Privacy policy

Data controller

  • DIEGO ZAMORA S.A. (hereinafter, Zamora Company)
  • CIF [Spanish Tax Identification Code]: A-30602346
  • Calle Silicio 10, Polígono Industrial Los Camachos, Cartagena (CP 30369)
  • Data Protection Officer: dpo@zamoracompany.com

Purposes of the processing of personal data

  • To manage and maintain the business relationship.
  • To respond to requests for information.
  • To manage the personnel selection process.
  • To send commercial communications from us or from third parties, always through Zamora Company.
  • To manage user data in the event that the user has accessed through Social Media.
  • In the case of online booking and shopping websites:
    • To manage bookings for visits and tastings in the vineyards, wineries and stores.
    • To manage reservations for restaurants and wine bars.
    • To manage activities for groups and tailored tastings.
    • To manage online purchases and your registrations in the Club Venturio e-commerce stores.

Retention periods: Data will be retained for the duration of the contractual relationship unless you request its erasure. We may, however, retain it for a longer period if necessary to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.

Source

  • User-facilitated.
  • Obtained indirectly.

Legitimate basis

  • The execution of the contract with the user.
  • Zamora Company’s legal obligations.
  • Zamora Company’s legitimate interest.
  • User’s consent.

Data disclosures

Data may be disclosed to the following recipients when necessary to fulfil the purposes mentioned above or to comply with a legal obligation: public administrations, service providers, and collaborating entities.

Rights of Data Subjects

They will be exercised by e-mail: dpo@zamoracompany.com or at the registered office of Diego Zamora S.A.: Calle Silicio 10, Polígono Industrial Los Camachos, Cartagena (CP 30369).

We inform you that you may exercise, where appropriate, the rights of access, rectification or erasure, limitation of processing, opposition, the right to data portability or not to be subject to a decision based solely on automated processing, as well as the right to withdraw the consent given.

You may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es, Spain’s supervisory authority for data protection.

More information can be found in the full Privacy Policy in this document.

Who is the data controller for your personal data?

The party responsible for processing your personal data for the purposes of providing the services identified in this privacy policy is DIEGO ZAMORA, S.A., a Spanish company that owns the holding company Zamora Company, which includes, but is not limited to, the following subsidiaries and brands: Ramon Bilbao, Mar de Frades, Zoco, Club Venturio and Mercado del Puerto, respectively on their websites.

DIEGO ZAMORA, S.A. is a company with registered address at Calle Silicio 10, Polígono Industrial “Los Camachos”, Cartagena (CP 30369), with tax identification number A-30602346 (hereinafter, “Zamora Company”).

At Zamora Company we are committed to the fundamental right to the protection of your personal data and this privacy policy is intended to inform you of your rights under the General Data Protection Regulation (“GDPR”).

Please note that, in accordance with the GDPR, Zamora Company has a Data Protection Officer who may be contacted for any questions or queries regarding the processing of your data, and who can be contacted through dpo@zamoracompany.com.

What information do we process?

  1. Data you provide directly to us: We collect information about you when you contact us through the channels provided for this purpose, such as the telephone numbers provided for bookings, email or the forms for: contacting our teams, joining our team, the form for registering with Club Venturio or the booking forms on the websites.When you contact us through these channels, we will ask for your name and surname, email address, telephone number, postcode and/or nationality, National Identification Document or passport number, gender, date of birth, date and time of visit and we ask that, when making reservations for tastings or restaurants, you indicate in the “comments” section if anyone has a disability or allergy that needs to be taken into account, as well as any other comments you wish to add.You must provide truthful information. Impersonation or the use of aliases or anonymous names is prohibited.When providing data, you must not use offensive language or any name, trademark, or trade name that you are not authorised to use, such as those belonging to public figures or celebrities.

    In order to ensure that the information provided is up to date at all times and contains no errors, you must communicate to Zamora Company, as soon as possible, any modifications or corrections of your personal data as they occur.

    By clicking on the “Send” button (or equivalent) included on the aforementioned forms, you declare that the information and data you provide are accurate and truthful.

  2. Data obtained indirectly: When you browse, different cookies and other tracking devices may be installed on your device, as we explain in our Cookie Policy.

What is the source of the data?

We consider that all the data processed by Zamora Company have been freely provided by you.

In the event that the personal data provided belong to a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorisation to provide the data to Zamora Company for the purposes indicated above. Similarly, you also guarantee that the data provided are accurate and up to date, and you are liable for any direct or indirect damages or harm that may be caused as a result of failure to comply with this obligation.

For what purpose and on what legitimate basis do we process the data?

Zamora Company acts as data controller for the processing of personal data for the following purposes and in accordance with the following legitimate bases:

  • On the basis of the management of the contractual or pre-contractual relationship:
    1. Respond to your requests for information and evaluate the CVs received and manage the selection processes
    2. For online booking and shopping websites:
      • Manage bookings (confirmation and reminders) for the different activities we offer and product purchases you make;
      • Manage the user profile.
  • Based on Zamora Company’s compliance with its legal obligations :
    1. Enable users to exercise their rights.
    2. Comply with the regulations applicable to Zamora Company.
  • On the basis of the explicit, free and unequivocal consent that, where appropriate, you give us at the time of collecting your data:
    1. Where applicable, to keep you informed about offers, commercial communications, products and/or services of Zamora Company or third parties, always sent electronically through Zamora Company or any of its subsidiaries.
    2. Periodically send you the newsletter of the Zamora Company brands and, if applicable, the Club Venturio newsletter.
  • On the basis of the existence of a legitimate interest on the part of Zamora Company:
    1. To keep you informed about products and services from Zamora Company that are related to those you have previously contracted or that may be of interest to you.
    2. Conduct periodic reviews of our services and carry out satisfaction surveys in order to evaluate and improve the quality of the service we provide.
    3. Conduct internal reviews and, where appropriate, contact the customer in the event that fraud or identity theft is detected or there are reasonable suspicions of fraud or identity theft.

However, if you do not wish to have your data to be processed for these purposes, you can object at any time by contacting us at dpo@zamoracompany.com as indicated in the Exercise of Rights section of this Privacy Policy.

With whom do we share your data?

All transfers of personal data by us are necessary for the fulfilment of the stated purposes, or are carried out in order to comply with a legal obligation:

  1. To the public administrations, the judiciary, and law enforcement agencies, in compliance with our legal obligations.
  2. Companies providing IT services, tools or IT infrastructure on which the services provided by Zamora Company are based, such as hosting providers, CRMs, emailing service companies, etc.

In this regard, we inform you that any transfer will be carried out taking into account all the necessary legal safeguards. We also ensure that we sign specific contracts with all our service providers in accordance with the regulations.

Similarly, Zamora Company guarantees that in the case of suppliers located in countries outside the European Union or other countries not considered adequate in terms of data protection regulations, the necessary precautions are taken to ensure that the data can be transferred securely, either because the supplier offers adequate guarantees, through, among others, the signing of Standard Contractual Clauses of the European Commission, or because any of the exceptions set out in the regulations are complied with.

Exercise of your rights

We inform you that you may exercise the following rights:

  1. Right of access to your personal data to know which are being processed and the processing operations carried out with them.
  2. Right to rectify any inaccurate personal data.
  3. Right to erasure of your personal data, where feasible.
  4. Right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may keep it blocked for the exercise or defence of claims.
  5. Right not to be subject to a decision based solely on automated processing, including profiling.
  6. Right to object the processing of your personal data, when the legal basis that enables us to process your personal data is our legitimate interest.
  7. Right to the portability of your data, where the legal basis that enables us to process the data indicated in section 4 above is the existence of a contractual relationship or your consent.
  8. The right to revoke the consent given to Zamora Company.

You may exercise your rights at any time and free of charge in the following ways:

  1. By sending an email to dpo@zamoracompany.com from the email address you used to register for our services and indicating the right you wish to exercise.
  2. By sending a written request to the address Calle Silicio 10, Polígono Industrial Los Camachos, Cartagena (CP 30369), indicating the right you wish to exercise.
  3. In addition, when you receive any communication from us, by clicking on the unsubscribe button included in the communication, you can unsubscribe from all previously accepted commercial communications.

When you exercise your rights, and only if we have doubts about your identity, we may ask you for additional information to verify your identity.

We also inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that a breach of data protection legislation has been committed with regard to the processing of your personal data.

Also, please note that you can join the Robinson List at www.listarobinson.es. This is an advertising exclusion system managed by the Spanish Association of Digital Economy (ADIGITAL), in which you can register in order to show your opposition to the use of your data for the purpose of sending commercial communications.

Term of retention of your data

We will only keep your details for as long as is necessary to provide these services to you. Once your data is no longer necessary to manage the service, it will be blocked. Blocked data will only be made available to comply with a legal obligation (for example, in response to a request from law enforcement or the courts) or for the exercise or defence of legal claims.

Security and confidentiality

In order to prevent unauthorised access to, or unauthorised disclosure of, personal data, we have put in place the appropriate technical and physical measures and business processes to safeguard and secure the information we collect from you.

Amendments to this Privacy Policy

We make our best efforts to keep our privacy policy fully updated. If we make changes, these will be clearly and specifically identifiable insofar as possible in the relationship we have established with you (e.g. we may communicate changes to you by email).

This privacy policy was reviewed and published on 9 June 2025.