Privacy policy

This Privacy Policy describes how CinqCoeursVineyard (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from cinqcoeurs.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Types of Personal Information We Collect, Purposes, and Legal Basis for Processing.

When you visit the Website, we automatically collect information about you and your use of the Website, such as the type of browser you use, the search terms you use on the Website, your IP address, including your network location, and information about your computer. The purpose is to optimize the user experience and the functionality of the Website, as well as to conduct targeted marketing, including retargeting via Facebook and Google. This information processing is necessary for us to pursue our legitimate interests in improving the Website and providing you with relevant offers. The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation.

When you purchase a product or communicate with us on the Website, we collect the information you provide, such as your name, address, email address, telephone number, payment method, information about the products you purchase and may have returned, delivery preferences, and the IP address from which the order was placed. The purpose is to deliver the products you have ordered and fulfill our agreement with you, including managing your rights to return and make complaints. We may also process information about your purchases to comply with legal requirements, including accounting and bookkeeping. When making a purchase, the IP address is collected for the purpose of preventing fraud. The legal basis for the processing is Article 6(1)(b), (c), and (f) of the EU General Data Protection Regulation.

When you subscribe to our newsletter, we collect your name, email address, and optionally, your mobile number. The purpose is to pursue our legitimate interest in delivering newsletters to you. The legal basis for the processing is Article 6(1)(f) of the EU General Data Protection Regulation.‍

RECIPIENTS OF PERSONAL INFORMATION

Information about your name, address, email, telephone number, order number, and specific delivery preferences is shared with DHL or a carrier responsible for delivering the purchased goods to you. When purchasing non-stocked items, the mentioned information may be shared with the manufacturer or seller of the respective item, who will then handle the delivery.

Two of these data processors, Google Analytics operated by Google LLC and Facebook Inc., are based in the United States. The necessary guarantees for the transfer of information to the United States are secured through the data processors' certification under the EU-U.S. Privacy Shield, in accordance with Article 45 of the EU General Data Protection Regulation.

‍Your rights:
In order to provide transparency regarding the processing of your information, as the data controller, we inform you about your rights.

‍Right of access:
You have the right to request information about the data we have registered about you, including the purpose of the registration, the categories of personal data and recipients of the data, as well as information about the source of the data. You have the right to receive a copy of the personal data we process about you. If you want a copy of your personal data, please send a written request to vineyardcinqcoeurs@gmail.com. You may be asked to provide proof of your identity.

‍Right to rectification:
You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information we have registered about you, please contact us in writing so that the information can be corrected. Information collected in connection with your membership in our customer club can be corrected by accessing your user profile.

‍Right to erasure:
In certain cases, you have the right to have all or some of your personal data deleted by us, for example, if you withdraw your consent and we do not have another legal basis for continuing the processing. To the extent that continued processing of your information is necessary for us to comply with our legal obligations or to establish, assert, or defend legal claims, we are not obliged to delete your personal data.

‍Right to restriction of processing:
In certain cases, you have the right to restrict the processing of your personal data to storage only, for example, if you believe that the information we process about you is not correct.

‍Right to object:
You have the right to object to our processing of your personal data at any time, for direct marketing purposes, including any profiling carried out for such marketing. Furthermore, you have the right to object, at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on our legitimate interests as described in sections 2.1 and 2.3.

‍Right to withdraw consent:
You have the right to withdraw any consent you have given us for the processing of your personal data.

‍Right to lodge a complaint:
You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Borgergade 28, 5, 1300 Copenhagen K, regarding our processing of your personal data. Complaints can be submitted via email to dt@datatilsynet.dk or by phone at +45 33 19 32 00.

‍Deletion of personal data:
Information collected about your use of the website (as described in section 2.1) will be deleted when you have not used the website for 1 year. Information collected in connection with your subscription to our newsletter will be deleted when you withdraw your consent, unless we have another legal basis for processing the information. Information collected in connection with purchases made on the website (as described in section 2.2) will, as a general rule, be deleted 3 years after the end of the calendar year in which you made the purchase. However, information may be stored for a longer period if we have a legitimate need for longer storage, for example, if it is necessary to establish, assert, or defend legal claims or if storage is necessary for us to comply with legal requirements. Accounting material is stored for 5 years from the end of a financial year in order to comply with the requirements of the Danish Bookkeeping Act.

‍Security:
We have implemented appropriate technical and organizational security measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data. Only employees who have a genuine need for access to your personal data to perform their work have access to it.