1. Objective and Scope of the Policy

Le Domaine du Château de La Chaize places the utmost importance and care on protecting privacy and personal data, and complying with applicable legislation. 

The General Data Protection Regulation (EU) 2016/679 of April 27, 2016 (hereinafter "GDPR") states that personal data must be processed lawfully, fairly, and transparently. This privacy policy (hereinafter the "Policy") aims to provide you with simple, clear information about the processing of personal data concerning you, in the context of your navigation and operations on our website.

2. Data Controller

In the context of your activity on the websites of https://www.chateaudelachaize.fr/en_US/ , we collect and use personal data related to you, natural persons (hereinafter "Data Subject"). 

For all processing, le Domaine du Château de La Chaize, located at LA CHAIZE, 69460 ODENAS France, determines the means and purposes of the processing. Thus, we act as the data controller, within the meaning of the regulations on personal data, and in particular the GDPR.

3. What Personal Data Do We Collect and How?

By using our website and subscribing to our services, you provide us with a certain amount of information about yourself, some of which can identify you ("Personal Data"). This is the case when you browse our site, subscribe to our newsletters or contact us.

The nature and quality of the personal data collected about you vary depending on the relationships you establish with Le Domaine du Château de La Chaize, including:

• Identification Data: This includes all information that would allow us to identify you, such as your name, first name, phone number. We also collect your email address and postal address (in case of payment, the postal address will be necessary to generate an invoice). In case of subscription, proof of identity may also be requested.

• Connection Data: This includes all information needed to access your personal account, such as the password and other information necessary for authentication and account access. We also collect your IP address for maintenance and statistical purposes.

• Browsing Information: By browsing our website, you interact with it. Therefore, some information related to your browsing is collected.

• Data Collected from Third Parties: Personal data that you have agreed to share with us or on publicly accessible social networks and/or that we may collect from other data collected from our partners, based on data aggregated by several entities of the station.

4. Why Do We Collect Your Personal Data and How?

We collect your personal data for specific purposes and on different legal grounds.

• Contract Execution or Pre-Contractual Measures: Your data is processed for the following purposes:

• Managing customer relationships;

• Managing contact requests;

• Managing deliveries;

• Managing complaints;

• Managing store and online orders;

• Organization of wine tours

• Consent-Based: Your data is processed for the following purposes:

• B2C commercial prospecting (newsletter)

• Managing cookies and trackers requiring your consent;

• Legitimate Interest of le Domaine du Château de La Chaize: Your data is processed for the following purposes:

• Responding to your contact requests.

• Within the framework of the legal and regulatory obligations to which the Domaine du Château de la Chaize is subject, your Data is processed for the following purposes: 

- Fraud prevention;

5. Do We Share Your Personal Data?

Your data is intended for authorized LE DOMAINE DU CHÂTEAU DE LA CHAIZE employees responsible for managing and executing contracts and legal obligations, depending on the purposes of the collection and within the limits of their respective attributions. They may be transmitted for certain tasks related to the purposes, and within the limits of their missions and respective authorizations, to the following recipients:

• Service providers and subcontractors we use to perform a set of operations and tasks on our behalf, including:

o Vinium (Website administration)

o Brevo (Newsletters)

o Influence Society (Marketing campaigns)

o Isagri (Orders management)

o Chamonard (Orders management)

o LVD (Orders management)

• Duly authorized public authorities (judicial, control...), within the framework of our legal and regulatory obligations;

• Regulated professions (lawyers, bailiffs, etc.) Who may intervene in the implementation of guarantees, collection, or litigation.

When your data is communicated to our service providers and subcontractors, they are also asked not to use the data for purposes other than those initially provided. We make every effort to ensure that these third parties maintain the confidentiality and security of your data. In any case, only the necessary data is provided. We make every effort to ensure secure communication or transmission of your data.

 We do not sell your data.

6. Is Your Personal Data Transferred to Third Countries?

Le Domaine du Château de La Chaize strives to keep personal data in France, or at least within the European Economic Area (EEA). However, it is possible that the data we collect when you use our platform or in the context of our services may be transferred to other countries. This is the case, for example, if some of our service providers are located outside the EEA. In the event of such a transfer, we ensure that it is carried out:

• To a country ensuring an adequate level of protection, i.e., a level of protection equivalent to what European regulations require;

• Within the framework of standard contractual clauses;

• Within the framework of binding corporate rules.

7. How Long Do We Keep Your Personal Data?

We keep your personal data only for the time necessary to achieve the purpose for which we hold this data, and this, to meet your needs or fulfill our legal obligations. 

The retention periods vary depending on several factors, such as:

• The needs of le Domaine du Château de La Chaize activities;

• Contractual requirements;

• Legal obligations;

• Recommendations from control authorities.

The retention periods for your data are as follows:

- Managing customer relationships: 5 years from the end of the relationship

- Commercial prospecting: 3 years from the last contact

- Responding to your contact requests: Depending on the content of the request and a maximum of 5 years

- Sales and deliveries management: 5 years from the end of the relationship

- Managing quotes: Validated quotes : 10 years / Non-validated quotes : According to the validity period of the quote

- Managing complaints: According to the subject applicable retention period

- Managing cookies and trackers requiring your consent:  13 months - 25 months for information from cookies

- Social network traffic statistics: From data aggregation

- Customer billing: 10 years

8. How Do We Ensure the Security of Your Personal Data?

Le Domaine du Château de La Chaize is committed to protecting the personal data we collect or process against loss, destruction, alteration, unauthorized access, or disclosure. 

Thus, we implement all appropriate technical and organizational measures, depending on the nature of the data and the risks involved in their processing. These measures should ensure the security and confidentiality of your personal data. They may include practices such as limited access to personal data by authorized persons, due to their functions, pseudonymization, or encryption.

Additionally, our practices and policies and/or physical and/or logical security measures (secure access, authentication process, backup copy, software, etc.) Are regularly checked and updated if necessary.

9. What Are Your Rights?

The GDPR provides Data Subjects with rights that they can exercise. Thus, are provided:

1. Right to information: the right to have clear, precise, and complete information on the use of Personal Data by Le Domaine du Château de la Chaize. 

2. Right of access: the right to obtain a copy of the Personal Data that the Data Controller holds on the applicant.

3. Right to rectification: the right to have Personal Data rectified if they are inaccurate or obsolete and/or to complete them if they are incomplete.

4. Right to erasure / right to be forgotten: the right, under certain conditions, to have the Data erased or deleted, unless Le Domaine du Château de la Chaize has a legitimate interest in keeping it.

5. Right of opposition: the right to object to the Processing of Personal Data by le Domaine de La Chaize for reasons related to the particular situation of the applicant (under conditions).

6. Right to Withdraw Consent: the right at any time to withdraw Consent where Processing is based on Consent.

7. Right to restriction of processing: the right, under certain conditions, to request that the Processing of Personal Data be temporarily suspended.  

8. Right to Data Portability: the right to request that Personal Data be transmitted in a reusable format that allows it to be used in another database.

9. Right to Avoid Automated Decision-Making: the right of the applicant to refuse fully authorized decision-making and/or to exercise the additional safeguards offered in this regard.

10. Right to define post-mortem directives: the right for the applicant to define directives concerning the fate of Personal Data after his/her death.

Additional rights may be granted by the Local Regulations to affected Persons.

To this end, Le Domaine du Château de la Chaize has implemented a procedure for the management of individuals’ rights in accordance with the requirements of the applicable Legislation. This procedure establishes:

- The standards to be respected to ensure the transparent information of the data subject

- Legal requirements that must be met

- The authorized means of applying for each right, depending on the category of Persons concerned

- The business processes for handling these requests in accordance with the above requirements

- The stakeholders involved in these processes, their roles and responsibilities.

To exercise your rights, you may contact the Data Protection Officer (DPO): dpo@groupe-maia.com  

When you send us a request to exercise a right, you are asked to specify as far as possible the scope of the request, the type of right being exercised, the Personal Data Processing concerned, and any other useful information, in order to facilitate the examination of your request. In addition, in case of reasonable doubt, you may be asked to prove your identity.

You also have the right to complain to the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, about the way in which Le Domaine du Château de La Chaize collects and processes your data.

10. Updating of this policy

This Policy may be updated from time to time to reflect changes in the Personal Data Regulations.

Date of last update March 2025.