Privacy policy
Introduction
In accordance with the European General Data Protection Regulation No. 2016-679 of 27 April 2016 (‘GDPR’), the purpose of this privacy policy is to inform you of the measures we take to protect your personal data.
Data controller
The data controller referred to in this document is EARL Laurence and Laurent GAY (Domaine Rivière) 553 Route des Tuillières 69620 – Siret 39965851700020 represented by GAY, Laurence and Laurent.
The personal data we process
Data you provide to us directly
During our various interactions with you, or through the contact forms on the domaine-riviere.fr website, you may provide us with information about yourself.
This data includes:
- Surnames, first names, title,
- Postal address, email address, telephone number;
Data that we collect automatically on the DOMAINE RIVIERE website, including through cookies
The information collected from the domaine-riviere.fr website does not in itself identify a specific person, but indicates, among other things, your operating system, your browser and your browsing actions.
We may also collect personal data when the website experiences unexpected connection attempts. This data is used to maintain the security of the website, limit brute force attacks and block users who have made too many attacks and unsuccessful connection attempts. The website lists users who are spammers and/or malicious bots listed on hackrepair.com.
To learn more about cookies related to the domaine-riviere.fr website, please see our cookie policy.
Sensitive data
DOMAINE RIVIERE does not collect sensitive data.
Sensitive data includes: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data or sexual orientation.
Only personal data that is strictly necessary for the purposes described below is collected.
Purposes of processing
The personal data collected is processed for the following purposes:
- to put you in contact with our services;
- to manage your appointments/contracts with our services (e.g. to receive notifications, modify or cancel appointments);
- for statistics, analyses and audience measurement;
- to manage rights and requests to exercise individual rights.
Personal data is collected and processed on the following legal bases:
- the performance of the contract defined together;
- on the basis of your consent when required by applicable regulations, in particular when we collect your cookie data;
- for the purpose of ensuring compliance with our legal and regulatory obligations.
Recipients of your personal data
The following may have access to some of your data:
- Sales department staff,
- Subcontractors: Management System (emailing, CRM, etc.), accounting software, Router (mailing)
Access to your data is based on individual and limited access authorisations. Staff who have access to personal data are subject to a confidentiality obligation (through a nominal and personal confidentiality agreement).
You are hereby informed that your data will not be sold to third parties under any circumstances.
Is data transferred outside the European Union?
We store your personal data within the European Union. However, in some cases, the data we collect when you use our platforms or services may be transferred to subcontractors or business partners located in other countries, some of which may have less protective personal data protection laws than those in force in your country of residence. In the event of such a transfer, we ensure that the processing is carried out in accordance with this privacy policy and is governed by the European Commission’s standard contractual clauses, which guarantee a sufficient level of protection of privacy and fundamental rights.
| Categories of persons | Data type | Purpose of processing | Shelf life | Main legal basis |
|---|---|---|---|---|
| Prospects | Name, surname, email, phone | Commercial prospecting ( newsletter, offers, invitations) | 3 years from the last active contact with the prospect | Legitimate interest |
| Prospects | Datas from contact form | Answer to requests | 3 years from last contact | Legitimate interest |
| Private customers | Identity, contact details | Customer relationship management | Duration of the commercial relationship + 3 years for prospecting purposes | Contract |
| Private customers | Order and billing informations | Sales management | 10 years ( accounting requirement) | Legal obligation |
| Private customers | Purchase history | Business analysis | 3 years after the last purchase | Legitimate interest |
| Professionals customers | Identity, contact details | Commercial management | Duration of the commercial relationship + 5 years ( commercial prescription) | Contract |
| Professionals customers | Invoice, quote, purchase orders | Accounting and tax obligations | 10 years | Legal obligation |
| Newsletter | Email adress | Sending informations and offers | Until the person unsubscribes or 3 years after inactivity | Consent |
| Contests, tasting, open houses | Name, email | Event planning | 1 year after event | Consent |
| website - not necessarycookies | IP address, plotters | Audience measurement/ Marketing | 13 months maximum | Consent |
| Request to exercise GDPR rights | Identity, request | Rights management | 1 to 3 years ( consent proof) | Legal obligation |
Your rights regarding your personal data
You have the following rights regarding your personal data:
- right of access;
- right to query;
- right to rectification;
- right to erasure – this right may be exercised provided that it does not interfere with the performance of the contract or compliance with our legal and regulatory obligations;
- right to restrict one or more types of processing of your personal data;
- right to modify and/or withdraw, at any time, your consent to the processing of your personal data based solely on your consent;
- right to object to the processing of your personal data;
- right to data portability.
You also have the right to define general and/or specific guidelines regarding the fate of your personal data and how you wish your rights to be exercised after your death.
In order to ensure that the information we hold about you is always accurate, we recommend that you update your personal data regularly.
You can submit any request to exercise your rights regarding your personal data by contacting the data controller at the following address: contact[@]domaine-riviere.fr.
If you are not satisfied with the response, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes
Security measures implemented
We take all necessary measures to preserve the security and confidentiality of data and, in particular, to prevent it from being damaged or accessed by unauthorised third parties. To this end, we implement all technical and organisational measures to ensure an adequate level of security appropriate to the risks (authentication procedures with personal and secure access via confidential usernames and passwords).
Furthermore, we ensure that our subcontractors comply with the rules on personal data protection.
The DOMAINE RIVIERE website has been designed with particular attention to security in order to protect your data and prevent malicious requests. Data transmitted on the website is also encrypted using the https protocol.
To order wines outside of France
The sale of alcohol is prohibited to minors.
Alcohol abuse is dangerous for your health.
Please drink responsibly.