Les Grands Chais de France SAS, acting in the name and on behalf of all its subsidiaries (hereinafter “GCF”), undertakes as a Controller within the meaning of the General Data Protection Regulation No. 2016/679 of 27 April 2016 (GDPR) to respect the right to privacy, and in particular the personal data, of any person providing information to it by any means (contract, email, letter, its websites, social networks, etc.).
GCF, as a Controller, collects and uses the Personal Data in accordance with the regulations in force to enable the contracts concluded with persons (employment contract, purchase, sale, etc.) to be performed or on the occasion of various exchanges for the purpose of future collaboration.
The legal basis for the processing is the contract between a person and GCF or an indication of the data subjects’ consent to the processing, when such consent is required by the GDPR.
The Personal Data is collected directly from persons or more rarely via third parties (temping agency, administrative authority, etc.).
While complying with the applicable legal requirements, GCF may use a variety of technological mechanisms that collect and provide information about how persons have access to and use GCF sites and services. GCF may use demographic information about users of its websites, which may be obtained from third parties, such as Google or the social media on which users are registered (hereinafter “Usage Information”). This Usage Information may include the pages that users have viewed on the Site, when they were viewed, the products perused, the language of display of information, and demographic information about the user (such as age, gender, and interests, if applicable).
The recipients of these data are:
GCF ensures that the data recipients provide serious guarantees regarding the security and confidentiality of the Personal Data transmitted to them by GCF.
The Personal Data are in principle exclusively processed within the European Union.
Should they be transferred outside the European Union, GCF will take all necessary measures to ensure they are protected.
Thus, GCF will ensure protection of the Personal Data during the transfer, and that third parties comply with a high level of personal data protection, in accordance with European requirements (such as the European Commission’s Standard Contractual Clauses, and/or by the adherence of the entities receiving the data to the Privacy Shield, when they located in the United States).
Active Personal Data are retained under the conditions described below.
Inactive Personal Data are either destroyed immediately or archived and retained for a period within the statutory limitation period.
Unless otherwise legally constrained, any person may request the erasure or modification of their Personal Data at any time.
GCF will implement all the necessary technical and organisational measures to protect the non-disclosure and security of the Personal Data collected by GCF.
These measures include the retention of Personal Data in secure operating environments that are not publicly accessible and are accessible only to authorised GCF personnel, as well as to agents and contractors specifically permitted for this purpose.
In accordance with the French and European standards regarding the protection of personal data, and particularly the GDPR, any person has a right of access, rectification, limitation of processing, erasure, objection to processing and portability.
Moreover, they may withdraw their consent for processing requiring it. Therefore, the data will be erased.
A person who wishes to exercise their rights under the GDPR may contact GCF:
Data Protection Officer
Les Grands Chais de France
1, rue de la Division Leclerc,
Individuals may also file complaints with the Personal Data supervisory authority.
In France, anyone may contact the National Commission of Information Technology and Freedoms (the “CNIL”), whose website is accessible here: https://www.cnil.fr/.
For the other States, the complete list of local data protection authorities can be found on the following institutional site: