PRIVACY POLICY

1. General information

You will find below all our commitments in terms of confidentiality, security and protection of the personal information you provide to us. With the implementation of the RGPD (General Data Protection Regulation), your data is better protected.

If you have any questions regarding our privacy policy, as well as the General Data Protection Regulation (GDPR), please do not hesitate to contact us info@garniac.fr.

Maison de Garniac attaches the utmost importance and care to the protection of privacy and personal data, and to compliance with the relevant legal provisions.

The purpose of this privacy policy is to provide simple, clear and complete information to people about the processing of personal data concerning you.

Maison de Garniac is committed to the following essential principles:

– We only collect data that is strictly necessary for the purpose for which it is to be used.

– You retain control of your personal data

– Your data will be handled transparently, confidentially and securely.

Under this Privacy Policy, Maison de Garniac, acting as data controller, informs you of the personal data we collect when you visit our website or use our services, the purposes for which we collect it and how we use it.

By personal data, we mean any information about you, in particular your name and contact details such as your home address, telephone number or e-mail address.

Please take the time to read this Privacy Policy carefully, it is very important that you fully understand how we process your personal data and how we protect your privacy.

2. Definitions

The terms mentioned below have the following meanings in this Privacy Policy:

– PERSON RESPONSIBLE FOR PROCESSING: refers to the entity that determines the means and purposes of personal data processing.

– SUBCONTRACTOR: refers to the person processing personal data on behalf of the DATA PROCESSOR, who acts under the authority of and on the instructions of the DATA PROCESSOR.

– PROSPECT / CUSTOMER: refers to any person who provides personal data by filling in a collection form and who uses the services offered.

– USER: refers to any person accessing and browsing the site as a simple Internet user.

– PERSON CONCERNED: any identified or identifiable individual whose personal data is processed.

• PERSONAL DATA: any information relating to an identified or identifiable natural person.

3. Datacollected

3-1. Cookies

When Users browse the website, we automatically collect and store some of your computer data in our server logs and in cookies, which are small files that we place on your computer when you visit our site. This data is processed in accordance with the purpose for which it was collected.

Legal basis for processing: the legal basis for processing is the consent of the data subject (Cf. articles 4 and 7 of the European Data Protection Regulation).

The provision of your personal data is not required if you only wish to consult our website. This means that you can refuse to accept cookies. However, refusing cookies may disrupt your browsing experience on our site, in particular by preventing you from accessing certain parts of it.

Categories of data: This data does not enable us to identify you directly. However, it does include data relating to your browsing on our site, such as the pages you access, the date and time you access these pages, your search queries, information about your device (hardware model, operating system version, unique device identifier, Internet protocol address, hardware settings, browser type, browser language), the date and time of your request and the referring URL.

Data recipients :

– Authorized company personnel.

– Companies, organizations, public authorities or persons outside Maison de Garniac: OVH (computer hosting company), Google Analytics (data analysis services), Google Ads, Meta Ads (advertising services), Brevo (electronic communication tool).

Please note that some subcontractors are located outside the European Union.

Data retention period :

Information stored in your terminal (e.g. cookies) or any other element used to identify you for audience statistics purposes is not kept beyond a period of 6 months.

After this period, the raw traffic data associated with an identifier is deleted.

In order to ensure the smooth running and ongoing improvement of the site and its functionalities, the raw traffic data associated with an identifier is kept for a period of thirteen (13) months. After this period, it is deleted.

This site uses the following cookies:

Session cookies: These are cookies required to identify the User in order to access an online service requiring authentication.

The session information thus obtained by cookies is recorded on the User’s terminal equipment and on the server hosting the Site, which is located in France.

These cookies are kept for 13 months from the last connection to an online service requiring authentication.

Refusal of session cookies will make access to services requiring Users to log in unavailable.

Audience cookies: These are cookies used to compile audience statistics for our site.

These cookies are kept for 13 months from the last connection to an online service requiring authentication.

Disable cookies : Need help disabling cookies? Go to our legal notice in the dedicated paragraph.

3-2. Data collected in the contact form

Legal basis for processing: the legal basis for processing is the consent of the data subject (Cf. articles 4 and 7 of the European Data Protection Regulation).

Purpose of processing: to respond to the content of the request.

Data categories :

– E-mail address,

– Subject of request,

– Application contents.

Data recipients :

– Authorized company personnel.

• Companies, organizations, public authorities or persons outside Maison de Garniac (listed above).

Data retention period : One year (1 year) if the response is not acted upon; otherwise the duration will be specified in the contracts signed with the company.

3-3. Data collected in the customer account creation form

Legal basis for processing: the legal basis for processing is the performance of pre-contractual measures and the legitimate interest of the data controller (Cf. article 6 of the European Data Protection Regulation).

Purpose of processing: Data is collected in order to create your customer account and manage your orders and deliveries, and to track your customer account.

Data categories :

– Civility,

– Full name,

– E-mail address,

– Password,

– Date of birth

Data recipients :

– Authorized company personnel.

• Companies, organizations, public authorities or persons outside Maison de Garniac :
• OVH (IT hosting service), delivery services (Groupe La Poste, Chronopost, UPS, DHL or other carrier).

Data retention period : The data entered in this form will be kept for as long as the request to delete your account has not been carried out, or for a maximum of 3 years after the end of the commercial relationship (i.e. after the last use of the customer account).

3-4. Data collected in the order/delivery form

Legal basis for processing: the legal basis for processing is the consent of the data subject (Cf. article 6 of the European Data Protection Regulation).

Purpose of processing: Data is collected in order to manage your orders and deliveries and to monitor your customer account.

Data categories :

– Civility,

– Full name,

– E-mail address,

– Phone number,

– Delivery address.

Data recipients :

– Authorized company personnel.

• The companies, organizations, public authorities or persons outside Maison de Garniac mentioned above.

Data retention period: The data entered in this form will be kept for as long as the request to delete your account has not been carried out, or for a maximum of 3 years after the end of the commercial relationship (i.e. after the last use of the customer account).

3-5. Data collected in the Newsletter form

Legal basis for processing: the legal basis for processing is the consent of the data subject (Cf. article 6 of the European Data Protection Regulation).

Purpose of processing: The data is collected in order to send the data subject the latest articles and advertising from the company on a weekly or monthly basis, depending on current arrivals and/or offers.

Data categories :

• E-mail address,
• Phone number,
• Full name.

Data recipients :

– Authorized company personnel.

– Companies, organizations, public authorities or external persons Maison de Garniac: Brevo (emailing tool), OVH (hosting service).

Data retention period: your data is kept for a period of 3 years. You can unsubscribe at any time by clicking on the unsubscribe link at the bottom of our communication emails or by sending your request to info@garniac.fr.

4. Retention period of personal data

Maison de Garniac undertakes to ensure that any data collected is kept in a form that enables you to be identified for no longer than is necessary for the purposes for which the data is collected and processed.

However, data may be processed for the purpose of proving a right or contract. Data may also be stored for the purpose of complying with a legal obligation or kept in files in accordance with applicable laws and regulations.

Unless otherwise stipulated by data retention legislation.

For the management of our commercial relationship with you and customer follow-up, your data is kept for 3 years from the end of the commercial relationship if you are a customer.

5. Recipients of personal data

Your data will not be communicated, exchanged, sold or rented to anyone other than those mentioned above.

For recipients located in countries outside the European Community, the level of data protection in these countries is not comparable to the level of data protection within the European Union.

6. Personal data protection

Maison de Garniac undertakes to implement all technical and organizational measures to ensure the security of its processing of personal data and the confidentiality of your data, in accordance with the French Data Protection Act (Loi informatique et Libertés) and the European Data Protection Regulation (RGPD) and Law no. 2018-133 of February 26, 2018 “bearing various provisions for adaptation to European Union law in the field of security”.

In this respect, Maison de Garniac takes the necessary precautions, with regard to the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent unauthorized third parties from accessing it (physical protection of the premises, authentication process for our customers with personal and secure access via confidential identifiers and passwords, connections, encryption of certain data).

We have put in place measures to protect your personal data:

– We implement and maintain technical measures to ensure that your personal data is stored and processed confidentially and securely.

– We implement and maintain appropriate restrictions on access to your personal data, and monitor personal data access, use and transfer.

– All our employees who have access to your personal data are required to comply with our confidentiality and data protection requirements.

– We require all third-party business partners and service providers with whom we may share your personal data to comply with applicable privacy and data protection requirements. (RGPD).

7. Your rights regarding your personalpersonal data

You have the right to :

– Access, rectify and/or delete your personal data;

– Restrict or object to their processing;

– In some cases, to require that some of your personal data be transferred to you or to a third party;

– To the extent that our processing of your personal data is based on your consent, to withdraw your consent, without affecting the lawfulness of our processing based on your consent prior to its withdrawal.

We are committed to enabling you to exercise your rights: to do so, please contact us at

– By e-mail: info@garniac.fr

– By post: MAISON DE GARNIAC 275 ch de Cluchier 30760 Le Garn

In this case, please provide us with the following information so that we can take your request into consideration:

– Your full name and a photocopy of your identity card;

– Your request (in other words, what rights you wish to exercise) ;

– The date of the request and your signature (if you sent your request by post).

If you have not obtained satisfaction by contacting us, you may also lodge a complaint about the processing of your personal data with a data protection authority (www.cnil.fr).

8. Changes to this Privacy Policy

We regularly review our compliance with our Privacy Policy, in particular to ensure that it complies with data protection laws and regulations. However, although this Privacy Policy may change from time to time, we will not reduce your rights under this Privacy Policy without your explicit consent.

Date of last update: 03/12/2024