This Privacy Policy describes how STEREO WINES S.L. collects, uses and protects your personal data when you visit or make a purchase at www.vinaris.es.
1. Data controller
- Company name: STEREO WINES S.L.
- Tax ID (CIF): B19895648
- Registered address: C/ General Ricardos 63, 1st floor, 28019 Madrid, Spain
- Email: admin@vinaris.es
2. Data we collect
Account and purchase data: when you register or place an order we collect your name, surname, delivery and billing address, email address and phone number.
Payment data: transactions are processed entirely by our payment gateways PayPal. STEREO WINES S.L. does not store any card details.
Browsing data: when you visit the site we automatically collect device information (browser, IP address, time zone) and first- and third-party cookies. Please see our cookie policy in the consent banner.
Communications: if you subscribe to our newsletter or contact us, we retain your email address and the content of your message.
3. Purposes and legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Order management, shipping and invoicing | Performance of a contract (Art. 6.1.b) |
| Order-related communications | Performance of a contract (Art. 6.1.b) |
| Compliance with tax and accounting obligations | Legal obligation (Art. 6.1.c) |
| Fraud prevention and security | Legitimate interest (Art. 6.1.f) |
| Website improvement and statistical analysis | Legitimate interest (Art. 6.1.f) / Consent (Art. 6.1.a) for analytics cookies |
| Newsletter and commercial communications | Consent (Art. 6.1.a) |
| Management of ratings and reviews | Consent (Art. 6.1.a) |
4. Recipients of your data
STEREO WINES S.L. may share your data with the following processors, solely for the purposes indicated:
- Logistics operators (Genei S.L., Packlink, Sendcloud): shipment management and tracking.
- Payment gateway (PayPal): payment processing.
- ERP / accounting (Holded): invoice and accounting management.
- Web analytics (Google Analytics): anonymised website usage statistics.
- Digital advertising (Google Ads, Meta/Facebook): campaign measurement and personalised advertising, only with your prior consent.
- Reviews (Trustpilot): if you choose to leave a review.
- Customer support (Zendesk): live chat query management.
- Infrastructure and security (Cloudflare): CDN and DDoS protection, involving IP address processing.
All providers are bound by data processing agreements compliant with the GDPR. We do not sell your data to third parties.
5. International transfers
Some of our providers (Google, Meta, PayPal, Cloudflare) may transfer data outside the European Economic Area. In such cases, transfers are covered by European Commission Adequacy Decisions or Standard Contractual Clauses (Art. 46 GDPR).
6. Retention periods
- Order and invoicing data: 5 years from the invoice date (Spanish Commercial Code and General Tax Law).
- Account data: while your account is active and for 3 years after your last interaction.
- Newsletter: until you withdraw your consent.
- Cookies: as specified in the cookie policy.
7. Your rights
As a data subject, you may exercise the following rights at any time by contacting us at admin@vinaris.es:
- Access: obtain confirmation of whether we process your data and receive a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data when it is no longer necessary.
- Objection: object to processing based on legitimate interest or for direct marketing purposes.
- Restriction: request that we suspend processing in certain circumstances.
- Portability: receive your data in a structured, commonly used format.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
We will respond to your request within one month. If you consider that the processing of your data infringes the applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es.
8. Security
STEREO WINES S.L. implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss or destruction, in accordance with Art. 32 GDPR. All communications between your browser and our server are encrypted using SSL/TLS.
9. Minors
Our services are intended exclusively for persons aged 18 or over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data without authorisation, please contact us at admin@vinaris.es so we can delete it.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. The current version will always be available on this page, with the date of the last update.
11. Contact
For any questions about the processing of your personal data, please contact us at admin@vinaris.es or via the contact form on the store.
Last updated: July 2026
