This website is operated by COINTREAU, a simplified joint stock Company with a capital of € 4 036 944 – whose registered address is : Carrefour Molière – 49124 St Barthélémy d’Anjou France. Registered in Angers N° 582 143 384, e-mail address: firstname.lastname@example.org. Publication Director: Nathalie Lesage, Communication Director COINTREAU.
COINTREAU operates in its capacity of data controller for the purposes of applicable data protection laws and regulations, including the Regulation (EU) 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data (“GDPR”).
1. INFORMATION WE COLLECT
Depending on the Services provided by the website and used by you, on your choices and configuration of your terminal (with respect in particular to cookies), personal data concerning you (your “Personal Data”) collected and processed by COINTREAU mainly includes: your name, date of birth, e-mail address, postal address, telephone number, your preferences and interests and when purchasing products and services your billing and transactional information, your connection logs, and your nationality when required by specific regulations, as well as the information that you may disclose when you contact us. To the extent permitted by applicable law, we may combine the information collected, including information about the organization for which you work, with other information in our possession or information that you provide to us.
The Personal Data that is mandatory for COINTREAU to fulfil the purposes that are described below is marked with an asterisk on the various pages of the website. Should you not fill in these mandatory fields, COINTREAU may not be able to take care of your demands and/or to provide you the requested services. Other Personal Data is purely optional and allow us to know you better and to improve our communications and services accordingly.
2. PURPOSES OF PROCESSING
We collect and process your Personal Data with your consent and/or as necessary to perform a contract (e.g. to provide products ordered), meet our legal obligations, or fulfil our legitimate interests (notably for marketing purposes, to prevent fraud or to protect the security of our IT systems).
We use and process Personal Data about you for purposes described below:
• to provide the products or services requested;
• to personalize the content of the website, to send you information about our products, services, offers, news and events (newsletters, invitations and other publications) either by e-mail, telephone, contact forms, or post;
• to understand your preferences and interests;
• to make statistics;
• to prevent fraud and ensure compliance;
• to reply to your questions, complaints or orders of documents or services;
• to improve our website and provide technical support.
We will not process your Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you or collect any Personal Data that is not required for the mentioned purposes. For any new purpose of processing we will ask your separate consent. To the extent necessary, we take all reasonable steps to ensure that Personal Data is reliable for its intended use, accurate, complete, and current. We also undertake to collect only the categories of Personal Data that are strictly required for the purposes mentioned above.
3. YOUR RIGHTS
In accordance with applicable data protection laws and regulations, you have a right to request access to, rectification or erasure of your Personal Data, or restriction of processing, and to object to said processing, as well as the right to data portability to the extent applicable, subject to any overriding legitimate grounds that COINTREAU might invoke to retain your Personal Data.
You may request at any time that we stop sending you information about our offers, news and events by using the opt-out link inserted in each e-mail that we send you.
You may also give us specific instructions regarding your Personal Data after your death.
Moreover, you have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with the GDPR.
You can exercise your rights by using your account settings or by simply writing us at the following address: email@example.com. Please keep in mind that in case of a vague request we may engage a discussion to better understand the motivation for the request and require you to prove your identity (for example, by requesting an ID). This is made to ensure that no right of third parties are violated by your request.
4. DATA RECIPIENTS
Your Personal Data shall be processed by COINTREAU. It shall not be transferred or made accessible to any third party apart from:
i. our service providers (such as providers of hosting and maintenance services or advertising partners);
ii. the other entities of the Remy Cointreau group;
iii. in case of a change of control, if we sell or otherwise transfer part or the whole of COINTREAU or our assets to another company (e.g., in the course of a transaction like a merger, acquisition, liquidation) and;
iv. to third parties if such disclosure is required by law, by a regulatory provision or by a court ruling, or if this disclosure is necessary to ensure the protection and defense of rights or to prevent harm.
5. TRANSFER OF PERSONAL DATA & SECURITY MEASURES
COINTREAU, its affiliates, or service providers may transfer information that we collect about you, across borders. If you are located in the European Union, please note that we may transfer your Personal Data to a country that does not have the same data protection laws as your jurisdiction. Any transfer of your Personal Data outside the European Economic Area shall only take place subject to appropriate safeguards being in place, such as standard contractual clauses and other safeguards. You can contact us to obtain a copy of the safeguards implemented to secure data transfers operated outside the European Economic Area.
We use reasonable and appropriate information security safeguards to help keep the information collected through the Services secure and take reasonable steps to verify your identity before granting you access to your account. Among others, we utilize the following security measures:
• Pseudonymization of certain categories of your Personal Data;
• Encryption of your Personal Data in transit and in rest;
• Regular vulnerability scanning and penetration testing;
• Organizational measures (access control, restriction of access);
• Conducting periodical data protection impact assessments and privacy audit.
6. DATA RETENTION
The Personal Data that is used for the purpose of sending you information concerning the offers, news and events of COINTREAU shall be kept for a period of three (3) years as of the date on which it was collected or as of your last contact with COINTREAU. Your Personal Data shall be destroyed within a maximum of 30 days following any request on your part to unsubscribe.
The Personal Data that is collected and processed under the “Contact us” and/or or similar section shall only be kept throughout the duration of the processing of your request. It shall be deleted thereafter.
Finally, the connection logs that are collected, subject to your consent, using the cookies, tracers and other similar tracking technologies implemented on our website, shall be kept in accordance with applicable laws and regulations for a period of time that does not exceed thirteen (13) months.
7. CHILDREN’S PRIVACY
COINTREAU website is not directed to users under the legal age of drinking. If you have not reached this legal age, which varies according to your country, you will not be able to use our Services. If you are a parent or guardian and believe we may have collected information about a child, please contact us.
8. CONTACT US
Remy Cointreau DPO
21 Boulevard Haussmann
75009 – Paris – France
Phone: +33 (0) 1 44 13 44 13