DEFINITION AND NATURE OF PERSONAL DATA

When using the website chateaulaverdines.com (hereinafter: the “Site”), we may ask you to provide us with personal data concerning you in order to use the services we offer (hereinafter, the “Services”).

In the context of this charter, the term “personal data” refers to all data that can identify an individual, including your name, surname, pseudonym, photograph, email, date of birth, data related to your transactions on the site, details of your subscriptions, as well as any other information you choose to provide us about yourself.

PURPOSE OF THIS CHARTER

The purpose of this charter is to inform you about the methods we implement to collect your personal data, in strict compliance with your rights.

In this regard, we inform you that we comply, in the collection and management of your personal data, with the law n° 78-17 of January 6, 1978, relating to data processing, files, and freedoms, in its current version (hereinafter: the “Data Protection Act”), as well as the regulation (EU) 2016/679 of April 27, 2016, relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter: the “GDPR”).

IDENTITY OF THE DATA CONTROLLER

The data controller of your personal data is the entity SAS Château Laverdines – Siret: 90502093900013 – President: MAURI François – VAT number: FR43905020939 (hereinafter: “We”).

COLLECTION OF PERSONAL DATA

The legal basis for our collection of your personal data is as follows:

• Legitimate interest when you voluntarily provide personal data during your visit to our site, the data being collected to better respond to your requests for information about our Services.
• Your consent concerning cookies described in our Cookie policy.
• This collection is necessary to execute the contract concluded when you use our services on our site.

Your personal data is collected to meet one or more of the following purposes:

• Manage your access to certain services available on the site and their use,
• Create a file of registered members, users, clients, and prospects,
• Send newsletters, solicitations, and promotional messages. If you do not wish to receive these, we give you the option to express your refusal during the collection of your data;
• Make connection proposals with other users of the Services. If you do not wish this, we give you the option to express your refusal during the collection of your data;
• Compile commercial and traffic statistics for our services,
• Organize contests, lotteries, and all promotional operations excluding online gambling and betting operations subject to the approval of the Online Gaming Regulatory Authority,
• Manage the management of reviews of people on products, services, or content,
• Personalize responses to your requests for information,
• Comply with our legal and regulatory obligations.
• Respond to your requests within the framework of exercising your rights under the GDPR.

We inform you, at the time of collecting your personal data, whether certain data must be provided mandatorily or whether they are optional. Mandatory data is necessary for the operation of the Services. Regarding optional data, you are entirely free to provide them or not.

We also inform you that we may collect your data indirectly either from event organizers to which you participate and allow you to benefit from our Services or from other users of our Services.

In this regard, you are informed that we reuse your personal data stored in the address book of another user of our Services who has expressly authorized us to access their contact list.

RECIPIENTS OF THE COLLECTED DATA

The following will have access to your personal data:

• The administrators of our site, specifically the control services;
• Our subcontractors: hosting provider, company OVH, 2 rue Kellermann – BP 80157 59053 ROUBAIX CEDEX 1.

Public bodies may also be recipients of your personal data, exclusively to meet our legal obligations, judicial auxiliaries, court officers, and debt collection organizations.

TRANSFER OF PERSONAL DATA

Your personal data may be subject to transfers, rentals, or exchanges for the benefit of third parties, only if you have given your prior and express consent to this effect.

Furthermore, we inform you that we may share or disclose your data to third parties in anonymized form, i.e., without you being identifiable, within the framework of statistical reports (number of users, average number of user contacts, percentage of cards sent, number of active users, for example).

DURATION OF PERSONAL DATA RETENTION

• Regarding data relating to the management of clients and prospects:

Your personal data is kept for the duration strictly necessary for the management of our commercial relationship with you.
Concerning possible prospecting operations intended for you, your data may be kept for a period of three (3) years from the end of the commercial relationship.
Data allowing the establishment of proof of a right or a contract, which must be kept under a legal obligation, will be kept for the duration provided by the applicable law.

Personal data relating to a prospect, non-client, may be kept for a period of three (3) years from their collection or the last contact from the prospect.

At the end of this three (3) year period, we may contact you again to see if you wish to continue receiving commercial solicitations.

• Regarding the management of opposition lists to receive prospecting:

Information enabling the consideration of your right of opposition is kept for a minimum of three (3) years from the exercise of the right of opposition.

• Regarding the management of your requests to exercise your rights under the GDPR:

Information enabling the management of your requests to exercise rights under the GDPR will be kept for two (2) years from the request.

SECURITY

We inform you that we take all necessary precautions, appropriate organizational and technical measures to preserve the security, integrity, and confidentiality of your personal data, particularly to prevent them from being distorted, damaged, or accessed by unauthorized third parties.

In this regard, we inform you that we comply with the security measures put in place by our data hosting provider, the company OVH, whose measures are accessible
in this document.

HOSTING

We inform you that your data is stored and retained for the duration of their conservation on the servers of the company OVH located in France within the European Union.

Your data will not be subject to any transfer outside the European Union in the context of using the services we offer you.

COOKIES

For more information on cookies, we refer you to our Cookie Policy.

ACCESS, RECTIFICATION, AND DELETION OF YOUR PERSONAL DATA

In accordance with the law n° 78-17 of January 6, 1978, relating to data processing, files, and freedoms, and the GDPR, you have the right to obtain communication and, if necessary, rectification or deletion of data concerning you. You can contact us at:

Email address: contact@chateaulaverdines.com
Postal address: 45 Ter Quai du Génie – 95220 HERBLAY SUR SEINE

It is reminded to persons whose data is collected on the basis of our legitimate interest, as mentioned in the article “Collection of personal data,” that they can oppose the processing of data concerning them at any time. However, we may continue the processing if there are legitimate reasons for the processing that prevail over your rights and freedoms or if the processing is necessary for the establishment, exercise, or defense of our legal claims.

RIGHT TO DEFINE DIRECTIVES FOR THE PROCESSING OF DATA AFTER YOUR DEATH

You have the right to define directives regarding the conservation, deletion, and communication of your personal data after your death.

These directives may be general, in which case they cover all personal data concerning you. They must then be registered with a trusted third party certified by the CNIL.

Directives may also be specific to data processed by our company. In this case, they should be sent to us at the following contacts:
Email address: contact@chateaulaverdines.com
Postal address: 45 Ter Quai du Génie – 95220 HERBLAY SUR SEINE

By sending us such directives, you expressly consent to these directives being retained, transmitted, and executed according to the procedures provided herein.

You may designate a person responsible for their execution in your directives. This person will then have the authority, upon your death, to take note of these directives and request their implementation from us. In the absence of designation, your heirs will have the authority to take note of your directives upon your death and request their implementation from us.

You can modify or revoke your directives at any time by writing to us at the above contact details.

PORTABILITY OF YOUR PERSONAL DATA

You have the right to the portability of personal data that you have provided to us, understood as data that you have actively and consciously declared in the context of accessing and using the Services, as well as data generated by your activity in the use of the Services. We remind you that this right does not apply to data collected and processed on a legal basis other than consent or the execution of the contract binding us.

This right can be exercised free of charge, at any time, and particularly when closing your account on the site, to retrieve and retain your personal data.

In this context, we will send you your personal data by any means deemed useful, in an open, standard, commonly used, and machine-readable format, in accordance with the state of the art.

FILING A COMPLAINT WITH A SUPERVISORY AUTHORITY

You are also informed that you have the right to file a complaint with a competent supervisory authority (the National Commission for Informatics and Liberties for France) in the member state where your habitual residence is located, your place of work, or the place where the violation of your rights would have occurred if you consider that the processing of your personal data under this charter constitutes a violation of applicable laws.

This remedy can be exercised without prejudice to any other administrative or judicial remedy. Indeed, you also have the right to an effective administrative or judicial remedy if you consider that the processing of your personal data under this charter constitutes a violation of applicable laws.

LIMITATION OF PROCESSING

You have the right to obtain the restriction of the processing of your personal data in the following cases:

• During the period of verification that we implement when you dispute the accuracy of your personal data,
• When the processing of this data is unlawful, and you prefer to limit its processing rather than delete your data,
• When we no longer need your personal data, but you wish to retain it to exercise your rights,
• During the period of verification of legitimate grounds when you have objected to the processing of your personal data.

MODIFICATIONS

We reserve the right, at our sole discretion, to modify this charter at any time, in whole or in part. These changes will take effect upon the publication of the new charter. Your continued use of the site following the implementation of these changes will signify your acknowledgment and acceptance of the new charter. If the new charter does not suit you, you must stop accessing the site.

EFFECTIVE DATE

This charter has been in effect since December 9, 2021.