Charte Données Personnelles & Cookies

We respect your concerns about the protection of your privacy and your personal data. This Personal Data Guideline (the “Guideline”) sets out what information is collected and how your personal data is processed as well as the cookies collected when you browse the Site. 1.Identity and contact details of the data controller

The website https://www.mission-haut-brion.com (the “Site”) is operated by Domaine Clarence Dillon SAS, whose head office is located in France, 31 avenue Franklin D. Roosevelt 75008 PARIS, registered under the number 572 179 026 RCS Paris, (“SAS Domaine Clarence Dillon” or “we”) having the quality of data controller within the meaning of the regulations applicable to personal data, which includes the General Data  Protection Regulation  (“GDPR”) of 27 April 2016.

Finally and in the cases mentioned below, some of our partners, such as social networks, may have the quality of independent data controller: we invite you to consult their Personal Data Charter.

2.How are your personal data collected and used?

We collect your personal data directly from you when you use the Site and our services or automatically when you access the Site.

We may collect and process personal data in the following categories:

Information you provide to us:

• Your identification data such as your first name, last name, title, nationality, date of birth, postal address, country of residence, e-mail address and telephone number;
• Your preferences and interests;
• Information entered via the “Contact Us” form;
• Banking data such as your payment details.

Automatically Collected Information:

• Connection data such as your IP address, terminal specifics and connection logs.
• We may also collect personal data about you indirectly from other sources, for example if your data is transmitted to us by one of your contacts or through one of our partners such as social networks (including your use of said networks and your related advertising identifiers).
• We may also collect your personal information when you participate in advertising campaigns with which we are associated, but primarily managed by a third party. If we receive additional information about you from a third party, we will take steps to ensure that you are aware of this collection of personal data and the circumstances surrounding it.
• Finally, we may also collect information that you provide to us about other people, for example, when you decide to purchase and send products to someone. In this context, you agree to inform these third parties of the content included in this Policy. We use such information only to respond to your requests and will not send marketing communications to your contacts unless they opt-in to receive communications from us.

3.Basis and purpose of processing your personal data

We collect and process your personal data where we have a lawful basis to do so:

Consent from you (Article 6 (1) (a) GDPR), in order to:

• Use a number of cookies.
• Send you information about our offers, news and events (newsletters, invitations and other publications) as well as offers, news and events concerning other entities of the Clarence Dillon Group either by e-mail, SMS, MMS, notifications, telephone or postal mail. If you receive such information from us and no longer wish to receive it, please contact us at [email address] and request to be removed from our mailing lists, or use the unsubscribe means indicated and/or included in our communications;
• Show you targeted ads and find others like you on social networks (by uploading and comparing your personal data – for example, your email address – with information you have provided on social networks) (for users in Germany, Poland and Japan, where consent is required);
• Personalize the content of the Site;
• Conducting satisfaction surveys (for users in Germany, Italy, Spain and Australia, where consent is required).

And/or

Performing a contract with you or pre-contractual measures taken at your request (Article 6 (1) (b) GDPR), in order to:

• Create an account on the Site and then manage it;
• Book a visit;
• Any other service, current or future, related to the services we provide and listed in the Terms and Conditions of Use.

And/or

Legitimate interests (Article 6 (1) (f) GDPR):

• To ensure the security of our Site and its users and compliance with the Terms and Conditions of Use.
• To improve our products and services and the relationship with our customers by sending you, following a transaction, information on our offers, news and events (newsletters, invitations and other publications) on similar products and/or services;
• To compile statistics and better understand your preferences and interests;
• To respond to your inquiries via the “Contact Us” form or other similar forms;
• Show you targeted advertisements and find other people like you on social networks, for users in countries where your consent is not required;
• Create your profile based on your information, order history and preferences;
• Conducting satisfaction surveys, subject to consent required under your country’s regulations;
• Detect and prevent fraud.And/or

Fulfill our legal obligations (Article 6 (1) (c) GDPR), in order to:

• Handle any complaints, meet our legal obligations and ensure the defense of our interests in the event of litigation or legal action

When we ask you to provide personal data, we clearly indicate whether the information is mandatory or optional and the consequences of your refusal (for example, that we will not be able to process your request).

4.Recipients of personal data

In accordance with applicable law, we may share your personal data with :

• our affiliates, to provide you with relevant content and services
• our hosting providers;
• our support and marketing providers (customer service, ticketing service, e-mailing service, statistical analysis service);
• social networks;
• any authorities, courts or other authorized third parties, where the disclosure of personal data is required by law, regulation or court order, or where such disclosure is necessary for the protection and defense of our rights;
• all buyers in case of restructuring of SAS Domaine Clarence Dillon including the total or partial transfer of assets, merger, absorption, acquisition, split and more generally any reorganization operation.

The Site may contain links to other Internet sites for reference purposes only. Therefore, we are not responsible for the content, personal data processing or practices of third party websites. Please contact them directly for more information.

5.Transfers of personal data

We may transfer Personal Data to countries outside the European Economic Area (“EEA”), including to countries that have different data protection standards than those that apply in the EEA. Any transfer of your Data outside of the EEA will be subject to appropriate guarantees that comply with applicable data protection regulations. A copy of the applicable guarantees can be obtained upon request (by contacting us as set out below).

If you have any questions about transfers of personal data outside the European Economic Area, you can contact us at the address indicated below (section “Data Protection Officer (DPO) contact details”).

6.How long we keep your personal data

Your personal data are kept for the duration necessary to the purpose for which they were collected (see table below) unless you request their deletion to SAS Clarence Dillon (section ” Contact details of the Data Protection Officer (DPO) “), that you withdraw your consent or that there is a legal obligation to keep them for a longer period. It will be destroyed at the end of this period or within one month of any request for deletion.

The storage periods for data are listed in the table below.

7.Modification de notre Charte de données personnelles & Cookies

Nous sommes susceptibles de modifier occasionnellement la présente Charte. Nous vous encourageons à vérifier cette page régulièrement afin de vous assurer de votre accord avec toute modification.Vous serez informé des modifications soit par une mention spéciale sur notre Site (notamment via l’actualisation de la date située en haut de la présente Charte), soit par une notification par email. Nous pouvons également solliciter votre consentement si nécessaire.

8.Vos droits

Vous disposez d’un droit d’accès et de rectification de vos données, ainsi que de celui d’en demander l’effacement, de vous opposer à leur traitement et d’en obtenir la limitation ou la portabilité dans les limites prévues par la loi, sous réserve des motifs légitimes impérieux dont nous pourrions justifier pour conserver vos données personnelles.

Afin de répondre à votre demande, nous pouvons être amenés à vous demander de nous fournir un justificatif d’identité. Nous pouvons également vous demander de nous communiquer des informations ou justificatifs complémentaires. Nous nous efforcerons de répondre à votre demande dans les meilleurs délais.

Vous pouvez à tout moment demander à ne plus recevoir nos communications relatives à nos offres, actualités et évènements en utilisant le lien hypertexte prévu à cet effet dans chaque email qui vous est adressé ou en envoyant un courrier ou mail aux adresses ci-dessous.

Vous disposez également du droit de nous donner des instructions spécifiques concernant le sort de vos données après votre décès.

9.Protection des personnes n’ayant pas atteint l’âge légal de consommation d’alcool

L’accès au Site étant encadré par les Conditions Générales d’Utilisation du Site, SAS Domaine Clarence Dillon ne collecte aucune information ou donnée personnelle relative aux personnes n’ayant pas atteint l’âge légal de consommation et/ou d’achat d’alcool selon la législation en vigueur dans leur lieu de résidence.

10.Coordonnées du délégué à la protection des données (DPO) et droit d’introduire une réclamation

Conformément à la loi dite « Informatique et Libertés » (art. 34 de la loi de la loi n° 48-87 du 6 janvier 1978), l’utilisateur dispose d’un droit d’information, de modification et de suppression des données nominatives collectées le concernant. Pour ce faire, l’utilisateur contacte le responsable du traitement des données qui a été nommé et est joignable à :

Par courriel à l’adresse suivante : accueil@domaineclarencedillon.com

Ou

Par courrier à l’adresse suivante : Domaine Clarence Dillon 31, avenue Franklin Roosevelt 75008 PARIS

La modification interviendra dans un mois à compter de la réception de la demande de l’utilisateur.

Vous disposez également du droit de saisir la Commission Nationale de l’Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, de toute réclamation se rapportant à la manière dont nous collectons et traitons vos Données