Privacy policy

Introduction

In accordance with the European General Data Protection Regulation No. 2016-679 of 27 April 2016 (‘GDPR’), the purpose of this privacy policy is to inform you of the measures we take to protect your personal data.

Data controller

The data controller referred to in this document is EARL Laurence and Laurent GAY (Domaine Rivière) 553 Route des Tuillières 69620 – Siret 39965851700020 represented by GAY, Laurence and Laurent.

The personal data we process

Data you provide to us directly

During our various interactions with you, or through the contact forms on the domaine-riviere.fr website, you may provide us with information about yourself.

This data includes:

  • Surnames, first names, title,
  • Postal address, email address, telephone number;

Data that we collect automatically on the DOMAINE RIVIERE website, including through cookies

The information collected from the domaine-riviere.fr website does not in itself identify a specific person, but indicates, among other things, your operating system, your browser and your browsing actions.

We may also collect personal data when the website experiences unexpected connection attempts. This data is used to maintain the security of the website, limit brute force attacks and block users who have made too many attacks and unsuccessful connection attempts. The website lists users who are spammers and/or malicious bots listed on hackrepair.com.

To learn more about cookies related to the domaine-riviere.fr website, please see our cookie policy.

 

Sensitive data

DOMAINE RIVIERE does not collect sensitive data.

Sensitive data includes: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data or sexual orientation.

Only personal data that is strictly necessary for the purposes described below is collected.

 

Purposes of processing

The personal data collected is processed for the following purposes:

  • to put you in contact with our services;
  • to manage your appointments/contracts with our services (e.g. to receive notifications, modify or cancel appointments);
  • for statistics, analyses and audience measurement;
  • to manage rights and requests to exercise individual rights.

Personal data is collected and processed on the following legal bases:

  • the performance of the contract defined together;
  • on the basis of your consent when required by applicable regulations, in particular when we collect your cookie data;
  • for the purpose of ensuring compliance with our legal and regulatory obligations.

 

Recipients of your personal data

The following may have access to some of your data:

  • Sales department staff,
  • Subcontractors: Management System (emailing, CRM, etc.), accounting software, Router (mailing)

Access to your data is based on individual and limited access authorisations. Staff who have access to personal data are subject to a confidentiality obligation (through a nominal and personal confidentiality agreement).

You are hereby informed that your data will not be sold to third parties under any circumstances.

 

Is data transferred outside the European Union?

We store your personal data within the European Union. However, in some cases, the data we collect when you use our platforms or services may be transferred to subcontractors or business partners located in other countries, some of which may have less protective personal data protection laws than those in force in your country of residence. In the event of such a transfer, we ensure that the processing is carried out in accordance with this privacy policy and is governed by the European Commission’s standard contractual clauses, which guarantee a sufficient level of protection of privacy and fundamental rights.

 

Categories of personsData typePurpose of processingShelf lifeMain legal basis
ProspectsName, surname, email, phoneCommercial prospecting ( newsletter, offers, invitations)3 years from the last active contact with the prospectLegitimate interest
ProspectsDatas from contact formAnswer to requests3 years from last contactLegitimate interest
Private customersIdentity, contact detailsCustomer relationship managementDuration of the commercial relationship + 3 years for prospecting purposesContract
Private customersOrder and billing informationsSales management10 years ( accounting requirement)Legal obligation
Private customersPurchase historyBusiness analysis3 years after the last purchaseLegitimate interest
Professionals customersIdentity, contact detailsCommercial managementDuration of the commercial relationship + 5 years ( commercial prescription)Contract
Professionals customersInvoice, quote, purchase ordersAccounting and tax obligations10 yearsLegal obligation
NewsletterEmail adressSending informations and offersUntil the person unsubscribes or 3 years after inactivityConsent
Contests, tasting, open housesName, emailEvent planning1 year after eventConsent
website - not necessarycookies IP address, plottersAudience measurement/ Marketing13 months maximumConsent
Request to exercise GDPR rightsIdentity, requestRights management1 to 3 years ( consent proof)Legal obligation

Your rights regarding your personal data

You have the following rights regarding your personal data:

  • right of access;
  • right to query;
  • right to rectification;
  • right to erasure – this right may be exercised provided that it does not interfere with the performance of the contract or compliance with our legal and regulatory obligations;
  • right to restrict one or more types of processing of your personal data;
  • right to modify and/or withdraw, at any time, your consent to the processing of your personal data based solely on your consent;
  • right to object to the processing of your personal data;
  • right to data portability.

You also have the right to define general and/or specific guidelines regarding the fate of your personal data and how you wish your rights to be exercised after your death.

In order to ensure that the information we hold about you is always accurate, we recommend that you update your personal data regularly.

You can submit any request to exercise your rights regarding your personal data by contacting the data controller at the following address: contact[@]domaine-riviere.fr.

If you are not satisfied with the response, you can lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): https://www.cnil.fr/fr/plaintes

 

Security measures implemented

We take all necessary measures to preserve the security and confidentiality of data and, in particular, to prevent it from being damaged or accessed by unauthorised third parties. To this end, we implement all technical and organisational measures to ensure an adequate level of security appropriate to the risks (authentication procedures with personal and secure access via confidential usernames and passwords).

Furthermore, we ensure that our subcontractors comply with the rules on personal data protection.

The DOMAINE RIVIERE website has been designed with particular attention to security in order to protect your data and prevent malicious requests. Data transmitted on the website is also encrypted using the https protocol.

 

Opening of the cellar
Come and visit us !
from Tuesday to Friday
10h-12h30 et 14h30-19H
Saturday
10H-12h30 et 14h30-18h30

Domaine Rivière

Laurence et Laurent GAY

553 route des Tuillières

69620 BAGNOLS

To order wines outside of France

The sale of alcohol is prohibited to minors.
Alcohol abuse is dangerous for your health.
Please drink responsibly.