Privacy Policy

Celler Can Batlle S.L. (hereinafter, “ARTCAVA”) is committed to protecting your personal data and privacy. This Privacy Policy describes how we collect, use, and safeguard your personal information when you visit or make a purchase on our website, in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller: The data controller responsible for processing your information is Celler Can Batlle S.L., with registered address at Masia Can Batlle, s/n, 08793 Avinyonet del Penedès (Barcelona), Spain. If you have any questions or requests regarding your personal data, you can contact us via email at info@artcava.com.

Personal Data We Collect and Purposes of Processing:

Order Processing: When you purchase products from ARTCAVA’s website, we collect personal data such as your name, contact details (email, phone number), billing and shipping address, and payment information. We use this data to process and fulfill your order, arrange delivery, provide invoices, and handle customer service related to the purchase. The legal basis for this processing is the performance of a contract (the sales agreement between you and us). We will retain this data for as long as necessary to manage the contractual relationship and for the duration required by relevant laws (e.g., tax and accounting regulations) that oblige us to keep transaction records.

Enquiries and Contact Requests: If you contact us via our contact form, email, or other means, we will use the personal data you provide (such as your name, email address, and any information contained in your message) solely to respond to your inquiry or request. The legal basis for this processing is your consent (which you grant by submitting the form) or our legitimate interest in effectively addressing communications directed to us. We will retain the data from correspondence for the time needed to attend your inquiry and, at most, for a period of approximately 1-2 years in case further follow-up is required, unless you request its earlier deletion.

Newsletter Subscription: If you subscribe to our newsletter, we will collect your email address (and possibly your name) to send you our periodic newsletter, updates about our products, special offers, and news related to ARTCAVA. We will only send you these communications if we have your explicit consent (for example, by you ticking the subscription box or confirming via a double opt-in email). You can withdraw your consent at any time (for instance, by clicking the “unsubscribe” link in any newsletter email or contacting us). If you do so, we will stop sending you the newsletter and will delete or anonymize your email from our mailing list. We retain your email for newsletter sending until you unsubscribe or the newsletter service is discontinued.

Browsing Data and Cookies: When you browse our website, we automatically receive technical information such as your IP address, browser type, operating system, referring URL, and certain browsing details (e.g., pages visited, time spent). We may use cookies and similar tracking technologies to collect this information. Some cookies are necessary for the site to function (and do not require consent), while analytics and advertising cookies will only be used with your consent (see our Cookie Policy below for details). The purposes of processing browsing data are to analyze site traffic, improve website performance, personalize content, and (with consent) provide targeted advertising. The legal basis for processing analytics and advertising data is your consent. You have the ability to accept or reject such cookies via the cookie consent banner when you first visit our site, and you can adjust your preferences later as explained in the Cookie Policy.

No Data of Minors: Our services are intended for adults of legal drinking age. We do not knowingly solicit or collect personal information from individuals under 18 years of age. If we become aware that a minor has provided us with personal data, we will take steps to delete such data. Parents or guardians who believe that we might be processing information from or about a minor may contact us to request deletion.

How We Share Your Data: ARTCAVA treats your personal data with strict confidentiality. We do not sell or rent your personal information to third parties. We will only share your data in the following circumstances:

Service Providers: We may disclose data to trusted third-party service providers who perform functions on our behalf, such as delivery companies (to ship your orders), payment processors (to handle payment transactions securely), IT or hosting providers (to host our website and databases), email service providers (to send transactional emails or newsletters), etc. These parties will only have access to the information necessary to perform their functions and are obligated to protect it and use it only for the purposes we specify, under data processing agreements compliant with GDPR. For example, if you purchase a product, we will provide your address and phone number to the courier so they can deliver your package.

Legal Obligations: We may disclose personal data when required by law or in response to valid requests by public authorities (e.g., to comply with a subpoena, court order, or other legal process). Additionally, we might disclose information if necessary to detect or prevent fraud, security, or technical issues, or to protect the rights, property, or safety of ARTCAVA, our customers, or others, in accordance with applicable law.

Except for the cases mentioned above, we will not share your data with third parties without obtaining your prior consent. In the event that any personal data is transferred outside the European Economic Area (EEA) (for instance, if we use a US-based email newsletter service or cloud provider), we will ensure that appropriate safeguards are in place in accordance with GDPR requirements (such as Standard Contractual Clauses or that the recipient is certified under a recognized framework like the EU-US Data Privacy Framework, if applicable) to protect your information.

Retention Period: We keep personal data for no longer than necessary for the purposes for which it is processed. Specifically:

Order data is retained for the duration of the customer relationship and thereafter as required by Spain’s commercial and tax laws (for example, invoices must be kept ~6 years for tax purposes, as mandated by law).

Contact form data is generally kept until we have responded to your inquiry and for a short period thereafter in case further follow-up is needed (typically not more than 2 years), unless other legitimate reasons justify a longer retention (e.g., a dispute or legal requirement).

Newsletter data is kept until you unsubscribe or the mailing list is purged due to inactivity.

Cookie data is retained according to the specific cookie’s duration (see Cookie Policy), unless you clear those cookies or withdraw consent.

We periodically review the data in our possession and delete or anonymize personal data that is no longer needed.

Your Rights: As an individual (“data subject”) whose personal data we process, you have certain rights under GDPR and other applicable laws. These include:

Right of Access: You have the right to know whether we are processing your personal data, and if so, to receive a copy of that data along with supplementary information about the processing.

Right to Rectification: You have the right to request correction of inaccurate personal data and to have incomplete data completed.

Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data when, for example, it is no longer necessary for the purposes it was collected, you withdraw consent (and no other legal basis exists), or if it was processed unlawfully. This right is not absolute – sometimes we may have legal obligations or other legitimate grounds to retain your data. We will inform you if that is the case.

Right to Restriction: You can ask us to restrict (i.e., store but not further process) your personal data in certain circumstances – for instance, while we are evaluating a request for rectification or an objection to processing, or if the processing is unlawful but you prefer restriction over deletion.

Right to Data Portability: When processing is based on consent or contract and carried out by automated means, you have the right to receive the personal data you provided us in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

Right to Object: When we process data based on our legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. If you make such an objection, we will stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise, or defense of legal claims. You also have an unconditional right to object to your data being used for direct marketing purposes at any time.

Right to Withdraw Consent: If you have given consent for a specific processing activity, you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal. For example, you can unsubscribe from our newsletter or opt-out of certain cookies at any time, as described above.

To exercise any of these rights, please contact us by email at info@artcava.com or in writing to our postal address. Please provide your name, contact information, and clearly indicate which right you wish to exercise and on what data. For your protection, we may take steps to verify your identity before fulfilling your request (for example, we might request you to provide certain information or identification). We will respond to your request within the timeframes established by law (generally within 1 month, extendable to 2 months for complex requests, in which case we will inform you of the extension).

If you believe that our processing of your personal data infringes the law, or if you are not satisfied with our response to any rights exercise request, you have the right to lodge a complaint with a supervisory authority, particularly in the EU country where you live or work, or where the alleged infringement took place. In Spain, the relevant supervisory authority is the Spanish Data Protection Agency (AEPD).

Data Security: We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. For example, our website uses HTTPS/SSL encryption to secure data transmission, and we maintain firewalls, access controls, and other security protocols. Our service providers are also selected for their commitment to data security. However, please be aware that no internet transmission or storage is 100% secure, so we cannot guarantee absolute security of information. You share data with us at your own risk, but rest assured we take security very seriously and continuously improve our safeguards.

External Links: Our website may contain links to external websites or services that are not operated by us (for instance, links to our social media pages, partner websites, or articles about wine tourism). We are not responsible for the content, privacy policies, or practices of those third-party sites. We recommend you review the privacy policy of any site you visit. This Privacy Policy applies solely to personal data processed by ARTCAVA through our website and services.

Contact Us: If you have any questions or comments about this Privacy Policy or about how we handle your personal data, please don’t hesitate to contact us at info@artcava.com. We value your privacy and will address your inquiry as best as we can.

ARTCAVA may update this Privacy Policy from time to time to reflect changes in our practices or to ensure compliance with legal requirements. We will post any changes on this page and update the “Last Updated” date. If changes are significant, we may notify you more directly (e.g., via email or a prominent site notice). By continuing to use our website or services after those changes take effect, you agree to the revised policy (to the extent permitted by law).

Last Updated: 01/10/2025