1. INFORMATION WE COLLECT
Depending on the Services provided by the website and used by you, on your choices and configuration of your terminal (with respect in particular to cookies), personal data concerning you (your “Personal Data”) collected and processed by METAXA mainly includes: your name, date of birth, e-mail address, postal address, telephone number, your preferences and interests and your connection logs, and your nationality when required by specific regulations, as well as the information that you may disclose when you contact us. To the extent permitted by applicable law, we may combine the information collected, including information about the organization for which you work, with other information in our possession or information that you provide to us.
2. PURPOSES OF PROCESSING
We collect and process your Personal Data with your consent and/or as necessary to perform a contract (e.g. to provide services), meet our legal obligations, or fulfil our legitimate interests (notably to improve our products and services or to protect the security of our systems and clients).
We use and process Personal Data about you for purposes described below:
- to provide the services requested;
- to personalize the content of the website, to send you information about our offers, news and events (newsletters, invitations and other publications) either by e-mail, telephone, contact forms, or post;
- to understand your preferences and interests;
- to make statistics;
- to prevent fraud and ensure compliance;
- to reply to your questions, complaints or orders of documents or services;
- to improve our website and provide technical support.
We will not process your Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you or collect any Personal Data that is not required for the mentioned purposes. For any new purpose of processing we will ask your separate consent. To the extent necessary, we take all reasonable steps to ensure that Personal Data is reliable for its intended use, accurate, complete, and current. We also undertake to collect only the categories of Personal Data that are strictly required for the purposes mentioned above.
3. YOUR RIGHTS
In accordance with applicable data protection laws and regulations, you have a right to request access to, rectification or erasure of your Personal Data, or restriction of processing, and to object to said processing, as well as the right to data portability to the extent applicable, subject to any overriding legitimate grounds that Cointreau might invoke to retain your Personal Data.
You may request at any time that we stop sending you information about our offers, news and events by using the opt-out link inserted in each e-mail that we send you.
Moreover, you have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with the GDPR.
You can exercise your rights by using your account settings or by simply writing us at the following address: firstname.lastname@example.org. Please keep in mind that in case of a vague request we may engage a discussion to better understand the motivation for the request and require you to prove your identity (for example, by requesting an ID). This is made to ensure that no right of third parties are violated by your request.
4. DATA RECIPIENTS
Your Personal Data shall be processed by METAXA. It shall not be transferred or made accessible to any third party apart from:
- our service providers (such as providers of hosting and maintenance services or advertising partners);
- the other entities of the Remy Cointreau group
- in case of a change of control, if we sell or otherwise transfer part or the whole of METAXA or our assets to another company (e.g., in the course of a transaction like a merger, acquisition, liquidation), and;
- to third parties if such disclosure is required by law, by a regulatory provision or by a court ruling, or if this disclosure is necessary to ensure the protection and defense of rights or to prevent harm.
5. TRANSFER OF PERSONAL DATA & SECURITY MEASURES
METAXA, its affiliates, or service providers may transfer information that we collect about you, across borders. If you are located in the European Union, please note that we may transfer your Personal Data to a country that does not have the same data protection laws as your jurisdiction. Any transfer of your Personal Data outside the European Economic Area shall only take place subject to appropriate safeguards being in place, such as standard contractual clauses and other contractual safeguards. You can contact us to obtain a copy of the safeguards implemented to secure data transfers operated outside the European Economic Area.
We use reasonable and appropriate information security safeguards to help keep the information collected through the Services secure and take reasonable steps to verify your identity before granting you access to your account. Among others, we utilize the following security measures:
- Pseudominization of certain categories of your Personal Data;
- Encryption of your Personal Data in transit and in rest;
- Regular vulnerability scanning and penetration testing;
- Organizational measures (access control, restriction of access);
- Conducting periodical data protection impact assessments and privacy audit.
6. DATA RETENTION
The Personal Data that is used for the purpose of sending you information concerning the offers, news and events of METAXA shall be kept for a period of three (3) years as of the date on which it was collected or as of your last contact with METAXA. Your Personal Data shall be destroyed within a maximum of 30 days following any request on your part to unsubscribe.
The Personal Data that is collected and processed under the “Contact us” and/or or similar section shall only be kept throughout the duration of the processing of your request. It shall be deleted thereafter.
Finally, the connection logs that are collected, subject to your consent, using the cookies, tracers and other similar tracking technologies implemented on our website, shall be kept in accordance with applicable laws and regulations for a period of time that does not exceed thirteen (13) months.
7. CHILDREN’S PRIVACY
METAXA’s website is directed to users under the legal age of drinking. If you are younger this legal age, depending of your country, you may not use our Services. If you are a parent or guardian and believe we may have collected information about a child, please contact us.
8. CONTACT US
Rémy Cointreau DPO
21 Boulevard Haussmann
75009 – Paris – France
Phone: +33 (0) 1 44 13 44 13
Last update: December 2019