Privacy policy
This is a translation for information purposes. In case of any discrepancy, the Spanish version shall prevail.
1. Data controller
- Controller: Iván Monreal Herrera (Iván Monreal Somm)
- Tax ID (NIF): 42209381B
- Address: Calle Andalucía, s/n, 35500 Arrecife, Lanzarote (Las Palmas), Spain
- Email: ivan.monreal@yahoo.de
2. What data we collect and why
Through the contact form we collect your name, surname, email address and the content of your message. We use them only to deal with your enquiry and reply to you and, if you request it, to prepare a proposal for a collaboration, tasting or training.
Visitor statistics. The website uses a cookie-free analytics tool (Umami) to obtain aggregate data on its use, such as the pages visited, country of origin, type of device and browser, and the referring page. This tool does not install cookies, does not identify individual visitors and does not create profiles. Its purpose is to improve the website's content and operation, based on the owner's legitimate interest (article 6.1.f GDPR).
Course purchases. If you buy a Wine Academy course, we collect your name, your company name, your email address, your billing address and, if you provide it, your tax ID. We use them to process the payment, send you the materials, organise the live classes and issue the invoice. Your card details are processed directly by Stripe; the owner has no access to them.
3. Legal basis
The legal basis for processing is your consent (article 6.1.a of the General Data Protection Regulation, GDPR), given by ticking the acceptance box and sending the form, and, where applicable, taking pre-contractual steps at your request (article 6.1.b). For course purchases, the basis is the performance of the contract (article 6.1.b) and compliance with tax and accounting obligations (article 6.1.c).
4. Recipients and transfers
We do not share your data with third parties unless legally required. The following providers, acting as data processors, are involved in providing the service:
- Netlify, Inc. (website hosting and form management), based in the United States. Transfers are covered by the safeguards provided for in the GDPR, such as standard contractual clauses or the EU-US Data Privacy Framework.
- Umami Software, Inc. (cookie-free visitor statistics), based in the United States, with the same safeguards applicable to international transfers.
- Stripe Payments Europe, Ltd. (payment processing), based in Ireland. If Stripe transfers data outside the European Economic Area, it does so with the safeguards provided for in the GDPR.
- Video call platform used for the live classes (for example, Zoom), with the safeguards applicable to international transfers.
- The owner's email provider, where message notifications are received.
5. Retention period
We will keep your data for as long as necessary to deal with your enquiry or purchase and, afterwards, for the legal periods during which liabilities may arise. After that time it will be deleted or blocked.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to ivan.monreal@yahoo.de and stating the right you wish to exercise. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
Reasonable technical and organisational measures are applied to protect your data against unauthorised access, loss or alteration. The website is served over an encrypted connection (HTTPS).
Last updated: October 2026.