RGPD

Introduction

 

At Gilbert & Gaillard, we are committed to protecting the privacy of our community members. This means that we protect the personal data of all visitors who access our websites or services via any application, platform or mobile device (collectively, the "Services").  

This privacy policy ("Privacy Policy") explains how Gilbert & Gaillard collects, shares and uses your personal data. You will also find information on how to exercise your privacy rights.  By using our Services you consent to Gilbert & Gaillard's use of your personal data in the manner described in this Privacy Policy. The terms "we", "us" or "our" are each intended to refer to Wine Tasting and Trading Ltd.   

 

Summary

We have summarised the key points of our Privacy Policy below. 

 

  1. Data about you that we collect and why:

- Below are the general categories of personal data we may collect about you and why we collect it: 

 

1.a. Information you voluntarily provide.

- Registration information when you create a Gilbert & Gaillard account so that we can:

- Create your account so that you can place Orders under our Terms.

- Identify you when you log in to your account.

- Contact you to get your views on our Services.

- Inform you of changes or updates to our Services.

 

- Transaction information when you place an Order:

- To process and invoice you for your Order (note: Gilbert & Gaillard does not, under any circumstances, store your credit card information in our systems).

- Respond to your requests and questions regarding your Order and resolve any issues.

- Conduct analysis and research to develop and improve our Services.

- Protect you and the Services by attempting to detect and prevent fraud and other acts that may violate our Terms or policies applicable to the Services.

 

1.b.     Information we collect automatically.

- Activity-related information so that we can:

- Provide you with a better experience.

- Allow you to access your Order history and preferences.

 

- Cookies and similar technologies so that we can:

- Measure and analyse the use and effectiveness of our Services 

 

1.c. Information we obtain from third party sources.

- Analytical reports and market research to: Measure the performance of our marketing campaigns

- Measure the performance of our Services' marketing campaigns

- Better understand your preferences so that we can tailor our marketing campaigns and Services accordingly.

 

We process information that you voluntarily provide, information that we automatically collect and information that we obtain from third party sources in order to continually improve our Services.

 

 

  1. With whom do we share your personal data?

 

We may share your personal data with the following recipients (and where applicable, we ensure that we have appropriate security and contractual safeguards in place to protect it):

- Third parties who support our Services (e.g. partners for marketing or promotions in the wine sectors).

- Any law enforcement or regulatory body, government agency, court or other third party where we consider disclosure to be necessary under applicable law or regulations.

- Entities under new ownership or reorganisation in the event of a corporate restructuring, sale, purchase or joint venture affecting our business.

- Any other person provided that you have consented.  We will not sell, distribute or otherwise share your personal data under any circumstances unless we have obtained your consent.

 

 

  1. Legal basis for processing personal data

Gilbert & Gaillard will always ensure that it has a lawful basis for collecting and using your personal data.  The lawful basis on which we rely will change depending on the type of information and the context in which we collect it. 

The main reason for collecting and using your personal data is to fulfil our contract with you (i.e. to ensure that you can receive your Order when and where you want it), but we may also process it where this is in our legitimate business interests.

 

  1. International Data Transfers

We may transfer your personal data to countries outside your country of residence, to other countries where Gilbert & Gaillard or our service providers operate. The data protection laws of these countries may differ from the laws of your country but Gilbert & Gaillard will ensure that it implements appropriate safeguards to protect your personal data in those countries in accordance with this Privacy Policy.

 

 

 

  1. Security

Gilbert & Gaillard takes great care to protect your personal data from unauthorised access and unlawful processing, loss, destruction or accidental damage. We implement technical and organisational measures to ensure the security of this information.

 

  1. Data retention

Gilbert & Gaillard retains your personal data for 5 years after the last interaction with our site (i.e. updating of personal data or transaction) to fulfil the purposes described in this Privacy Policy. We may also retain certain elements of your personal data for a period after you delete or deactivate your account for our legitimate operations such as record keeping and compliance with our legal obligations. When we retain our information, we do so in accordance with applicable law.

 

  1. Your data protection rights

You may access your account at any time to review and update your personal data. You may also contact us to request that we delete your personal data, restrict its processing or request that it be transferred to a third party. You may unsubscribe from marketing communications sent to you by using the "unsubscribe" feature in any marketing communication we send to you or by editing your profile accordingly. 

 

  1. Links to third party sites

Our websites may, from time to time, contain links to or from third party websites (for example, those of our partner networks, advertisers and affiliates). If you follow these links, please be aware that Gilbert & Gaillard is not responsible for these websites which have their own privacy policies. 

 

  1. Updates to this Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical or business changes. We encourage you to periodically visit this page to view the latest information about our privacy practices.

 

  1. How to contact us

If you have any questions or concerns about this Privacy Policy

Policy, please feel free to contact us ([email protected])

 

____________________________________________________________________

 

Additional Information 

 

  1. Information about you that we collect and why

 

The information we may collect about you falls into the following categories: 

 

1.a. Information you voluntarily provide

Some parts of our Services may ask you to voluntarily provide personal data. For example:

- Registration Information: When you create a Gilbert & Gaillard account, sign in or fill out forms on the Services, we collect information about you including your name, address, phone number, email address and the password you create.

- Transaction Information: We collect information about your Orders, including payment information (e.g., your credit card number) using the secure services of our payment processors. Payment transactions are handled by our payment service providers and we do not store your credit card information in our systems. We also collect delivery information (e.g. your physical address) in order to process each Order.

 

1.b.     Information we collect automatically

When you access our Services, we may collect certain information automatically from your device. In some countries, including European countries, this information may be considered personal data under applicable data protection law. For example:

- Activity Information: We collect information about your use of the Services and information about you from the content you create and the notifications or messages you post or send as well as from your searches, what you watch, and your discussions. 

- Cookies and Similar Technologies: We use cookies and similar tracking technology to collect and use personal data about you (e.g., your Internet Protocol (IP) address, device identifier, browser type, and when, how often, and for how long you interact with the Services), including to facilitate interest-based advertising.  For more information about the types of cookies and similar technologies we use, why, and how you can control these technologies, see our Cookie Policy.

 

1.c. Information we obtain from third party sources

We may occasionally receive personal data from third party sources, including advertising networks, but only if we have verified that these third parties have obtained your consent to process the information or are otherwise legally permitted or required to share your personal data with us. This information may include your likely demographic group. For example:

- Analytical reports and market research: We collect information from our third party affiliates about how you respond and react to our marketing campaigns so that we can tailor our marketing and Services accordingly.

- We may also receive aggregated information in the form of audience segments from third party sources in order to display targeted advertisements on digital assets operated by organisations such as Facebook and Google. 

 

Our use of the information we collect 

We may use this information, for example, in the following ways:  

 

  1. Information you voluntarily provide

- Registration Information 

- The registration information you provide when you create a Gilbert & Gaillard account enables us to provide you with access to and provision of the Services [in accordance with our Terms]. We also use this information to authenticate your access to the Services, to contact you for your views and to notify you of important changes or updates to our Services.

- The registration information you provide when you create a Gilbert & Gaillard account may also be used to provide you with awards, to communicate them to you and to include them in our various communication materials, guides and online guides.

- Transaction Information

- Your transaction information enables us to process your Order and send you an accurate invoice. It also helps us to contact you if necessary. 

- Gilbert & Gaillard may contact you by email or telephone to provide you with status updates or other information or to resolve problems with your account or Order. 

- Where you pay for your Order with a payment service provider, we will send transaction information via confirmation emails or SMS to the email address or telephone number registered with that service provider (as required by those providers). 

 

 

  1. Information we collect automatically

 

- When you access our Services, we may collect certain information automatically from your device such as your IP address, MAC address or device ID.  In some countries, including Europe, this information may be considered personal data under applicable data protection law.

 

- Cookies and similar technologies 

- Like many websites and online services, we use cookies and other technologies to keep a record of your interaction with our Services. Cookies also help us manage a range of options and content as well as store searches and represent your information at the time of ordering. For more information about the types of cookies and similar technologies we use, why, and how you can control these technologies, see our Cookie Policy.

 

 

 

  1. Information we obtain from third party sources

- Analytical Reports and Market Research

- We analyze information we collect from our third party service providers (such as Google, Facebook and other affiliates) to understand how you respond to our Services and advertisements (e.g., whether you have clicked on any of our advertisements).  This helps us to understand your preferences and to recommend Services to you in line with your interests.

 

 

  1. With whom do we share your personal data?

 

- When we provide the Services to you, depending on the circumstances, we may share your personal data with the following entities:

- Companies within the Gilbert & Gaillard group of companies (that is, our subsidiaries and affiliates, our ultimate parent company and its subsidiaries and affiliates). These companies act on our behalf and process your personal data for the purposes set out in this Privacy Policy.

- Third parties who perform various activities to promote and support our Services. This includes hosting providers, marketing service providers, eCRM partners such as SimpleMail who manage our marketing emails and push notifications, delivery companies who deliver your Order to you, market research companies and payment processors who handle credit card payment transactions - any of these third parties may or may not be in the country of residence. 

- If any part of our business decides to form a joint venture, buy another business or be sold to or merged with another business entity, your information may be disclosed or transferred to the target company, or to the new business partners or owners or their agents and advisors.  In these circumstances, we will always inform such entities that they must only use your personal data for the purposes set out in this Privacy Policy. 

 

- Any law enforcement or regulatory body, government agency or other third party where we consider disclosure to be necessary:

- Under applicable law or regulation.

- To exercise, establish or defend our rights.

- To protect your vital interests or those of any other person.

- Any other person provided that you have consented to the disclosure. We will not sell, distribute or lease your personal data unless we have your permission or are required to do so by law.

 

 

 

  1. Legal basis for processing personal data

 

Our lawful basis for collecting and using your personal data as described above will depend on the specific context in which we collect it.  

 

The primary reason for collecting and using your personal data is to perform our contract with you. However, we will also use your personal data where this is in our legitimate business interests (but only if our interests are not overridden by your data protection interests or your statutory rights and fundamental freedoms). In some cases, we may have a legal obligation to collect personal data from you (e.g. in the case of legal proceedings) or we may need to process or share it with third parties in order to "protect your vital interests" (this is a legal phrase meaning to save your life) or those of another person (e.g. if another person's life is in danger).

 

If we ask you to provide personal data to comply with a legal obligation or to perform a contract with you, we will make this clear at the time and inform you whether or not the provision of personal data is compulsory (and also explain the possible consequences of failure to do so).   Similarly, if we collect and use your personal data on the basis of our legitimate interests (or those of any third party), we will make it clear what those interests are.

 

If you have any questions or need further information about the legal basis on which we collect and use your personal data, please contact us: [email protected] 

 

 

  1. International Data Transfers

 

We may transfer your personal data to countries other than the country in which you reside. The Gilbert & Gaillard website servers are primarily located in France. However, our group companies and our third party service providers and partners operate in many countries, including China, South Africa, USA, Italy, Spain and elsewhere in Europe. This means that when we collect your personal data we may process it in any of these countries.

Whilst these countries may have data protection laws that differ from the laws in your country, you can be assured that Gilbert & Gaillard will implement appropriate safeguards to protect your personal data in those countries in accordance with this Privacy Policy. 

 

 

  1. Security

 

The safe and secure storage of your personal data is important to us.  We have therefore put in place appropriate technical and organisational measures / industry standard technology to protect it from unauthorised access and unlawful processing, accidental loss, destruction or damage. 

 

The security measures we use are designed to provide a level of security appropriate to the risk of processing your personal data. Where you have chosen a password to access certain parts of the Services, you are responsible for keeping this password confidential. We advise you not to share your password with anyone and to use a unique password for our Services. We will not be liable for any unauthorised transactions carried out using your name and password.  

 

  1. Data Retention

 

Gilbert & Gaillard will retain your personal data where we have a business need to do so (for example, while you hold an account with us or to enable us to comply with our legal, tax or accounting obligations).  If you object to the processing of certain categories of your personal data (including in relation to receiving marketing communications from us), we will keep a record of your objection to the processing of your information so that we can continue to respect your wishes.

We will destroy or completely anonymise your personal data when we no longer need to process it for our ongoing legitimate business purposes or for any reason. If this is not possible (for example, because your personal data is stored in a backup archive), then we will store it securely and isolate it from further processing until it can be deleted.

 

 

  1. Your data protection rights

 

Gilbert & Gaillard respects your privacy and data protection rights. Below is a summary of your rights regarding your personal information processed by Gilbert & Gaillard: 

- Gilbert & Gaillard provides you with the tools to access, view or update your personal data at any time. If you wish to request the deletion of your personal data, you can do so by contacting us using the details provided in the "How to contact us" section below. 

- You may object to the processing of your personal data, ask us to restrict the processing of your personal data or request that it be transferred to a third party. Similarly, you may exercise these rights by contacting us using the contact details provided in the "How to contact us" section below.  

- You may decide at any time not to receive marketing communications from us. You can exercise this right by using the unsubscribe feature on the communication you receive or by editing your profile accordingly. 

- Similarly, if we collect and process your personal data on the basis of your consent, you may withdraw such consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we have carried out prior to your withdrawal nor will it affect the processing of your personal data carried out on lawful grounds other than your consent.

- You may complain to the data protection supervisory authority about the collection and use of your personal data.

- We will respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection law

 

 

  1. Links to third party sites

 

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates or to many other websites that may offer useful information to our visitors.

We provide these links to you only as a convenience and the inclusion of any link does not imply endorsement of the practices of the website in question by Gilbert & Gaillard. If you follow a link to any of these websites, please be aware that they have their own privacy policies and that we do not accept any responsibility for those policies or the linked websites. Please check these policies before submitting any personal data to these websites.

 

 

  1. Updates to this Privacy Policy

 

We may update this Privacy Policy from time to time in response to legal, technical or business changes. When we update our Privacy Policy, we will take appropriate steps to notify you, depending on the significance of the changes. We will obtain your consent to any material changes to the Privacy Policy if and when required by applicable data protection law. 

We encourage you to check this page regularly to see the latest information about our privacy practices.

 

 

  1. How to Contact Us

 

If you have any questions or concerns about this Privacy Policy, please feel free to contact our privacy team: By email at: [email protected] By writing to us at 

Gilbert & Gaillard

7 Parc des Fontenelles

78870 Bailly

FRANCE