Privacy Policy

1. Preamble

La Cave Coopérative de Bonnieux (hereinafter “we” or “the Company”), acting as data controller, attaches great importance to the protection of the privacy and personal data of its users, customers, partners, and visitors to its website or services.

The purpose of this policy is to explain clearly and transparently which data is collected, for what purposes, on which legal bases, for how long, and what your rights are.

In accordance with French Law No. 78-17 “Informatique et Libertés” of January 6, 1978 as amended, and Regulation (EU) 2016/679 relating to the protection of personal data, La Cave Coopérative de Bonnieux undertakes to implement the necessary measures to ensure the confidentiality of personal data collected on its website.

2. Definitions

In order to facilitate understanding of this policy, the following terms are defined as follows:

User: any natural person browsing our website, using our services, or interacting with our company in any way whatsoever (customer, prospect, visitor, etc.).

Personal Data: any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Processing of Personal Data: any operation or set of operations performed on personal data, whether or not by automated means. This includes, in particular, collection, recording, organization, structuring, storage, adaptation, modification, extraction, consultation, use, communication, transmission, dissemination, making available, alignment or combination, as well as restriction, erasure, or destruction of such data.

3. Data Controller and Responsibility

Company Name: La Cave Coopérative de Bonnieux
Address: 4290 Route de la Gare, 84480 Bonnieux, France
Contact Email: caveau@cavedebonnieux.com
Telephone: +33 (0)4 90 75 80 03
Name of the DPO: Audits & Conseils RGPD

Minors

As stated in the General Terms and Conditions of Sale (hereinafter “GTC”), Users must be over 18 years old in order to validly create a customer account and make purchases allowing them to benefit from the Services offered on the Website.

4. Data Collected

We may collect all or part of the following data:

Identification information: surname, first name, email address, telephone number, postal address

Browsing data: IP address, browser type, visited pages, cookies

Contractual data: billing, orders, customer service information

Certain mandatory data fields are marked with an asterisk (*).

5. Purposes of Processing

Personal data is collected and processed for the following purposes:

Provision of requested services (account creation, order processing, etc.)

Customer relationship management (after-sales service, billing, contact)

Improvement of our services and statistical analysis

Sending commercial information (subject to prior consent)

Compliance with our legal obligations (accounting, security, etc.)

Responding to your requests submitted through our contact forms

Legitimate improvement and development of our services

Legitimate contribution to the security of our services and prevention of fraudulent, illegal, or unauthorized activities

Compliance with our legal, social, and tax obligations

When we collect data that is not justified by our legal obligations, contractual obligations, legitimate interest, or to respond to your request, we will request your consent and specify the purpose of such consent.

Newsletter subscription

Purpose of Processing

Provision of requested services (account creation, order processing, etc.)

Customer relationship management (after-sales service, billing, contact)

Sending commercial information (subject to prior consent)

Compliance with our legal obligations (accounting, security, etc.)

Data Used

Identification information

Payment information

Contractual data

Purpose of Processing

Improvement of our services and statistical analysis

Data Used

Browsing data: IP address, browser type, visited pages, cookies

Purpose of Processing

Newsletter subscription

Data Used

Email addresses

6. Legal Basis for Processing

The processing of your data is based on:

Performance of a contract or pre-contractual measures

The explicit consent of the user

Compliance with a legal obligation

The legitimate interest of La Cave Coopérative de Bonnieux in improving its services and sending newsletters

Newsletter:

You may unsubscribe from the newsletter at any time by contacting us by email at: rgpd@cavedebonnieux.com, which is also indicated at the bottom of each newsletter. Under no circumstances will your email address be transferred to third parties.

7. Data Retention Period

Personal data is retained for the following periods:

Customers: throughout the contractual relationship, then archived for 5 years

Prospects: 3 years from the last contact

Technical/statistical data: maximum 3 years or immediately anonymized

Accounting data: 10 years, in accordance with regulations

8. Recipients of Data

Data may be transmitted to the following recipients:

Authorized internal departments of La Cave Coopérative de Bonnieux

Technical service providers (hosting, maintenance, CRM tools, etc.)

Competent authorities in compliance with legal obligations

Delivery service providers

9. Transfers Outside the EU

No data is transferred outside the European Union.

10. Data Security

We implement appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of your personal data against any unauthorized access, alteration, disclosure, or destruction.

The La Cave Coopérative de Bonnieux website uses the HTTPS protocol to secure access to its pages.

HTTPS (HyperText Transfer Protocol Secure) secures the HTTP protocol by combining HTTP with SSL (Secure Socket Layer) encryption.

Data exchanged on the website is encrypted. Users can therefore be certain they are viewing the original website and not a modified version.

To enhance security, several improvements have been implemented: regular data backups are performed, and the website benefits from regular updates provided by the service provider to correct security vulnerabilities.

In addition, La Cave Coopérative de Bonnieux has selected a specialized hosting provider guaranteeing optimal availability and security levels.

All processing carried out on website data is performed by authorized personnel only. Access is restricted to these persons.

Regarding payment methods on the La Cave Coopérative de Bonnieux website, the bank’s payment module is used. All payment security is handled by the bank, and La Cave Coopérative de Bonnieux does not store any customer banking information.

11. Your Rights

In accordance with the GDPR, you have the following rights:

Right to Information: you have the right to obtain clear, transparent, understandable, and easily accessible information on how we use your personal data and on your rights. This is why we provide the information contained in this Policy.

Right of Access: you have the right to access the personal data we hold about you (provided that the request is not manifestly unfounded or excessive, particularly due to its repetitive nature) and to obtain a copy of it.

Right to Rectification: you have the right to request that your personal data be corrected if it is inaccurate or outdated and/or completed if incomplete (provided that the request is not manifestly unfounded or excessive, particularly due to its repetitive nature). If you wish to modify your personal data, you may do so through your Customer Area or by contacting us using the details provided in this article.

Right to Erasure: in certain cases, you have the right to obtain the deletion or removal of your personal data. This is not an absolute right, as we may be required to retain your personal data for legal or legitimate reasons.

Right to Restriction of Processing: this right means that the processing of your data is restricted, so that we may store the data but may not use or process it. This right applies in specific circumstances, namely:

Where the accuracy of personal data is contested by the data subject (i.e., you). Processing is then restricted for a period enabling La Cave Coopérative de Bonnieux to verify the accuracy of the personal data;

Where the processing is unlawful and the data subject opposes the erasure of the personal data and requests restriction of its use instead;

Where La Cave Coopérative de Bonnieux no longer needs the personal data for processing purposes but the data is still required by the data subject for the establishment, exercise, or defense of legal claims;

Where the data subject has objected to processing based on the legitimate interests pursued by La Cave Coopérative de Bonnieux pending verification of whether the legitimate grounds pursued by La Cave Coopérative de Bonnieux override those of the data subject.

If you wish to obtain restriction of processing, please contact us using the details indicated in this article.

Right to Object to Processing Based on Legitimate Interest of La Cave Coopérative de Bonnieux: you may at any time object to the processing of your personal data for reasons relating to your particular situation, unless La Cave Coopérative de Bonnieux demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where such data is necessary for the establishment, exercise, or defense of legal claims.

Withdrawal of Consent for Commercial Prospecting: you may unsubscribe at any time from receiving commercial prospecting messages from La Cave Coopérative de Bonnieux.

Right to Lodge a Complaint with a Supervisory Authority: you have the right to lodge a complaint with the data protection authority of your country (in France, the CNIL – Commission Nationale de l’Informatique et des Libertés) regarding La Cave Coopérative de Bonnieux’s practices concerning the protection of personal data and privacy. Nevertheless, we invite you to contact us first using the contact details below before lodging any complaint with the competent data protection authority.

To exercise these rights, contact us at: rgpd@cavedebonnieux.com or by post at 4290 Route de la Gare, 84480 Bonnieux, France.

When submitting a request to exercise your rights, you must identify yourself by any appropriate means. In case of doubt regarding your identity, we may request additional information deemed necessary, including a photocopy of an identity document bearing the signature of the data subject.

You also have the option to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL).

For any questions concerning your personal data, you may contact our DPO by email at rgpd@cavedebonnieux.com or by post at 4290 Route de la Gare, 84480 Bonnieux, France.

12. Cookies

When browsing our website, cookies may be placed on your device. For more information, please consult our Cookies Policy.

13. Amendments

This policy may be modified at any time. In the event of substantial changes, you will be informed by notification or email for registered customers.

Last updated: 2026-04-14

14. Contact

For any questions relating to this policy or your personal data:

La Cave Coopérative de Bonnieux
4290 Route de la Gare, 84480 Bonnieux, France
caveau@cavedebonnieux.com
+33 (0)4 90 75 80 03
Data Protection Officer: Audits & Conseils RGPD