Privacy Policy

LA CAVE DU PALAIS

PRIVACY POLICY

reading time: 5 min

Hello. We are La Cave du Palais.

We are a local wine shop and we sell and ship our wines, spirits, and beers worldwide. Our shop is located at 7 place de la Libération in Pau (64000), France. We are registered with the Pau Commercial Register under number 52403230700018.

Here's how we protect your data and respect your privacy.

OUR ROLE IN YOUR PRIVACY

If you are simply visiting our website or wish to place an order, this policy applies to you and you are deemed to have accepted it without reservation.

Whether you are a visitor to our site or make a purchase in accordance with our General Terms and Conditions of Sale, we act as the "data controller" for personal data.

This means we determine how and why your data is processed.

WHAT YOU NEED TO DO

* read this privacy policy and, if you want details on the privacy policies of our subcontractors:

* Shopify, which is our online store creation platform and host: https://www.shopify.com/legal/privacy

* PayPlug, which is the online payment platform we use: https://www.payplug.com/fr/politique-de-confidentialite

* Mail Boxes Etc, which is one of our carriers:

https://www.mbefrance.fr/fr ("privacy policy" tab at the bottom of the homepage)

* La Poste Colissimo, which is one of our carriers:

https://www.laposte.fr/donnees-personnelles-et-cookies#5

* if you provide us with personal information about other people, or if other people give us your information (for example, someone buys a gift voucher of which you will be the beneficiary), we will only use this information for the specific reason for which it was provided to us. By submitting the information, you confirm that you have the right to authorize us to process it on your behalf in accordance with this privacy policy.

WHEN AND HOW WE COLLECT DATA

As soon as you interact with us, we collect data.

Depending on the case:

- you provide us with data

or

- data about you is collected automatically.

Here's when and how we do it:

	Data you provide	Data we collect
You browse any page of our site		X
We call you	X
You contact us directly at our email address	X
You contact us via our website	X	X
You make a purchase on our website	X	X
You receive emails from us	X	X

TYPES OF DATA WE COLLECT

Contact details

Your first and last name, phone number, email address, postal address.

If you place an order to be delivered to a third party, you will need to provide the following additional information: first and last name, email address, postal address of this third party.

Data that identifies you

Including your IP address, login information, browser type and version, time zone setting, browser plug-in types, geolocation information from where you might be, operating system and version.

Data on how you use our website

Your URL clickstreams (the path you take on our site), pages viewed, page response times, download errors, duration of your stay on our pages, frequency, and other actions.

What about sensitive data?

We do not collect any "sensitive data" about you (such as racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, health data, etc.).

What about children's data?

Our website is intended for use only by individuals aged 18 or older, and we do not knowingly collect any personal data from anyone under the age of 16.

HOW AND WHY WE COLLECT YOUR DATA

If you are a European citizen, the General Data Protection Regulation (GDPR) requires us to minimize the collection and use of your data. We collect your data on a legal basis that we must determine.

Here are the reasons why we process your data:

Operating our website

Connection and authentication

Legal basis: legitimate interest

Improving our website

Testing features, managing landing pages, data analysis and research

Legal basis: legitimate interest

Processing information necessary for delivery

Processing the information you provide to us to deliver your order.

Legal basis: consent

For marketing purposes (with your consent)

Sending you emails and messages, including about new features, products and services, and content.

Legal basis: consent

Here's what each of these "legal bases" means:

Consent

You have clearly consented to us processing your personal data for a specific purpose.

You can change your mind!

If you have already given your consent to the processing of your data, you can freely withdraw this consent at any time. You can do so by sending us an email at cavedupalais@gmail.com.

If you withdraw your consent and if we have no other legal basis for processing your information, we will cease processing your personal data. If we have another legal basis for processing your information, we may continue to do so subject to your legal rights.

Legitimate interests

The processing of your data is necessary for our legitimate interests or the legitimate interests of a third party. These legitimate interests are:

• obtaining information about your behavior on our website or in our application
• providing, developing, and improving our site
• allowing us to improve, personalize, or modify our communications
• strengthening data security

In each case, these legitimate interests are only valid if they do not outweigh your rights and interests.

YOUR PRIVACY CHOICES AND RIGHTS

You can choose not to provide us with personal data

In this case, you can continue to use our website and browse its pages, but we will not be able to process any orders.

You can disable cookies in your browser by changing its settings

Via your browser settings, you can:

- block cookies;

- delete cookies.

If you disable cookies, you can continue to use our website and browse its pages, but some features may not work effectively.

For more details, please refer to our cookie policy.

You have the right to access the information we hold about you

This includes the right to ask us for additional information on:

* the categories of data we process

* the purposes of data processing

* the categories of third parties to whom the data may be disclosed

* how long the data will be stored (or the criteria used to determine this period)

* your other rights regarding our use of data.

We will provide you with the information within one month of your request, unless this would prejudice the rights and freedoms of others (for example, another person's privacy or intellectual property rights). We will inform you if we cannot meet your request for this reason.

You have the right to have us correct any inaccurate personal data about you

You have the right to file a complaint about our use of your data

First, let us know your intention so we have the opportunity to address your concerns. If we are unable to do so, you can lodge a complaint with the competent data protection authority in your country of residence.

In France: jurisdiction of the Commission Nationale de l'Informatique et des Libertés (CNIL)

To contact the CNIL:

https://www.cnil.fr/fr/contacter-la-cnil-standard-et-permanences-telephoniques

To lodge a complaint:

https://www.cnil.fr/fr/plaintes

For other European countries: here is the link to find the contact details of your country's data protection authority:

https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

In the United Kingdom: jurisdiction of the Information Commissioner’s Office (ICO)

https://ico.org.uk/make-a-complaint/

HOW SECURE IS THE DATA WE COLLECT?

We have physical, electronic, and managerial procedures to safeguard and secure the information we collect.

And remember:

* you provide personal data at your own risk: unfortunately, no transmission is 100% guaranteed secure

* you are responsible for your username and password: keep them secret and safe!

* if you believe your privacy has been violated, please contact us immediately: cavedupalais@gmail.com

WHERE DO WE STORE THE DATA?

The personal data we collect is processed at our shop in Pau and in the processing facilities operated by the third parties identified in the "Third parties who process your data" section below.

By submitting your personal data, you agree to this transfer, storage, or processing by us and our subcontractors.

HOW LONG DO WE RETAIN YOUR DATA?

We will cease actively using any identifiable personal information about you 3 years after our last contact.

WHO ARE THE RECIPIENTS OF YOUR DATA?

- employees of La Cave du Palais

- third parties to whom we transfer your data, in accordance with the "To whom do we transfer your data?" section below

DO WE MAKE AUTOMATED DECISIONS?

Yes, for sending loyalty messages. Every 5 checkouts trigger an automatic email that you have authorized for use.

TO WHOM DO WE TRANSFER YOUR DATA?

Your data is transferred or shared only when strictly necessary and in accordance with the guarantees and best practices detailed in this Privacy Policy. Here are the details of the data collected or shared with the third parties we have chosen:

	DATA COLLECTED OR SHARED	PURPOSE	PROCESSING LOCATION	TRANSFER LOCATION
INFRASTRUCTURE SHOPIFY	* Contact details * Data that identifies you	This is a website creation platform and a web hosting provider	Us	European Union Canada United States
ANALYTICS GOOGLE ANALYTICS 4	* Contact details * Data that identifies you * How to use our site * Cookies	Google Analytics is a web analytics service: we use it to analyze and track your use of our site.	Us	United States
DELIVERY SERVICE LA POSTE – COLISSIMO	* Contact details * Data that identifies you	Shipping of product orders placed on our website	Us	European Union and EEA + Morocco, India, Senegal, Tunisia, Mauritius, United States
DELIVERY SERVICE MAIL BOXES ETC	* Contact details * Data that identifies you	Shipping of product orders placed on our website	Us	European Union + third countries (not specified by Mail Boxes Etc)
ONLINE PAYMENT PAYPLUG	Your personal data (contact details), payment method information, merchant name and location, purchase amount, purchase date	Receiving payment for your orders	We do not collect or store any transaction data.	European Union + third countries (not specified by PayPlug)
ONLINE PAYMENT SHOPIFY PAYMENTS	Your personal data (contact details), information about your payment method, the merchant's name and location, the purchase amount, the purchase date	Receive payment for your orders	Shopify, Us	European Union Canada United States