Who is responsible for your data
Dylan Rudelle, sole trader registered as EI RUDELLE DYLAN (SIRET 949 658 637 00010), 11 rue Ribordot, 21220 Morey-Saint-Denis, France, trading as Le Clos des Loups Wine. Contact: dylan@leclosdesloups.com.
What I collect, and why
- Contact form: first name, last name, email, country and your message, to answer you. Legal basis: legitimate interest. Kept 3 years after our last exchange.
- Tasting booking: name, email, number of guests, language and any notes you add, to organise your tasting. Legal basis: performance of the contract. Kept 3 years.
- Wine club membership: name, email, shipping address, US state where relevant, your case preferences and the confirmation that you are of legal drinking age, to prepare and ship your case. Legal basis: performance of the contract and legal obligations on the sale of alcohol. Kept for the length of the membership, then 3 years.
- Invoices and payment records, for accounting obligations. Kept 10 years, as French law requires.
- Newsletter: your email address, to send the letter. Legal basis: consent. Kept until you unsubscribe (a link is in every letter).
- Visit statistics: pages viewed, referring site, browser type and country, counted without cookies and without storing your IP address. Legal basis: legitimate interest (audience measurement exempt from consent under CNIL guidance).
What I do not do
I do not sell or rent your data, and I do not pass it to anyone for advertising.
Who processes your data for me
- Netlify, Inc. (United States) hosts the site and receives the messages sent through its forms.
- Cal.com, Inc. (United States) runs the tasting booking calendar.
- Stripe handles payments. I never see your card details.
- GoatCounter counts visits, without cookies.
- The licensed logistics provider that ships the wine club cases, only for what it needs to deliver.
- My accountant, for accounting records.
Transfers outside the European Union
Some of these providers are based in the United States. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
Your rights
You can access, correct or delete your data, restrict or object to its use, take a copy of it, and set instructions for what happens to it after your death. Write to dylan@leclosdesloups.com; I reply within one month. You can also complain to the CNIL, the French data protection authority (cnil.fr).
Security
The site is served only over HTTPS. Data is stored with the providers above, and only I have access to the administration accounts.