Privacy policy

PERSONAL DATA

As a reminder, European regulations define personal data (hereinafter “personal data”) as any information likely to identify a natural person. The implementation of automated processing of personal data is governed in particular by theRegulation (EU) 2016/679of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data,belowdesignated "RGPD».

As part of its activities, Ôdette-vintage is required to process personal data. Certain information is required to access the service or carry out the desired operation.

They are subject to automated processing and are intended solely for Ôdette-vintage.

1. Collection of personal data

The personal data that is collected on this Site (or "Platform") are as follows:

Contact form

The contact form offered on the Website allows the User to enter his name, first name and email address in order to be contacted again.

Newsletter

The User has the possibility of subscribing to a Newsletter in order to know the latest news from Ôdette-vintage. To register, the User must enter: his name, first name and email address. The User has the possibility to unsubscribe at any time by sending an email tocontact@odette-vintage.com

Cookies

Cookies are used as part of the use of the Site. The User has the option of deactivating cookies from his browser settings (see “Cookies” banner).

Ordered

When placing their order, the User provides their last name, first name, address, date of birth, email address, as well as their payment details.

2. Use of personal data

The purpose of the personal data collected from users is to provide the services of the Site, to improve them and to maintain a secure environment (in particular by means of cookies).

More specifically, the uses are as follows:

- access and use of the Website by the User;

- customer relationship management ;

- management of any disputes with users;

- business development ;

- communication of information (information on the goods and / or services offered, etc.).

3. Sharing of personal data with third parties

Personal data may be shared with third-party companies in the following cases:

- when the User authorizes the Website of a third party to access his data;

- when the Platform uses the services of providers to provide user assistance or allow online payment. These service providers have limited access to user data, as part of the performance of these services, and have a contractual obligation to use them in accordance with the provisions of the applicable data protection regulations. personal character;

- if required by law, the Platform may transmit data to respond to complaints made against the Platform and comply with administrative and legal procedures;

- if the Platform is involved in a merger, acquisition, transfer of assets or bankruptcy proceedings, it may have to sell or share all or part of its assets, including personal data. In this case, users would be informed, before personal data is transferred to a third party.

The personal data collected will not be rented, sold or loaned to a third party without the User being informed in advance. Any transfer or provision of data can only take place with the prior consent of the User or in the absence of opposition on his part.

4. Legal basis

The legal bases of the processing are the contractual execution and the consent since the collection of the data allows the loyalty of the customers.

5. Retention period

The data retention period is the time of the commercial prescription.

Thus, most of the data (such as information from the User's Customer Area and his order history) is kept as long as the latter is an “active” customer and for a period of 5 years from his date of registration. last activity (purchase or contact for example).

Customer data is then archived with restricted access for an additional period for limited reasons authorized by law (payment, guarantee, disputes, etc.). After this period, they are deleted.

The User's bank details are kept by secure payment providers for 15 months in accordance with article L133-24 of the Monetary and Financial Code.

The period of validity of the consent to the deposit of cookies is thirteen months. At the end of this period, the consent will be collected again.

6. Security and confidentiality

The Platform implements organizational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorized access. However, it should be noted that the Internet is not a completely secure environment and the Platform cannot guarantee the security of the transmission or storage of information on the Internet.

7. Cookies

Cookies are text files stored in the User's connection terminal and used to record personal data and technical data relating to navigation on the website. Cookies can be temporary or permanent.

The Ôdette-vintage website uses cookies or other technologies (hereinafter referred to as “cookies”) that may collect or store users' personal data.

Cookies are used in order to:

Recognition of their connection terminal;
Recognition of their username and password.

• Analyze website traffic and data in order to:
Measure the website audience in order to improve the user experience
Understand how you use said website in order to improve functionality and performance.

8. Implementation of user rights

In application of the regulations applicable to personal data, users have the following rights:

- they can exercise their right of access to know personal data
concerning them;

- they can object at any time to the processing of data for prospecting purposes;

- if the personal data held by the Platform are inaccurate, they can request the updating of their information;

- they can claim in certain cases provided for by law, that the use of the processing of their data be limited, in particular if they call into question the said processing and for the duration of a dispute which opposes them to the company Ôdette- vintage;

- they can recover their data or require its transmission to third-party service providers;

- they may not be the subject of a decision based exclusively on automated processing, including profiling producing legal effects concerning them or significantly affecting them in a similar way;

- they can request the deletion of their personal data, in accordance with applicable data protection laws;

- they can define general and specific directives defining the way in which they intend to exercise the aforementioned rights after their death.