled and then for as long as reasonably needed for potential liabilities. Order and invoice data is kept for statutory periods. Marketing data is kept until consent is withdrawn.
Browser storage periods are explained on the cookies and storage page.
6. Your rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent without affecting earlier processing, by emailing info@bodegaspetron.es and identifying your request.
You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Required and accurate data
Fields marked as required are needed to answer a request or process an order. Users must provide accurate, current information and should not send special-category or other sensitive data.
8. Children and security
Alcohol is not sold to anyone under 18. If we identify data sent by a minor without a valid basis, we will delete it where appropriate.
We apply reasonable safeguards, although no connected system can guarantee absolute security.