Privacy policy
1. Data Controller
Company name: BODEGAS CAN VIDALET S.L.
Tax ID (CIF): B57060808
Address: Carretera Alcúdia–Pollença km 4.85 – 07460 Pollença (Balearic Islands), Spain
Phone: +34 971 531 719
Email: info@canvidalet.com
2. Applicable Legislation
This Privacy Policy is governed by:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
- Spanish Organic Law 3/2018 (LOPDGDD)
- Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE)
By using this website, you accept this Privacy Policy.
3. Personal Data We Collect
We may collect the following categories of personal data:
- Identification data: name, address, email, phone number
- Purchase data: orders, payments, deliveries
- Account data: username, preferences
- Communications: enquiries, emails
- Technical data: IP address, device, browser
- Usage data: browsing behaviour and interactions
4. Data Sources
Data is obtained from:
- The user directly
- Automatically (cookies, browsing activity)
- Shopify and technical service providers
5. Purposes of Processing
We process your data for the following purposes:
5.1 Order and Service Management
To process purchases, payments, deliveries, winery visits and bookings.
5.2 Customer Service
To respond to enquiries and requests.
5.3 Marketing
To send information about wines, events and updates (subject to your consent).
5.4 Website Improvement (Hotjar)
We use Hotjar Ltd. (Malta) to analyse user behaviour.
Data collected includes:
- Anonymised IP address
- Interactions (clicks, scrolling, time spent)
- Device and browser information
- Country and language
Data is pseudonymised.
More information:
https://www.hotjar.com/legal/policies/privacy/
5.5 Shopify Platform
Our online store is hosted on Shopify, which processes data for:
- Order management
- Payment processing
- Security
- Service improvement
More information:
https://privacy.shopify.com
6. Legal Basis
Processing is based on:
- Consent (Art. 6(1)(a) GDPR) → marketing, cookies, Hotjar
- Contract (Art. 6(1)(b)) → purchases and services
- Legitimate interest (Art. 6(1)(f)) → website improvement
7. Data Recipients
Your data may be shared with:
- Shopify (e-commerce platform)
- Payment providers
- Logistics companies
- Hotjar Ltd. (analytics provider)
All act as data processors.
8. International Transfers
Data may be transferred outside the European Economic Area (e.g. Shopify).
Safeguards include:
- Standard Contractual Clauses (SCC)
- Adequate level of data protection
9. Data Retention
Data will be retained:
- As long as a business relationship exists
- Until consent is withdrawn
- In accordance with legal obligations
10. Security
We implement appropriate technical and organisational measures in accordance with Article 32 GDPR.
11. Cookies
We use our own and third-party cookies for:
- Website functionality
- Analytics (Hotjar)
- Marketing
The use of analytical and marketing cookies requires prior consent.
👉 Please refer to our Cookie Policy.
12. User Rights
You may exercise the following rights:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Data portability
- Withdrawal of consent
You may also lodge a complaint with the supervisory authority:
https://www.aepd.es
13. Marketing Communications
We will only send marketing communications if you have given your consent.
You may unsubscribe at any time.
14. Minors
We do not knowingly collect data from minors.
15. Third-Party Links
We are not responsible for the privacy policies of external websites.
16. Changes to this Policy
We may update this Privacy Policy at any time.
17. Contact
📧 info@canvidalet.com
📍 Carretera Alcúdia–Pollença km 4.85 – 07460 Pollença
(04/2026)