Privacy Policy / Legal information
Privacy and Cookie Policy
Last updated:
This Privacy and Cookie Policy explains how Cellar Tastings SL, trading as Cellar Tours, collects, uses, discloses and protects personal data when you visit this website, contact us, subscribe to our newsletter, request a quotation or use our travel-planning services.
1. Data controller
The controller responsible for your personal data is:
Cellar Tastings SL, trading as Cellar ToursTax identification number: ESB83718858
Plaza de los Bandos, 5, 2A
Llanes, Asturias, 33500
Spain
Email: [email protected]
This policy is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), and applicable Spanish electronic-communications law.
2. Personal data we collect
Depending on how you interact with Cellar Tours, we may collect:
- Identity and contact information, including your name, email address, postal address and telephone number.
- Travel information, including proposed dates, destinations, interests, budget, accommodation preferences and itinerary requirements.
- Information about travelling companions supplied by you or another authorised member of your group.
- Dietary, allergy, accessibility or mobility information needed to arrange requested travel services.
- Enquiry, quotation, booking and customer-service correspondence.
- Billing, transaction and payment-related information.
- Newsletter subscriptions and marketing preferences.
- Technical information, including IP address, browser, device, website activity and cookie identifiers.
- Other information you voluntarily provide to us.
Dietary, allergy, medical, accessibility or mobility information may reveal health information and constitute special-category personal data. Where required, we will ask for your explicit consent before processing or sharing that information.
Please do not provide personal data that is not reasonably necessary for your enquiry or trip.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing proposed itineraries or quotations. | Taking steps at your request before entering into a contract. |
| Planning, booking, administering and providing requested travel services. | Taking requested pre-contractual steps and performing our contract with you. |
| Processing payments, issuing invoices and maintaining accounting and business records. | Performance of a contract and compliance with legal obligations. |
| Arranging dietary, allergy, accessibility, mobility or health-related requirements. | Explicit consent where the information constitutes special-category personal data, or another applicable legal condition. |
| Providing customer support, handling complaints and establishing, exercising or defending legal claims. | Performance of a contract, compliance with legal obligations and our legitimate interests in managing and protecting our business. |
| Sending newsletters and promotional communications that you have requested. | Your consent. You may withdraw consent at any time. |
| Operating, maintaining and securing the website and preventing fraud or misuse. | Our legitimate interests in operating and protecting our website and business. |
| Using non-essential analytics, advertising or similar tracking technologies. | Your consent, where required. |
Where processing is based on legitimate interests, we consider the necessity and proportionality of the processing and its potential effect on your rights.
4. Required and optional information
Information identified as required on our forms is necessary to respond to your request or provide the requested service. If you do not provide required information, we may be unable to prepare a quotation, complete a booking or provide part of the requested service.
Newsletter subscription and consent to promotional communications are optional and are not conditions of requesting or purchasing a tour.
5. Sources of personal data
We normally obtain personal data directly from you. We may also receive it from:
- A lead traveller or another member of your travelling party.
- A travel adviser, representative or person making arrangements on your behalf.
- Suppliers involved in an existing enquiry or booking.
- Referral partners where receipt of the information is lawful and appropriately disclosed.
If you provide another person’s personal data, you must be authorised to do so and should ensure that the person receives this Privacy Policy.
6. Recipients of personal data
We disclose personal data only where reasonably necessary for the purposes described in this policy. Recipients may include:
- Hotels, wineries, restaurants, guides, drivers, transport companies and other suppliers involved in your requested itinerary.
- Travel partners and destination-management providers.
- Payment, banking and fraud-prevention providers.
- Website hosting, email, customer-management, communications, analytics and IT-security providers acting on our instructions.
- Newsletter and email-distribution providers.
- Accountants, insurers, auditors, lawyers and other professional advisers.
- Public authorities where disclosure is required by applicable law.
Some travel suppliers act as independent data controllers and process information under their own privacy policies. We disclose only the information reasonably required to arrange or provide the requested service.
Cellar Tours does not sell personal data.
7. International transfers
Cellar Tours arranges international travel. If you ask us to arrange services outside the European Economic Area, it may be necessary to provide relevant traveller information to hotels, wineries, restaurants, guides, transport providers and other suppliers in the destination country.
Some of our technology or communications providers may also process personal data outside the European Economic Area.
Where GDPR transfer rules apply, we use an applicable legal mechanism, such as a European Commission adequacy decision, European Commission Standard Contractual Clauses, another recognised safeguard or an applicable GDPR provision permitting a transfer necessary to provide services requested by you.
You may contact us for further information about the safeguards applicable to a particular transfer.
8. Retention of personal data
We retain personal data only for as long as reasonably necessary for the relevant purpose and applicable legal, accounting and claims periods.
- Enquiries that do not result in a booking are normally retained for no longer than 24 months after the last meaningful contact.
- Booking and customer records are retained for the duration of the customer relationship and afterward for applicable contractual, legal and limitation periods.
- Invoices, accounting and transaction records are retained for the periods required by Spanish tax, accounting and commercial law.
- Special-category travel information is retained only for as long as needed to arrange and administer the relevant services, unless longer retention is legally necessary.
- Newsletter information is retained until you unsubscribe or withdraw consent. We may retain a limited suppression record to ensure your opt-out continues to be respected.
- Complaint and legal-claim records are retained until the relevant limitation period has expired.
- Cookie and analytics information is retained for the periods stated in the Cookie Policy below.
When personal data is no longer required, it will be deleted, anonymised or securely restricted.
9. Your data-protection rights
Subject to the conditions established by applicable law, you may ask us to:
- Provide access to your personal data.
- Correct inaccurate or incomplete personal data.
- Delete personal data that is no longer required.
- Restrict how your personal data is processed.
- Provide eligible personal data in a portable format.
- Object to processing based on legitimate interests.
- Stop using your personal data for direct marketing.
- Withdraw consent where processing is based on consent. Withdrawal does not affect processing carried out before consent was withdrawn.
To exercise a right, email [email protected] or write to Cellar Tastings SL, Plaza de los Bandos, 5, 2A, Llanes, Asturias, 33500, Spain.
Please identify the right you wish to exercise and provide the information reasonably necessary for us to verify your identity. We may request additional identification where necessary.
If you believe your personal data has been processed unlawfully, you may submit a complaint to the Spanish Data Protection Agency (AEPD) . You may also be entitled to complain to the data-protection authority where you live or work.
10. Automated decision-making
Cellar Tours does not make decisions producing legal or similarly significant effects based solely on automated processing.
11. Security
We maintain appropriate technical and organisational measures intended to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access.
No internet transmission or storage system can be guaranteed to be completely secure.
12. Children’s information
Our website and travel-planning enquiry services are not directed at children.
Where a booking includes a child, the responsible adult making the booking must be authorised to provide the child’s information. We use that information only as reasonably necessary to arrange and provide the requested travel services or as required by law.
14. Third-party websites
This website may link to websites operated by hotels, wineries, restaurants, publications, social-media services and other third parties. Those organisations control their own websites and privacy practices.
We encourage you to review their privacy information before providing personal data.
15. Changes to this policy
We may update this Privacy and Cookie Policy when our processing activities, cookies, suppliers or legal obligations change. The last-updated date appears at the top of this page.
Where a change materially affects how we use personal data or cookies, we will provide an additional notice or request a new consent decision where appropriate.
