The owner of the site, through its parent company Les Grands Chais de France (hereafter “the Company”), as Processing Manager under the terms of the General Data Protection Regulations no. 2016/679 of 27th April 2016 (GDPR) undertakes to respect the right to respect for privacy, in particular for data that is personal in nature, of any person visiting and/or communicating with and/or receiving information from the web sites and pages on the Group’s social networks as well as by emails (including newsletters) and correspondence forms (hereafter “the Users”).

The purpose of the Privacy Policy is to provide information about the way in which the Company processes data that is personal in nature (hereafter “Personal Data”), in particular specifying how the Personal Data of Users is collected, used, stored and archived.

 

PURPOSES OF PROCESSING

The Company, in its capacity as Processing Manager, collects and uses the Personal Data of Users in accordance with the regulation in force in order to ensure the management of their orders on the Site, of the newsletters if they are subscribed to them, for marketing purposes but only with the agreement of the Users, for purposes of analysing User behaviour or in order to manage requests made by Users via the contact form.
The data collected is subject to processing by the Company and/or other companies within the GCF Group for the purposes of canvassing, in particular commercially.

The Company will not collect the Personal Data of minors.

LEGAL BASIS OF PROCESSING

The legal basis of processing is the order made by the User to the Company or the expression of consent by the User of the site concerned by the processing, when such consent is required.

SOURCE OF PERSONAL DATA

Personal Data is collected directly from Users (during registration on the Site or when collecting information for product delivery during purchase).
While respecting the applicable legal obligations, the Company may be moved to use different technological devices to collect and supply information about the way in which Users access the Company’s sites and services as well as their use of the latter. The Company is able to use demographic information concerning the Users of its sites, which may be obtained from third parties such as Google or social networks on which Users are registered (hereafter “Usage Information”). This Usage Information may pertain to the pages that Users have viewed on the website, the time at which they were viewed, information about particular drinks or other content that the User accessed or provided, the language in which the User consulted the sites, as well as demographic information pertaining to the User (such as age, sex and areas of interest, if applicable).

RECIPIENTS OF PERSONAL DATA

The recipients of this data are:
– the Company,
– other companies within the GCF Group,
– sub-contractors of the Company if this seems necessary.
The Company ensures that the recipients of the data offer serious guarantees of security and privacy for the Personal Data that is provided to them by the Company.

TRANSFERRING DATA OUTSIDE THE EUROPEAN UNION

In principle, Personal Data is processed exclusively within the European Union.
If they should be transferred outside the European Union. In this case, the Company will take all necessary measures in order to ensure its protection.
To this end, the Company would ensure the protection of the User’s Personal Data during its transfer and that third party entities respect a high level of protection for the User’s Personal Data, in accordance with European requirements (such as the European Commission’s Standard Contractual Clauses and/or by the adherence of the entities receiving the data to Privacy Shield, when they are located within the United States).

STORAGE OF PERSONAL DATA

Personal Data is stored in respect of applicable French and European standards.

Personal Data will be stored for 5 years from the last order or collection in any other case. At the end of this period and if your consent is not renewed it will be destroyed by the Company.
The User may request the deletion or amendment of their Personal Data at any time.
The Company will implement all technical and organisational measures necessary to protect the privacy and security of the User’s Personal Data that is collected via the Company’s sites.
These measures consist in particular of storing the Personal Data in secure operating environments that are not accessible to the public and that are only accessible to authorised staff members within the Company, as well as specially authorised proxies and contractors.

RIGHTS OF USERS AFFECTED BY PROCESSING

In accordance with French and European standards relating to the protection of data that is personal in nature, and in particular the General Data Protection Regulations no. 2016/679 of 27th April 2016 (GDPR), applicable from 25th May 2018, the User has the right to access, correct, limit processing of, delete and oppose processing and portability.

Furthermore, they have the option of withdrawing their consent for the processing that requires it. In this case, the data will be deleted.

Any User who wants to make requests regarding the portability of their Personal Data or to exercise any other right indicated above may contact the Company:

By email using the following address:
dpd@lgcf.fr

Or by post using the following address:
Délégué à la Protection des Données
Les Grands Chais de France
1, rue de la Division Leclerc,
67290 PETERSBACH

The User also has the option of submitting their claims to the Personal Data control authority.
In France, the User may contact the Commission Nationale de l’Informatique et des Libertés (the “CNIL”) whose website is accessible at: https://www.cnil.fr/ .

For other States, the complete list of local authorities with competence for data protection is found on the following list of institutions:
http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080