Privacy Policy

This policy describes how Vins Vivus collects, uses and protects the personal data of visitors and subscribers to vinsvivus.com, in accordance with the General Data Protection Regulation (GDPR) and French data protection law. This policy is drafted in French; this English version is provided for convenience only, and the French version prevails in the event of any discrepancy.

Data controller

The data controller is Vins Vivus — see our Legal Notice for its full identity.

Data we collect

• Account data — email address, encrypted password, or your Google identifier if you sign in with Google.
• Date of birth — collected to verify the legal drinking age required to purchase alcohol.
• Delivery address — collected before your first order.
• Order data — subscriptions taken out, allocations ordered, your order history.
• Preferences — language, notification preferences.
• Technical data — strictly necessary cookies (see our Cookie Policy).

Why we use it

• Manage your account and authenticate you — performance of the contract.
• Verify that you are of legal drinking age — legal obligation.
• Process your subscriptions and orders, and pass them on to the relevant domaine — performance of the contract.
• Prevent fraud, in particular unauthorised resale of allocations — legitimate interest.
• Respond to your requests and provide support — performance of the contract and legitimate interest.
• Meet our legal and accounting obligations — legal obligation.

Who receives your data

Your data is shared, strictly as needed, with: the domaine you order from (identity and delivery address, to fulfil the order); Stripe, our payment provider; and our technical hosting, infrastructure, and email providers. We never sell your data to third parties.

How long we keep it

Your account data is kept for as long as your account is active.

If you delete your account, your profile data is anonymised. Data linked to your past orders is kept, separated from your profile, for as long as required by our accounting and tax obligations (currently ten years, under Article L. 123-22 of the French Commercial Code).

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. You can exercise these rights by contacting us (see our Legal Notice), or directly from your account for deletion. You may also lodge a complaint with the CNIL, the French data protection authority.

Data protection contact

[TO BE COMPLETED: contact details for our data protection officer, or, failing that, a dedicated email address for GDPR requests]

Security

Your data is protected by appropriate technical and organisational measures (encryption, access control, per-account isolation). No card details ever pass through or are stored by Vins Vivus: payment is handled directly by Stripe.

Transfers outside the European Union

Some of our providers may process data outside the European Union, under appropriate safeguards, in particular the European Commission's standard contractual clauses.

Cookies

The full list of cookies used by the site is set out in our Cookie Policy.

Changes

This policy may be updated to reflect changes to the service or to the law. The version in force is the one published on the site.