Privacy Policy

1. PRESENTATION OF THE DRY DRAIN COMPANY'S PRIVACY POLICY

The website https://www.fossasicca.com is published by the company Fosse Sèche and sells wine produced on its vineyard. As part of these activities, Fosse Sèche processes users' personal data when they browse or place an order on the website. The term "personal data" includes information that allows you to be directly identified as an individual, such as your name, surname, and address. Other information may also be used to identify you (a telephone number, an IP address, etc.). European Union regulations, and in particular the General Data Protection Regulation (GDPR), govern the use of your personal data by third parties.

This privacy policy aims to explain to you the personal data concerning you, used by the company FOSSE SECHE when you browse our website, how it is used and the rights you have.

2. WHAT DATA DO WE PROCESS AND FOR WHAT PURPOSES?

As part of our operations, we collect and record personal data about website users and our customers. The data we process about website users varies depending on the user type.

The data categories and purposes are described below:

• For all users (individuals) Purpose: To ensure that the website is presented to you in the most optimized way for the device you are using (smartphone, tablet, computer, etc.) and the browser you are using. Data: IP address, device used, browser used, country of connection. Legal basis:
• Your consent is given in the dedicated cookie banner. Data retention period: 6 months. Purpose: To ensure you are of legal age and can access the website and purchase products. Data: Your date of birth.

Legal basis: Your consent. Retention period: 3 years after the last contact from you or your last order.

Purpose: To send you newsletters via BREVO. Data: Your email address if you provided it. Legal basis: Your consent. Retention period: 3 years after your last contact or opening of a newsletter.

Purpose: To manage your registration request. Data: Your contact details, including: first name, last name, telephone number, email address, password.

Legal basis: Our legal and regulatory obligations. Retention period: 3 years from your registration date.

Purpose: To manage your contact request, reports or complaints on the website.

Data: Your contact details, including: first name, last name, email address and your request.

Legal basis: Our legal and regulatory obligations. Retention period: 3 years from the date of your request.

Purpose: To allow you to exercise your rights under personal data protection law. Data: Your contact information, including: first name, last name, email address, and your request to exercise your rights. Legal basis: Our legal and regulatory obligations. Retention period: In active storage: for the time required to process the request. In intermediate archiving: 3 years from the date of your request to exercise your rights.

-For all customers who have placed an order (individuals)

When you purchase a product, we collect the following personal data:

Purpose: To manage your promotional codes. Data: Your contact information provided during the ordering process and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures. Retention period: 3 years after your last order, if applicable.

Purpose: To send you a birthday greeting and a promotional code or gift. Data: Last name, first name, company name, postal address, email address, phone number, date of birth. Legal basis: Your consent. Retention period: 3 years after your last order, if applicable.

Purposes: To validate your order and payment and to keep a record of this payment in case of difficulties or disputes regarding the transaction. Data: Information concerning your payment by credit card via Shopify or by bank transfer and the amount of your order. Legal basis: The performance of pre-contractual or contractual measures. Retention period: 13 months from the debit date (for debit cards) and 15 months from the debit date (for deferred debit cards).

Purpose: To process your order. Data: Your contact information provided during the ordering process and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures. Retention period: 3 years after your last order, if applicable. Purpose: To issue an invoice to you. Data: Your contact information provided during the ordering process and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures. Retention period: 3 years after your last order, if applicable.

Purpose: To manage your order tracking (claims). Data: Your contact information provided during the ordering process and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures. Retention period: 3 years after your last order, if applicable.

Purpose: To respond to your requests to exercise your right of withdrawal and to issue a refund where applicable. Data: Your contact information provided when placing your order and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures and compliance with our legal and regulatory obligations. Retention period: 3 years after your last order, if applicable.

Purposes: To respond to your requests to exercise your right of withdrawal and to reimburse you if applicable. Data: Your contact details provided when placing your order and the details of your order, including: last name, first name, company name, postal address, email address, and telephone number. Legal basis: The performance of pre-contractual or contractual measures and compliance with our legal and regulatory obligations. Retention period: 3 years after your last order, if applicable. Purposes: To perform analyses and statistics on orders via Google Analytics. Data: Your contact details provided when placing your order and the details of your order. Legal basis: Your consent. Retention period: 3 years after your last order, if applicable.

Purpose: To send you newsletters via BREVO. Data: Your email address. Legal basis: Our legitimate interest. Retention period: 3 years after your last order or newsletter subscription.

Purpose: To share this data with a buyer or prospective buyer in the context of a capital transaction or the sale of a business. Data: Your contact information and data concerning your orders. Legal basis: Our legitimate interest in sharing this customer and prospect data. Retention period: 3 years from your last contact or your last order, as applicable.

In addition to the personal data you provide to us, we may also collect your browsing data through cookies.

3. RECIPIENTS OF YOUR PERSONAL DATA

The company FOSSE SECHE may transmit your personal data:

- To its personal data subcontractors (including its IT hosting provider or its payment service provider, carrier, etc.)

- To the administration (DGCCRF, CNIL, tax administration, …);

- To prospective buyers or the transferee of the company in the context of capital transactions, where applicable;

-To a court or council in the context of a dispute.

4. COOKIES USED ON OUR SITE

When you browse our site, we use cookies and trackers. Some are strictly necessary for the site to function, while others are optional and require your consent.

We present them below:

Cookie name: _session_id Purpose: To allow the website to store information related to your session (referrer, landing page, navigation progress). Retention period: Duration of your session. Legal basis: Our legitimate interest (necessary for the website to function).

Cookie name: Shopping Cart. Purpose: To manage your shopping cart and remember its contents. Retention period: 2 weeks. Legal basis: Performance of the contract (necessary for the operation of the website and the management of your order).

Cookie name: _shopify_visite. Purpose: To record the number of visits. Retention period: 30 minutes after the last visit. Legal basis: Your consent ( optional cookie).

Cookie name: _shopify_uniq. Purpose: Calculates the number of unique visits. Duration:

Storage time: 24 hours. Legal basis: Your consent (optional cookie).

Cookie name: Google Analytics. Purposes: To count the number of unique visitors, analyze user journeys on the site, and measure the performance of our marketing and advertising campaigns. Retention period: 13 months. Legal basis: Your consent (optional cookie).

You can accept or refuse optional cookies via the cookie management banner on your first visit to the site, or customize your choices by purpose. You can then change your preferences at any time via the dedicated banner.

5. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

FOSSE SECHE does not transfer personal data to countries outside the European Union except when Google Analytics cookies are accepted. In this case, a transfer to the United States may be implemented by Google Analytics based on the Data Privacy Framework. Furthermore, in certain cases (particularly for maintenance), data transfers outside the European Union may be implemented by BREVO (newsletter tool) based on the European Commission's standard contractual clauses.

6. YOUR RIGHTS

For any questions or complaints regarding the processing of your personal data by FOSSE SECHE, you can contact us at contact@fossasicca.com

You have the right to access, rectify, erase, restrict, and object to the processing of your personal data, or the right to data portability, by sending an email. Where the legal basis indicated in Article 2 is consent, you also have the right to withdraw your consent at any time.

When the legal basis indicated in article 2 is legitimate interest, you have the right to object to the legitimate interest of the company FOSSE SECHE.

Any person whose personal data is collected may define general or specific guidelines relating to the retention, erasure and communication of their personal data after their death.

You also have the right to lodge a complaint regarding the processing of your personal data that we carry out with the CNIL (National Commission for Information Technology and Freedoms) https://www.cnil.fr.