Data Controller
VINOM SAS, 13 boulevard des Batignolles, 75008 Paris, RCS Paris 530 495 191, is responsible for the data processing carried out from the directcave.fr website. Contact: [contact@directcave.fr] — 01 85 56 84 50.
Data collected, purposes and legal bases
• Order management, billing and delivery — identity, addresses, contact details, purchase history. Legal basis: performance of the contract.
• Customer account creation and management — login details and contact details. Legal basis: performance of the contract.
• Verification of the buyer's age — proof of age or date of birth. Legal basis: legal obligation.
• Commercial prospecting and newsletter — email address. Legal basis: consent, which can be withdrawn at any time.
• Audience measurement and website improvement — browsing data. Legal basis: consent, or legitimate interest for exempt measurements.
• Payment fraud prevention — order and transaction data. Legal basis: legitimate interest.
• Accounting and tax obligations — billing data. Legal basis: legal obligation.
Recipients
The data is intended for the Seller's internal departments and its subcontractors involved in the fulfillment of orders: the logistics provider Transvins, carriers, payment service providers, the o2switch hosting provider, the email service provider and the website technical operations provider. No data is transferred or sold to third parties for commercial purposes.
Retention periods
• Order and billing data: ten years from the end of the financial year, pursuant to accounting obligations.
• Customer account data: duration of the business relationship, then three years from the last contact.
• Prospecting data: three years from the last contact or until consent is withdrawn.
• Trackers and browsing data: a maximum of thirteen months.
Your rights
In accordance with Regulation (EU) 2016/679 and the French Data Protection Act, everyone has the right to access, rectify, erase, restrict processing, object to processing and exercise data portability, as well as the right to define instructions regarding the fate of their data after death. These rights may be exercised by contacting [contact@directcave.fr], upon proof of identity. A complaint may also be filed with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.
Data security and location
The Seller implements appropriate technical and organizational measures to protect data against any loss, alteration or unauthorized access. The data is hosted in France, within the European Union. Any potential transfer outside the European Union would be subject to the appropriate safeguards provided for by the GDPR.