PRIVACY POLICY
This privacy policy (“Policy”) is intended to inform you about how MINUTY collects and processes your personal data when you use our online services, subscribe to our newsletter on our website or during your visits to the cellar, when you create an account on our website or when you place an order online.
This Policy also aims to inform you of your rights regarding your personal data. It is therefore important that you read this Policy and any other specific information that we may provide to you from time to time when we collect and process personal data about you.
- The data controller
The company MINUTY SAS, a simplified joint-stock company with a capital of 273,000 euros, registered in the Fréjus Trade and Companies Register under number 597 180 488, whose registered office is located at 2491 route de la Berle - 83580 GASSIN, hereinafter referred to as "MINUTY", is the data controller within the meaning of the regulations applicable to personal data and in particular Law No. 78-17 of 6 January 1978 known as the "Data Protection Act" and EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR").
In this Policy, the terms “we”, “us”, “our” refer to MINUTY.
- The origins of the collection of your personal data
The sources of collection of your personal data are:
- The contact form that you can fill out when you visit our cellar;
- The contact form that you can fill out online in order to receive our newsletter;
- Creating your online account;
- Purchases you make online on our site.
- The personal data we collect
As part of the provision of its services, MINUTY collects and processes the following categories of personal data about you:
- Identification data, such as your first name, last name and password;
- Login data, when you log into your account;
- Contact details (billing and delivery, if different), such as your email and postal addresses and your telephone number;
- Data relating to transactions and order tracking, when you make purchases online (information relating to orders, description of products purchased, quantities, amount, payment methods, possible application of discounts or promotional offers).
This data is collected depending on the MINUTY services you use and for the purposes described in article 4 below.
Where we need to collect personal data from you (either to comply with a legal obligation or under a contract we have or intend to enter into with you, including online buying and selling) and you fail to provide that personal data when requested, we may not be able to provide you with the services you request. Mandatory data collection is indicated by an asterisk at the time of collection.
- The purposes of processing personal data
The purpose of the processing corresponds to the objective pursued by the use of your personal data. MINUTY collects and processes your personal data in order to:
- Allow you to create an account on our site, access your account and manage it;
- Communicate our newsletter to you;
- Process and manage the orders you place online;
- Respond to your requests to exercise your rights.
- The legal bases that legitimize the processing of your personal data
We collect and process your personal data when:
- The processing of your personal data is necessary for the execution of the contractual relationship that binds us to you, such as in the context of the management of orders that you make online;
- The processing is necessary for compliance with a legal obligation to which we are subject, for example in the context of product recall or withdrawal procedures or for the accounting processing of your orders;
- The processing is necessary for the pursuit of our legitimate interests, in particular when we send you commercial prospecting emails concerning products identical or similar to those you have previously ordered online;
- You have given your consent, in particular for sending our newsletter.
- The recipients of your personal data
As part of the provision of our services, we are required to communicate your personal data internally to a limited number of people and services authorized to have knowledge of it and transmit or give access to your personal data for technical, logistical or commercial reasons to our hosting, development and maintenance provider of our site, our service provider in charge of sending the newsletter and commercial prospecting, our service provider in charge of the development and maintenance of the customer relationship management platform as well as to payment service partners and carriers in charge of the delivery of orders placed online.
MINUTY may also be required to communicate your personal data to third parties when such communication is required by law, a regulatory provision or a judicial decision, or if this communication is necessary to ensure the protection and defense of its rights.
- Data transfers outside the EEA
MINUTY ensures that no transfer of personal data to a country located outside the territory of the European Economic Area (EEA) is carried out either by it or by its partners or subcontractors in the absence of an adequacy decision issued by the European Commission or the implementation of appropriate and adequate guarantees to ensure the security and protection of your personal data, such as the standard contractual clauses of the European Commission.
- The retention period of your personal data
Your personal data is kept by MINUTY for the time necessary to achieve the purposes for which it was collected.
To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk from unauthorized use or disclosure of the personal data, the purposes for which we process your personal data, and our legal obligations. Please note that with regard to sending commercial prospecting emails, MINUTY will only retain your personal data for a period of 3 years after your last interaction with MINUTY.
To meet our tax and accounting obligations, we retain transactional personal data (and associated identification and contact data to the extent required for those purposes) for the statutory limitation period after an individual ceases to be a customer.
During the retention period of your personal data, MINUTY implements all necessary and appropriate means to ensure the confidentiality and security of your personal data, against any risk of deletion, alteration of this data, or access by unauthorized third parties.
- Your rights
Depending on your personal situation, you have the rights listed below in application of the GDPR and the Data Protection Act.
Right of access : You have the right to obtain confirmation as to whether we are processing personal data about you. If so, you have the right to access the personal data we hold about you. This gives you the right to receive a copy of your personal data and certain information about the processing of your personal data.
Right to rectification : You have the right to ask us to correct your personal data if it is inaccurate or outdated. If you have created an online profile, you can correct your information at any time by visiting your account.
Right to erasure : In certain circumstances, you have the right to request the erasure of your personal data. Please note that your personal data can only be erased when it is no longer necessary for the purposes for which it was collected and we have no other legal basis to process it.
Right to restriction : You may request that the use of your personal data be restricted in certain circumstances, including where the data is not or no longer necessary, or where you have contested its accuracy, for a period of time that we can verify its accuracy.
Right to portability : We will provide you, or a third party you have chosen, with your personal data in a structured, commonly used and machine-readable format. Please note that this right only applies to your personal data that we process by automated means (i) with your consent or (ii) in connection with the performance of a contract with you.
Right to object : When we process your personal data based on a legitimate interest, you can object to this processing where your particular situation justifies it. In some cases, we may not comply with your request if we demonstrate that the legitimate interest we pursue prevails. You also have the right to object to the processing of your personal data for direct marketing purposes, at any time and without justification.
Withdrawing your consent : If the processing of your personal data is based on your consent, you have the right to withdraw it at any time. In particular, if you wish to unsubscribe from any mailing list (newsletters, commercial prospecting), you can do so at any time by clicking on the link at the bottom of all our communications.
Fate of data after death : You can also formulate directives relating to the retention, deletion and communication of your personal data after your death.
You will not have to pay a fee to access your personal data or to exercise any of the other rights mentioned above. However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive, or excessive. We may also refuse to comply with your request in these circumstances.
We may ask you for specific information to help us confirm your identity and thus respond to your request to exercise one of your rights.
We aim to respond to all legitimate requests within one month. Occasionally, it may take longer than one month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated on the progress of your request.
- Contact us
If you have any questions about how we use your personal data or wish to exercise any of the above rights, you can contact us by email or post:
- MINUTY SAS, 2491 Route de la Berle - 83580 Gassin
You also have the option of filing a complaint regarding the processing of your personal data with the personal data protection authority in France (CNIL: www.cnil.fr).
- Security measures
We are committed to taking the necessary and appropriate measures to ensure the protection, confidentiality and security of your personal data.
To do this, we have implemented technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, alteration or loss, misuse and unauthorized access, modification or disclosure.
In addition, organizational measures (such as authorization management systems for data access, etc.) help to preserve the confidentiality of your personal data. Thus, access to your personal data is strictly limited to our expressly authorized staff, and to our partners and subcontractors, themselves acting according to our instructions and in compliance with our contractual provisions and applicable legislation.
- Policy Updates
We may revise the Policy from time to time. We ensure that the most recent version is posted on the Site. When significant changes are made to the Policy, we will notify you in advance by posting an online notice or sending you an email. Changes will take effect at least one month after their publication or prior communication.
The Policy was updated as of March 31, 2022.
