Privacy Policy

Effective as of: August 18, 2026 — v1.0

This Privacy Policy describes how Champagne Vollereaux SA collects, uses, stores, and protects your personal data when you use the website https://www.champagne-vollereaux.fr/, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and Law No. 78-17 of January 6, 1978, “Data Protection,” as amended.

1. Data Controller

The data controller is:

Champagne Vollereaux, Inc.

Headquarters: 48 rue Léon Bourgeois, 51530 Pierry

GDPR Contact Email: [email protected]

Website: https://www.champagne-vollereaux.fr/

2. Data Collected and Purposes

The personal data collected depends on how you use the site:

Orders

• Data collected: last name, first name, mailing address, email address, phone number, payment information (processed by the payment service provider)
• Purpose: order processing and tracking, billing, and delivery
• Legal basis: performance of the contract (Article 6.1.b of the GDPR)
• Retention period: 10 years (accounting requirements—Article L.123-22 of the Commercial Code)

Customer Account

• Data collected: last name, first name, email address, password (encrypted), address, order history
• Purpose: User account management and customer relationship management
• Legal basis: performance of the contract (Article 6.1.b of the GDPR)
• Retention period: duration of the business relationship + 3 years

Newsletter / Email Marketing

• Data collected: email address, first name (if applicable)
• Purpose: to send marketing communications, promotions, and news updates
• Legal basis: consent (Article 6.1.a of the GDPR)
• Retention period: until you unsubscribe

Online Reservation

• Data collected: last name, first name, email address, phone number, reservation date/time slot
• Purpose: Reservation Management
• Legal basis: performance of the contract (Article 6.1.b of the GDPR)
• Retention period: the time required to process the reservation plus 3 years

Browsing Data (Automatically Collected)

• Data collected: IP address, browser type, operating system, pages visited, date and time of connection
• Purpose: to ensure the technical operation of the site, security, and traffic statistics
• Legal basis: legitimate interest (Article 6.1.f of the GDPR)
• Retention period: 1 year (technical logs)

3. Accommodations

Personal data is hosted by:

Hidora, Inc.

8 Rue des Charmilles, 1203 Geneva, Switzerland

Phone: +41 22 552 14 14

Email: [email protected]

Registration Number: CH-660.2.661.016-5

Switzerland benefits from an adequacy decision issued by the European Commission on July 26, 2000, guaranteeing a level of data protection equivalent to that of the EU.

4. Security Measures

Champagne Vollereaux SA implements the following technical and organizational measures to protect your personal data:

• Encryption of Communications via HTTPS / TLS 1.3
• Password Encryption (bcrypt / argon2)
• Daily automatic backups at the hosting provider
• Web Application Firewall (WAF)
• Security Monitoring (SIEM)
• Regular security updates
• Restricted access to data (strong authentication for the technical team)
• Access logs retained for 1 year

5. Subcontractors and Recipients

Your data may be shared with the following third-party service providers, all of whom are subject to confidentiality and security obligations in accordance with the GDPR:

Subcontractor	Role	Country
Hidora, Inc.	Accommodations	Switzerland
Zetruc	Technical Maintenance	France

6. Cookies

A cookie is a small text file stored on your device (computer, tablet, smartphone) when you visit a website. In accordance with the ePrivacy Directive and the recommendations of the CNIL, we use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the website to function (session, security, cookie preferences). They do not require your consent.

Cookie Retention Period

In accordance with the CNIL's recommendations, cookies have a maximum lifespan of 13 months. Your consent is renewed each time a cookie expires.

Managing Your Preferences

You can configure your browser to accept or reject cookies, or to alert you when a cookie is set. Check your browser settings for more information.

7. Your Rights

In accordance with the GDPR (Articles 15 through 22), you have the following rights regarding your personal data:

• Right of access (Article 15): To obtain confirmation that personal data concerning you is being processed and to receive a copy of it.
• Right to rectification (Article 16): to have inaccurate or incomplete data corrected.
• Right to erasure (Article 17): Request the deletion of your data, subject to legal retention requirements.
• Right to restriction of processing (Article 18): Request that the processing of your data be suspended in certain cases.
• Right to Object (Article 21): You have the right to object to the processing of your data, particularly for marketing purposes.
• Right to data portability (Article 20): to receive your data in a structured, commonly used format.
• The right to withdraw your consent at any time, when the processing is based on consent.
• Post-mortem directives: Set forth guidelines regarding what should happen to your data after your death (Article 85 of the Data Protection Act).

To exercise these rights:

Email us at: [email protected]

We are committed to responding withinone month of receiving your request. We may ask you to provide proof of identity if we have reasonable doubt about your identity.

8. Filing a Complaint with the CNIL

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to file a complaint with the French Data Protection Authority (CNIL):

CNIL

3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

Phone: 01 53 73 22 22

Website: www.cnil.fr

9. Personal Data Breach

In the event of a personal data breach that could pose a risk to your rights and freedoms, Champagne Vollereaux SA undertakes to:

• Notify the CNIL within 72 hours of becoming aware of the incident (Article 33 of the GDPR);
• Notify the individuals concerned as soon as possible if the breach is likely to result in a high risk to their rights and freedoms (Article 34 of the GDPR).

10. Policy Changes

Champagne Vollereaux SA reserves the right to modify this privacy policy at any time. The current version is the one available on the website. In the event of a substantial change, a notice will be posted on the website.

Last updated: August 18, 2026.

This privacy policy is an automatically generated template that incorporates Zetruc’s standard security measures, Hidora hosting, and the retention periods recommended by the CNIL. We recommend that a legal professional review it before publication.