Privacy Policy

L'Arche des Vins ("we", "our") takes the protection of your personal data seriously. This policy explains what information we collect through www.larchedesvins.fr, what we use it for, how long we keep it, and what your rights are - in accordance with the EU General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" law.

L'Arche des Vins
3 Rue Poterne, 21200 Beaune, France
Phone: +33 (0)3 80 21 67 88
Email: contact@larchedesvins.fr

When you submit the contact form (/en/contact-us), we collect: first name, last name, email address, phone number, and your message. This data is used solely to reply to you.

Signing up to our newsletter requires your e-mail address, and optionally your first name. It is managed by our provider Mailchimp (Intuit Inc., United States) with a contractual data-transfer guarantee compliant with the GDPR.

Two forms allow this sign-up: the panel at the bottom of our pages, and the sign-up window that may appear after a few seconds on the site. In both cases, the same data (e-mail address, optional first name) is collected; data entered through the sign-up window is first stored in our site's technical database, then passed on to Mailchimp.

When you place a wine order request via /en/place-order, we collect: title, first name, last name, email address, phone number (with country code), delivery address (if applicable), invoice address (if applicable) and your basket contents. This data is used exclusively to process your request and send you a confirmation by email.

Like any website, our hosting provider may occasionally log your IP address, browser and request time for security purposes (abuse detection, intrusion prevention). These logs are purged after 30 days and are not used for profiling.

• Performance of a service or pre-contractual measure - to handle your contact request or La Cave order.
• Consent - for newsletter subscription (you can withdraw your consent at any time via the unsubscribe link in any of our emails).
• Legitimate interest - for site security (server logs).

• Contact form: as long as needed to handle your request, then up to 12 months for follow-up.
• Newsletter: as long as you remain subscribed. On unsubscribe, your email is removed from the mailing list immediately.
• La Cave orders: 5 years from the last order, for accounting and warranty reasons.
• Server logs: 30 days maximum.

Your data is accessible only to the L'Arche des Vins team and, where applicable, to our technical providers bound by contract:

• Mailchimp (Intuit Inc., United States) - newsletter management.
• Cloudflare (Cloudflare, Inc., United States) - anti-robot verification (Turnstile) of our forms, to prevent automated submissions; no personal data is shared beyond what this verification requires. Transfers outside the European Union are governed by the European Commission's standard contractual clauses and by the EU-US Data Privacy Framework, to which Cloudflare adheres.
• Website host - technical storage of the site and the data it collects.

We never sell or rent your data to third parties.

Our site uses only strictly-necessary functional cookies, which do not require prior consent under French CNIL doctrine. For details, see our Cookies Policy.

Under the GDPR you have, at any time, the following rights regarding your personal data:

• Right of access - obtain a copy of your data.
• Right to rectification - correct inaccurate information.
• Right to erasure ("right to be forgotten") - request deletion of your data.
• Right to restriction - limit how your data is used in certain cases.
• Right to object - object to certain processing operations.
• Right to data portability - retrieve your data in a reusable format.
• Right to withdraw consent at any time for the newsletter.

To exercise these rights, write to contact@larchedesvins.fr, stating the purpose of your request. We will respond within one month.

If you feel your rights are not respected, you can lodge a complaint with the French data-protection authority (CNIL): www.cnil.fr.

We implement reasonable technical and organisational measures to protect your data against loss, alteration or unauthorised access: HTTPS encryption (TLS), access restricted to authorised personnel, regular backups.

Our site is intended for adults. We do not knowingly collect data from minors under 18. If you believe a minor has submitted their data to us, please contact contact@larchedesvins.fr for removal.

This policy may be updated to reflect technical, legal or service changes. The last-updated date appears at the top of this page. For material changes, we will notify you by email if you are subscribed to our newsletter.