LEGAL NOTICE AND PRIVACY POLICY

BODEGAS ELIAS MORA, S.L.U.

Sanitary Registration Number: 30.007775/VA

Last updated: 26 August 2026

LEGAL NOTICE

BODEGAS ELIAS MORA, S.L.U. (hereinafter, "the CONTROLLER" or "BODEGAS ELIAS MORA"), operator of the website https://bodegaseliasmora.com/ (hereinafter, "the Website"), makes this document available to users in order to comply with the obligations set out in Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSICE), Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), Royal Legislative Decree 1/2007 (Spanish Consumer Protection Act) and any other applicable regulation, and to inform all users of the Website about its terms of use.

Any person accessing this Website assumes the status of user and undertakes to strictly observe and comply with the provisions set out herein, as well as any other applicable legal provision.

BODEGAS ELIAS MORA reserves the right to modify any information that may appear on the Website, without any obligation to give prior notice to users, publication on the Website itself being deemed sufficient.

1. IDENTIFICATION DATA

Domain name: https://bodegaseliasmora.com/
Trade name: BODEGAS ELIAS MORA
Legal name: BODEGAS ELIAS MORA, S.L.U.
Tax ID (CIF): B47464045
Registered office: C/ Juan Mora, s/n, 47530 San Román de la Hornija (Valladolid), Spain
Telephone: +34 983 78 40 29
E-mail: administracion@bodegaseliasmora.com
Commercial Registry: Registro Mercantil de Valladolid, Volume 927, Folio 193, Sheet VA-12076

2. PURPOSE AND SCOPE. RESTRICTIONS ON THE SALE OF ALCOHOL

The purpose of the Website is to provide information about, and sell online, wines and other products derived from the winemaking activity of BODEGAS ELIAS MORA.

2.1. Prohibition of sale to minors. The sale of alcoholic beverages is strictly reserved for persons over 18 years of age. By placing an order, the user represents and warrants, under their own responsibility, that they are of legal drinking age under Spanish law and, where applicable, under the law of the destination country if that law is more restrictive. As an age-verification measure, BODEGAS ELIAS MORA requests, during the purchase process, the user's official identity document number and date of birth, without prejudice to any additional checks that may be carried out at the time of delivery. This data is processed solely for this purpose, as described in the Privacy Policy.

2.2. Geographic scope of sale. BODEGAS ELIAS MORA only sells and ships to the following European Union Member States: Spain, Portugal, France, Germany, Austria, Italy, Belgium, Slovakia, Slovenia, Greece, Luxembourg, the Netherlands, Poland and the Czech Republic. Orders addressed to countries not included in this list will not be accepted or processed. This selection reflects the fact that the product can be marketed with the same labelling authorised in Spain (including the list of ingredients and nutrition declaration required under Regulation (EU) 2021/2117), without requiring additional label adaptations, mandatory on-pack languages, or national requirements setting a minimum sale age above 18. BODEGAS ELIAS MORA may expand or reduce this list of countries at any time, and any such change will be reflected during the checkout process.

2.3. Responsible-consumption notice. Alcoholic beverages should be consumed responsibly. The CONTROLLER recommends moderate consumption and advises against driving or operating machinery after consumption.

3. INTELLECTUAL AND INDUSTRIAL PROPERTY RIGHTS

The Website, including but not limited to its programming, editing, compilation and other elements necessary for its operation, as well as the designs, logos, trademarks, text and/or graphics, are the property of the CONTROLLER or, where applicable, are used under an express licence or authorisation from their respective owners. All content on the Website is duly protected by intellectual and industrial property regulations.

Total or partial reproduction, use, exploitation, distribution and commercialisation of such content requires the prior written authorisation of the CONTROLLER. Any observations regarding possible infringements of intellectual or industrial property rights may be sent to administracion@bodegaseliasmora.com.

4. LIMITATION OF LIABILITY

Linking policy. The Website may contain links to third-party content. Since the CONTROLLER cannot always control the content posted by third parties on their respective websites, it assumes no liability for such content, without prejudice to expressly disclaiming any content that is contrary to law, morality, accepted standards of behaviour or public order.

Service availability. The Website has been reviewed and tested to ensure proper operation. As a general rule, correct operation is guaranteed 365 days a year, 24 hours a day, although occasional interruptions due to technical causes beyond the CONTROLLER's control cannot be ruled out.

IP addresses. The Website's servers may automatically detect the IP address and domain name used by the user. This information is recorded in a server activity log for statistical measurement purposes, as further described in the Cookie Policy.

5. GOVERNING LAW, JURISDICTION AND ONLINE DISPUTE RESOLUTION

These terms are governed by Spanish law. For users who qualify as consumers and are resident in another EU Member State among those listed in section 2.2, the mandatory consumer-protection provisions in force in their country of habitual residence shall also apply, to the extent that they provide a higher level of protection.

For the resolution of any dispute arising from the use of the Website, and without prejudice to any jurisdiction the consumer may legally be entitled to, the courts of the consumer's domicile or, where applicable, the courts of Valladolid, Spain, shall have jurisdiction.

In accordance with Regulation (EU) No 524/2013 on online dispute resolution for consumer disputes, EU-resident users are informed that the European Commission provides an online dispute resolution (ODR) platform, accessible at: https://ec.europa.eu/consumers/odr. Users may also refer disputes to the competent consumer arbitration boards.

PRIVACY POLICY

1. DATA CONTROLLER

Identity: BODEGAS ELIAS MORA, S.L.U. – Tax ID B47464045
Address: C/ Juan Mora, s/n, 47530 San Román de la Hornija (Valladolid), Spain
Telephone: +34 983 78 40 29
E-mail: administracion@bodegaseliasmora.com
Data Protection Officer (DPO): As of this update, BODEGAS ELIAS MORA has not appointed a Data Protection Officer, as this is not mandatory under Article 37 GDPR given the nature and scale of the processing carried out. Any data-protection query may be addressed to administracion@bodegaseliasmora.com. Should a DPO be appointed in the future, their contact details will be published in this same section.

2. PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION PERIODS

Purpose	Data processed	Legal basis	Retention period
Age verification and order management (wine purchase)	Name, ID/passport number, date of birth, delivery and billing address, contact details, order history	Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations relating to alcohol sales (Art. 6(1)(c) GDPR)	Duration of the business relationship plus the statutory limitation periods for tax, accounting and warranty liabilities (generally up to 6 years after the last transaction)
Contact requests and enquiries	Name, e-mail, telephone, message content	Consent given by submitting the form (Art. 6(1)(a) GDPR)	Until the enquiry is resolved, plus the time needed to handle any resulting claims
Newsletter and commercial communications (unified purpose)	Name, e-mail address	Explicit consent given through active subscription (Art. 6(1)(a) GDPR)	Until the user unsubscribes. BODEGAS ELIAS MORA may also proactively unsubscribe recipients who, after being expressly contacted to confirm continued interest, do not respond or interact in any way
Job applications ("Work with us")	CV, contact details, education and professional experience	Consent given by submitting the application (Art. 6(1)(a) GDPR)	Maximum 1 year from receipt of the application, unless the candidate requests earlier deletion
Analytics and measurement cookies (Google Analytics)	Device identifiers, browsing behaviour	User consent via the cookie settings panel (Art. 6(1)(a) GDPR)	As set out in the cookie settings panel and the Website's specific Cookie Policy
Newsletter delivery management (Mailchimp / Brevo)	Name, e-mail address, interaction with sent communications	Explicit consent (Art. 6(1)(a) GDPR)	Same as the newsletter/commercial communications purpose above
Payment processing (Redsys / PayPal)	Transaction data necessary to process payment (card data is processed directly by the payment gateway, not by BODEGAS ELIAS MORA)	Performance of a contract (Art. 6(1)(b) GDPR)	As required by statutory retention periods for accounting and tax records
IP addresses for statistical purposes	IP address, domain	Legitimate interest of the CONTROLLER in Website security and analytics (Art. 6(1)(f) GDPR)	As set out in the Cookie Policy

3. DATA PROCESSORS AND THIRD PARTIES

To properly provide the service, BODEGAS ELIAS MORA relies on the following providers, which act as data processors under Article 28 GDPR, with the corresponding data processing agreement executed with each of them:

Google Analytics (Google Ireland Limited): web analytics and audience measurement.
Mailchimp (The Rocket Science Group LLC) and Brevo (Sendinblue SAS): newsletter and commercial communication management.
Redsys and PayPal (Europe) S.à r.l. et Cie, S.C.A.: online payment processing.

Where any of these providers is located outside the European Economic Area, the international data transfer is based on the Standard Contractual Clauses approved by the European Commission or the relevant adequacy decision (for example, the EU-U.S. Data Privacy Framework, where the provider is certified under it).

Data may be disclosed to law enforcement authorities and other public authorities with jurisdiction, where there is a legal obligation to do so.

4. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED

Fields marked with an asterisk (*) on the Website's forms are mandatory; failure to complete them will prevent the corresponding request from being processed. In particular, the official identity document number and date of birth are mandatory data, essential to verify legal drinking age and complete the purchase of alcoholic beverages. The user warrants that the personal data provided is accurate and undertakes to notify any changes thereto.

5. USER RIGHTS

Any user has the right to obtain confirmation as to whether BODEGAS ELIAS MORA is processing personal data concerning them and, if so, to exercise the following rights:

Access to their personal data.
Rectification of inaccurate data.
Erasure ("right to be forgotten"), where, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Restriction of processing in the cases provided for by law.
Data portability.
Objection to processing, including the right to object to receiving commercial communications at any time.
Withdrawal of consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

These rights may be exercised by writing to administracion@bodegaseliasmora.com or to the postal address indicated above, attaching a copy of an identity document. If the exercise of these rights has not been properly addressed, the user may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid, Spain; telephone +34 912 663 517; www.aepd.es) or with the data protection authority of their country of residence, if different from Spain.

6. SECURITY MEASURES

BODEGAS ELIAS MORA complies with the GDPR and the LOPDGDD, and has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing, including, among others, encryption of communications, access controls and staff training in data protection matters.

The Website uses its own cookies and third-party cookies (including Google Analytics) for technical, personalisation, analytics and, where applicable, advertising purposes. Users can configure their preferences, accept or reject the use of non-essential cookies through the settings panel available on the Website, and change this configuration at any time. For further information, please refer to the specific Cookie Policy published on the Website.

8. TRANSPARENCY REGARDING THE USE OF ARTIFICIAL INTELLIGENCE

As of this update, BODEGAS ELIAS MORA does not use artificial intelligence systems that interact directly with users (such as chatbots or virtual assistants), nor does it generate automated synthetic content on the Website. Nevertheless, in keeping with the principles of transparency and good faith, and in anticipation of the obligations under Article 50 of Regulation (EU) 2024/1689 (the EU AI Act), should any AI system interacting with users (chatbots, virtual assistants) or generating synthetic content (text, image, audio or video) be introduced in the future, BODEGAS ELIAS MORA will disclose this clearly and accessibly before or at the moment of first contact, and will update this policy accordingly.

Legal notice