Data protection

PERSONAL DATA PROTECTION POLICY
(Updated on 4 November 2022)

Introduction

At the outset, the terms used herein with an initial capital letter have the same meaning as in the General Terms and Conditions of Sale, except where one of these terms is expressly defined differently in this Personal Data Protection Policy;.

1. Collection of personal data

Certain personal data may be collected when the Customer uses the Site and the mobile application. In particular, the following data is collected:

- Account registration: when the Customer's account is created, the Customer's surname, first name, e-mail address and date of birth are recorded;

- Connection: when the Customer connects to the Site and the mobile application, the Customer's surname, first name, connection data, usage data, location data and payment data are recorded.

- Account: use of the services provided on the Site and on the mobile application allows the creation of an account, which may include an address and a telephone number;

- Payment: as part of the payment for the products and services offered on the Site and the mobile application, the latter records financial data relating to the Customer's bank account or credit card;

- Comments: as part of their purchases, Customers may give their opinion on a particular wine they have tasted. Those data are stored.

- Cookies: cookies are used when using the site and the mobile application. Users can deactivate cookies using their browser settings. All information collected indirectly will only be used to monitor the volume, type and configuration of traffic using this site and mobile application, to develop its design and layout and for other administrative and planning purposes and more generally to improve the service we offer you.

- Other data: data relating to the monitoring of the commercial relationship with the Customer and the carrying out of loyalty-building, canvassing and promotional actions are also collected (products ordered, quantity, amount, frequency, delivery and/or invoicing address(es), as well as any other relevant delivery information (tracking number, status of shipment, etc.), purchase history, product returns, correspondence and/or telephone exchanges with the Customer and the Vendor's after-sales service, etc.).

2. Use of personal data

The purpose of the personal data collected from Customers is to provide and improve the services of the Site and the mobile application and to maintain a secure environment. In particular, it is used for the following purposes
- access to and use of the Site and mobile application by the Customer ;
- management of the operation and optimisation of the Site and the mobile application;
- organizing the conditions of use of payment services;
- verification, identification and authentication of data transmitted by the Customer;
- providing Customer assistance;
- personalizing services by displaying advertisements according to the Customer's browsing history and preferences;
- prevention and detection of fraud, malware (malicious software) and management of security incidents;
- management of any disputes with Customers;
- Maison Wineted has carried out checks on all personal data to ensure that there is no data that is not strictly necessary for the purposes pursued.

3. Sharing of personal data with third parties

The personal data collected may be shared with third party companies in the following cases:

- when the Customer uses the payment services, for the implementation of these services, the Site and the mobile application are in contact with third-party banking and financial companies with which it has entered into contracts;
- when the Customer publishes information accessible to the public in the free comment areas of the Website and the mobile application;

- when the Customer authorises a third party's website and mobile application to access his/her data;

- when the Site and the mobile application use the services of external service providers to provide Customer support, advertising and payment services, in particular PayPal, PayPlug and Ceres (these service providers have limited access to the user's data, as part of the performance of these services, and have a contractual obligation to use it in compliance with the provisions of the applicable regulations on the protection of personal data);

- if required by law, the Site and the mobile application may transmit data in order to follow up claims made against the Site and the mobile application and to comply with administrative and legal procedures;

- if the Site and the mobile application are involved in a merger, acquisition, transfer of assets or receivership procedure, it may be required to transfer or share all or part of its assets, including personal data.

Maison Wineted implements appropriate technical, organizational and physical security measures to protect processed personal data against accidental or unlawful damage, loss, misappropriation, intrusion, disclosure, alteration, destruction or unauthorized access to such data.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf, including in particular the publisher of this website. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. However, if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. As a third-party service provider, Google uses cookies to serve ads on this site. Using the DART cookie, Google tailors the ads it displays to users based on their browsing behaviour on this or other websites. You can deactivate the use of the DART cookie by going to the privacy policy page applying to the content network and Google ads (https://policies.google.com/technologies/ads).

Google Tag Manager

Maison Wineted also uses Google Tag Manager, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, a web tag management service provided by Google Inc. This service is used by Unis C solely for the purpose of improving its visibility on Google search engines. Further information about Google Tag Manager and data protection can be found at https://www.google.com/intl

Sentry

The Maison Wineted mobile application uses the Sentry tool in order to monitor the operation and performance of the application. SentryIO is a registered trademark of Functional Software, Inc, dba Sentry, 132 Hawthorne Street, San Francisco, CA 94107, USA. No personal data is transmitted. Only real-time crash reports are sent with precise indications of code positions and device information; these reports are intended to simplify maintenance and thus improve the stability of the application. The data protection declaration of Functional Software, Inc can be consulted here: https://sentry.io/security/

4. Security and confidentiality

The Site and the mobile application implement organisational, technical, software and physical digital security measures to protect personal data against alteration, destruction and unauthorised access. However, it should be noted that the Internet is not a completely secure environment and the Site and the mobile application cannot guarantee the security of the transmission or storage of information on the Internet.

5. Implementation of users' rights

In accordance with the regulations applicable to personal data, users have the following rights:

- they may update or delete the data concerning them by logging into their account and configuring the account settings;

- they may delete their account by writing to the following e-mail address: contact@mwineted.com ; It should be noted that information shared with other Customers, such as wine reviews, may remain visible to the public on the Site and the mobile application, even after their account has been deleted;

- they may exercise their right of access to the personal data concerning them by writing to the following e-mail address: contact@mwineted.com (in this case, before implementing this right, Maison Wineted may request proof of the user's identity in order to verify its accuracy);

- if the personal data held by the Site and the mobile application is inaccurate, they may request that the information be updated, by writing to the following e-mail address: contact@mwineted.com ;

- users may request the deletion of their personal data, in accordance with applicable data protection laws, by writing to the following e-mail address: contact@mwineted.com.

- You may exercise your right to object to data being processed for commercial prospecting purposes. If You are concerned by email canvassing, You may also modify or unsubscribe from the Newsletter by clicking on the "Unsubscribe" hypertext link in each newsletter.

To exercise these rights or for any other question about the processing of data under this scheme, the Customer may contact contact@mwineted.com . Customers may also consult the cnil.fr website for more information on their rights.

6. Changes to the Personal Data Protection Policy

The Site and the mobile application reserve the right to make any changes to this policy relating to the protection of personal data at any time. If a change is made to this personal data protection policy, the Site and the mobile application undertake to publish the new version on its Site and mobile application. The site and mobile application will also inform users of the change by e-mail at least 15 days before the effective date. If the user does not agree with the terms of the new wording of the personal data protection clause, they may delete their account.