Personal Data Use Policy

Preamble

This Personal Data Use Policy applies to the website accessible, in particular, via the following URL: https://chateau-carmenere.com/boutique-en-ligne/, offered by Château Carmenere (hereinafter referred to as the “Seller”).

Its purpose is to inform you about:

  • How we may collect and process your personal data, where applicable;
  • The rights you have regarding your own personal data;
  • The identity of the data controller responsible for processing your data;
  • The transfer of your data to third parties;
  • Our policy regarding the management of “cookies”.

This Privacy Policy supplements the Legal Notice and General Terms and Conditions of Sale, which can be consulted on our Website.

We undertake to process all collected data in compliance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data;
  • French Law No. 78-17 of 6 January 1978 relating to data processing, files and freedoms, as amended by Law No. 2018-493 of 20 June 2018 relating to the protection of personal data.

The data subject whose personal data is processed by the Seller agrees that such processing shall be carried out in accordance with this policy.

Article 1: Data Controller

The identity and contact details of the Data Controller are as follows:

Château Carmenere
Chemin de Lourtet
33340 Queyrac, France
acting through its duly authorised legal representative.

Requests relating to personal data must be sent by post to the following address:

Château Carmenere
Chemin de Lourtet
33340 Queyrac, France

or by email to:

contact@chateau-carmenere.com

Article 2: Personal Data Collected and Processed

As part of the operation of the Website, we collect personal data relating to users.

2.1 General Data Collection

For the website https://chateau-carmenere.com/boutique-en-ligne/, the following information may be collected:

When you connect to our Website:

  • Your IP address;
  • Browsing data, subject to your consent and the settings of your device.

When you communicate with us through the contact form:

  • Your surname and first name;
  • Your company name;
  • Your address (street, postal code, city);
  • Your telephone number;
  • Your email address.

These data are required in order to respond to messages sent through the contact form.

When you browse our Website and have authorised the collection of your data through cookies.

When placing an order for Product(s).

When users consult and use the features offered on our Website.

When you participate in our promotional offers and direct marketing activities, such as participation in a competition.

Where required by applicable regulations, we undertake to obtain the explicit, specific and prior consent of Website users and/or allow them to object to the use of their data for certain purposes.

Each user has the right to withdraw their consent at any time.

2.2 Categories of Personal Data Processed

We may process the following personal data in accordance with the purposes described in Article 3 of this Policy:

2.2.1 Order Management and Website Use

When you place an order and/or use the various features of the Website, the collected data includes:

  • Transactional information relating to Product orders;
  • Browsing information, including browsing history, IP addresses and browser settings.

2.2.2 Website Interaction

Certain data are automatically collected from your device or internet browser.

Information regarding these practices is detailed in Article 8 “Cookies” below.

These data include:

  • IP address;
  • Cookies.

Article 3: Purposes of Processing

We collect and/or process your personal data in compliance with European and French data protection laws, where necessary, for the following purposes:

  • To identify individuals using our Website;
  • To produce statistics relating to Website usage and improve its operation;
  • To carry out maintenance operations and error investigations;
  • To respond to messages sent to us through the contact form;
  • To process your order(s);
  • To comply with applicable laws or any other legal obligations;
  • To protect the security of our systems, detect and prevent fraud, or safeguard our legitimate interests, while respecting your interests, fundamental rights and freedoms requiring enhanced protection of your personal data.

You have the right at any time to withdraw your consent or object to any processing of your collected personal data.

The collection and processing of data therefore serve the following purposes:

  • To access our Website, place and process an order;
  • To carry out prospecting activities and/or send information to Users;
  • To operate, maintain and improve the features of our Website, particularly those relating to order processing;
  • Accounting and internal auditing;
  • Detection of technical problems;
  • To develop statistics in order to improve our services / our online store and develop new features;
  • To improve our range of Products offered on our Website;
  • To provide personalised content and browsing experiences;
  • To make Products offered on our Website more relevant according to Users’ interests, subject to obtaining the User’s explicit prior consent;
  • To comply with legal obligations, prevent or detect fraud, abuse, unlawful use, breaches of the General Terms and Conditions of Sale, and comply with court decisions and governmental requests.

Article 4: Consent

When placing an order or submitting a contact request, you are required to complete forms and provide personal data in order to place an order.

Where required by applicable regulations, we undertake to obtain your explicit, specific and prior consent, and/or allow you to object to the use of your personal data for certain purposes, and/or allow you to access and/or correct information concerning you.

Article 5: Disclosure of Personal Data to Third Parties

The personal data collected may be accessed by:

  • Authorised Château Carmenere personnel responsible for managing and maintaining the Website.

However, such data may be disclosed to third parties where required by legal or regulatory provisions, judicial decisions, or where necessary to protect or defend our rights.

The personal data we collect may be transferred to third-party companies under subcontracting agreements entered into with us, exclusively for the purposes described in Article 3.

Prior to any transfer, we will take all necessary measures and guarantees to ensure the security of such transfers.

Transfers may therefore take place in connection with the following activities:

  • IT services;
  • Research and statistical analysis.

We do not transfer any personal data to partners for commercial operations or for any other purposes unrelated to those described in Article 3.

Should we intend to modify our data transfer policy in order to transfer data to commercial partners or other third parties, this may only be carried out after obtaining your explicit prior consent.

Article 6: Hosting and Transfer of Personal Data

The personal data collected and processed are hosted by service providers hosting our servers in France or in another European territory.

The User is informed that we may, where applicable, transfer personal data to a third country or an international organisation covered by an adequacy decision issued by the European Commission.

Where a transfer is made to a country or international organisation not covered by such an adequacy decision, it may only take place provided that appropriate safeguards are implemented and that the affected Users have enforceable rights and effective legal remedies, in accordance with applicable regulations.

Article 7: Data Retention

Personal data are retained for the period strictly necessary to fulfil the purposes for which they are processed, in accordance with CNIL recommendations and inspired by simplified standard No. NS-048 relating to automated processing of personal data concerning customer and prospect management.

After this period, data may be archived with restricted access for an additional period for limited purposes authorised by law (payment, warranty, disputes, etc.).

Article 8: Cookies

When you visit our Website, cookies may be placed on your computer, mobile phone or tablet.

A cookie is a small text file stored in your device’s browser when visiting a website or viewing an advertisement. It is intended to collect information relating to your browsing activity or provide services adapted to your device.

Cookies are managed by your internet browser.

8.1 Cookies Used and Their Purpose

Our Website uses:

  • Functional cookies (mandatory): ensuring the proper operation of our Website and allowing its optimisation. Our Website cannot function correctly without these cookies.
  • Analytics cookies: allowing us to obtain anonymous visitor statistics in order to optimise the ergonomics, navigation and content of our Website. If these cookies are disabled, we will not be able to analyse Website traffic.

These cookies allow our services to operate optimally. They are essential for browsing and accessing our Website and are therefore always active.

The cookies collected are not transferred to third parties and are not used for purposes other than those described above.

8.2 Cookie Settings

You have several options for managing cookies.

You may configure your cookie preferences at any time through the dedicated interface below or through your browser settings, allowing you to refuse the storage of cookies.

Each browser has different configuration settings. These are described in your browser’s help menu, which explains how to modify your cookie preferences.

8.3 Consent

By browsing our Website, you accept the use of the above-mentioned cookies.

During your first visit, we informed you of the presence of cookies and the possibility of objecting to them by accessing this Personal Data Use Policy.

Please note that refusing cookies:

  • May cause operational issues with our Website;
  • May prevent us from analysing Website traffic.

To manage cookies according to your preferences, we invite you to configure your browser settings according to the purpose of each cookie.

8.4 Access, Deletion and Objection Rights

As with other personal data, you have the same rights described in Article 10 below.

8.5 Retention Period

We retain collected cookies for:

  • 13 months for functional cookies;
  • 13 months for Analytics cookies.

This period is not automatically extended when you revisit the Website.

After this period, data are either deleted or anonymised if they have not already been anonymised.

Article 9: Data Security

In order to ensure the security of personal data, particularly to prevent them from being altered, damaged, or accessed by unauthorised third parties, we take all appropriate precautions with regard to the nature of the data and the risks associated with processing.

Article 10: Users’ Rights

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, and with French Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms, you have the following rights, which you may exercise at any time by contacting the Seller (by email or postal mail).

You have the right to:

  • Access your personal data;
  • Request correction and modification of inaccurate or incomplete data;
  • Request deletion of your personal data, unless we have legal or legitimate reasons to retain them;
  • Object to the processing of your personal data and request restriction of processing, unless we have a legitimate interest in continuing such processing;
  • Request portability of your personal data where applicable;
  • Define instructions regarding the handling of your personal data after your death;
  • Withdraw your consent at any time to the processing of your personal data (without affecting the lawfulness of processing based on consent carried out before its withdrawal).

Any request must specify the right you wish to exercise, include a copy of your valid national identity card (or passport), and provide the contact details (address, telephone number, email address) where we may contact you.

This information will only be retained for the time necessary to process your request.

However, please note that exercising your right to delete your personal data, your right to object to processing, your right to restrict processing, and/or your right to withdraw consent may result in the User being unable to use the Website and/or place an order.

You are also informed of your right to lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL):

By post:

3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Or by submitting an online complaint via:

www.cnil.fr

Article 11: Information Regarding the Contractual Nature of the Provision of Personal Data

Regarding the regulatory or contractual nature of the collection of personal data, the obligation to provide such data, and the possible consequences of failing to provide them, the User is informed of the following:

The request for personal data has a contractual nature within the framework of the relationship that the User wishes to establish with the Seller on the Website in order to place an order for Product(s).

The provision of such data is necessary for processing the order and therefore constitutes a condition for entering into this contractual relationship.

Consequently, the User must provide their personal data if they wish to place an order on our Website.

Failure to provide such personal data will prevent the User from placing an order on our Website.

Article 12: Automated Decision-Making

It is expressly stated that no automated decision-making process, within the meaning of applicable regulations, is carried out using the personal data collected.

Article 13: Possible Further Processing of Personal Data

If personal data were to be processed subsequently for purposes other than those for which the data were originally collected and identified above, the Data Controller shall provide the data subject, prior to such further processing, with information regarding this new purpose and any other legally required relevant information.

Article 14: Age Requirement for Providing Personal Data

The collection of personal data may only concern persons who are at least 18 years old in France, and persons who have reached the legal age for purchasing and consuming alcohol in other countries.

Users of our Website must be of legal age in their country of residence in order to access the Website and, where applicable, place an order.

By placing an order through our Website and/or providing us with personal data, you declare and warrant that you are of legal age in your country of residence.

Article 15: Links to Other Websites

Our Website may contain links to other websites over which we have no control.

We are not responsible for the data protection policies or practices of other websites that you choose to visit through links available on our Website.

We therefore recommend that you review the privacy policies of these other websites in order to understand their methods of collecting, using and sharing your personal data.

Article 16: Amendments

We reserve the right to modify or update this Personal Data Use Policy at any time.

Any amendments will be published in this section.

You are encouraged to regularly consult this Personal Data Use Policy and check whether any changes have been made.

Further Information

Further information regarding personal data protection is available on the website of the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL):

www.cnil.fr