PRIVACY POLICY

Last updated: 2025, March the 4th

This Privacy Policy explains how MILLESIWINE ("we," "us," or "our") collects, uses, and protects your personal data when you visit our website www.alexiscaraux.com (the "Site"). We are committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. WHO WE ARE

The data controller responsible for processing your personal data is MILLESIWINE, a company registered in Tours, France, under number 751 659 228, with a registered office at 76 rue Marcel Tribut, 37000 Tours, France.

For any questions regarding this Privacy Policy or your personal data, you can contact us at:
📧 Email: contact@alexiscaraux.com
📍 Postal address: MILLESIWINE, 76 rue Marcel Tribut, 37000 Tours, France

2. WHAT PERSONAL DATA WE COLLECT

We collect and process different types of personal data depending on your interactions with our Site:

- Identification and contact details: Name, surname, email address, phone number.
- Account information: If you create an account, we store your login details.
- Transaction data: Purchase history and payment details (processed securely by third-party payment providers).
- Communication data: Information you provide when you contact us.
- Technical data: IP address, browser type, operating system, and other details related to your navigation on our Site.

We do not collect sensitive data (e.g., health data, religious beliefs, political opinions) unless legally required.

3. HOW WE USE YOUR DATA

We process your personal data for the following purposes:

- Managing orders and providing services: Processing transactions, delivering products, managing your customer account.
- Customer support and inquiries: Responding to questions and requests.
- Marketing and communications: Sending promotional emails (only with your consent).
- Legal and security reasons: Complying with legal obligations, fraud prevention, and website security.

We do not sell or share your personal data with third parties for commercial purposes.

4. LEGAL BASES FOR PROCESSING

Under the GDPR, we rely on the following legal bases to process your data:

- Contractual necessity: When processing is required to fulfill a contract (e.g., processing an order).
- Legal obligation: When processing is necessary to comply with laws (e.g., accounting, tax obligations).
- Legitimate interest: To improve our services, prevent fraud, and ensure security.
- Consent: For marketing communications, which you can withdraw at any time.

5. HOW LONG WE KEEP YOUR DATA

We retain personal data for the time necessary to fulfill the purposes outlined in this Privacy Policy:

- Customer account data: As long as the account is active + 3 years.
- Order history & invoices: 10 years (legal requirement).
- Contact form inquiries: 1 year.
- Marketing data: Until you withdraw consent.

After these periods, we delete or anonymize your data unless legal obligations require us to keep it longer.


6. HOW WE PROTECT YOUR DATA

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or disclosure. This includes:
- Secure encryption of transactions.
- Access controls to restrict data access to authorized personnel only.
- Regular security updates and monitoring to prevent breaches.

7. YOUR RIGHTS

Under the GDPR, you have the following rights regarding your personal data:

- Right of access: Request a copy of your personal data.
- Right to rectification: Correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your data under certain conditions.
- Right to restriction: Request a temporary halt to data processing.
- Right to object: Opt out of marketing communications.
- Right to data portability: Receive your data in a structured format.
- Right to withdraw consent: For processing based on consent.

To exercise any of these rights, contact us at contact@alexiscaraux.com. If you believe your data protection rights have been violated, you can also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) via [www.cnil.fr](https://www.cnil.fr/).

8. THIRD-PARTY SERVICES

We work with trusted third-party providers for payment processing, website hosting, and analytics. These providers are contractually required to ensure data security and compliance with GDPR.

Your personal data may be transferred outside the European Economic Area (EEA), but only to countries ensuring an adequate level of protection or under strict contractual safeguards.


9. LINKS TO OTHER WEBSITES

Our Site may contain links to third-party websites. We are not responsible for their privacy policies. We encourage you to review the policies of any external sites you visit.


10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect legal or operational changes. In case of significant modifications, we will notify you via email or a notice on our Site.

For any questions regarding this Privacy Policy, please contact us at contact@alexiscaraux.com.