Privacy Policy

A. DATA COLLECTED AND PROCESSED
In accordance with the provisions of Article 5 of European Regulation 2016/679, the collection and processing of site users’ data complies with the following principles:

Lawfulness, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data.

Whenever personal data is collected, the user will be informed that his or her data is being collected, and for what purpose the data is being collected.

Limited purposes: data collection and processing are carried out to meet one or more of the purposes set out in this legal notice.

Minimization of data collection and processing: only the data necessary for the proper execution of the purposes pursued by the site are collected.

Conservation of data reduced in time: data is kept for a limited period, of which the user is informed. If the retention period cannot be communicated to the user,

Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of collected data.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:

The user has expressly consented to the processing
Processing is necessary for the proper performance of a contract
Processing is required by law
processing is necessary in order to safeguard the vital interests of the data subject or of another natural person
processing may be necessary for the performance of a task carried out in the public interest or in the exercise of official authority
The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

The personal data collected on the site is as follows:

Name
phone
e-mail

This data is collected when the User carries out one of the following operations on the site:

Contact form
The data controller will store all the data collected in its computer systems under reasonable security conditions for the duration of the contact.

Data is collected and processed for the following purposes: Making contact

B. SITE HOSTING
As mentioned in the legal notice, the site is hosted by :

OVH, whose head office is located at the following address:

2 rue Kellermann – 59100 Roubaix – France

The host can be contacted on the following telephone number: 1007.

Data collected and processed by the site are exclusively hosted and processed in France.

C. DATA CONTROLLER
In accordance with the General Data Protection Regulation (GDPR), which came into force on May 25, 2018 and aims to protect the fundamental right to privacy and the protection of personal data of European Union citizens (hereinafter “the Regulation”), the person responsible for processing personal data is: Guillaume Martineau. He can be contacted as follows:

by telephone: 05 57 77 92 92 or by e-mail at contact@oenobois.com

The data controller is responsible for determining the purposes and means of processing personal data.

D. PERSONAL DATA OF MINORS
In accordance with the provisions of Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data.

If the user is a minor under the age of 15, the consent of a legal representative will be required in order for personal data to be collected and processed.

 

E. USER RIGHTS AND PROCEDURES FOR IMPLEMENTING USER RIGHTS
In accordance with the regulations governing the processing of personal data, the User has the rights listed below.

In order for the data controller to comply with the User’s request, the User is required to provide the data controller with the User’s first and last name and e-mail address.

The data controller is obliged to reply to the User within a maximum of 30 (thirty) days.

a. Right of access, rectification and oblivion
The User may access, update, modify or request the deletion of data concerning him or her.

b. Right to data portability
The User has the right to request the portability of his/her personal data held by the site to another site.

c. Right to limit and object to data processing
Finally, the User has the right to request the limitation of, or to object to, the processing of his/her data by the site, without the site being able to refuse, unless it can demonstrate the existence of legitimate and overriding reasons, which may prevail over the interests and rights and freedoms of the User.

d. Right to determine the fate of data after death
Users are reminded that they can organize what should become of their collected and processed data if they die, in accordance with law no. 2016-1321 of October 7, 2016.

 

e. Right to appeal to the competent supervisory authority
In the event that the data controller decides not to respond to the User’s request, and the User wishes to contest this decision, he/she is entitled to refer the matter to the CNIL (Commission Nationale de l’Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

F. OBLIGATIONS OF THE DATA CONTROLLER
The data controller undertakes to protect the personal data collected, not to transmit it to third parties without the user’s knowledge, and to respect the purposes for which the data was collected.

The site has an SSL certificate to guarantee that information and data transfer via the site are secure.

In addition, the data controller undertakes to notify the user of any rectification or deletion of data, unless this would entail disproportionate formalities, costs or steps.

In the event that the integrity, confidentiality or security of the User’s personal data is compromised, the data controller undertakes to inform the User by any means necessary.

 

G. COOKIES
The site may use “cookies” to process statistics and traffic information, facilitate navigation and improve service for the user’s convenience. For the use of cookies involving the storage and analysis of personal data, the user’s consent must be obtained.

The User’s consent is considered valid for a maximum period of 13 (thirteen) months. At the end of this period, the site will again request the user’s authorization to store “cookies” on his or her hard disk.

Opposition of the user to the use of cookies by the site
Users are informed that they may refuse to accept cookies by configuring their browser software.

Should the User decide to deactivate cookies, he/she will be able to continue browsing the site. However, any malfunction of the site caused by this manipulation cannot be considered to be the fault of the Site Editor.