Privacy Policy

About us

Chai & Bar is a public limited company having its registered office at Chaussée de Waterloo 1469 – 1180 Uccle – VAT number: BE0873.102.740. Via its website www.lechaidesgrandsvins.com , (hereinafter referred to as the “Website”) the company’s activity consists in presenting online the ranges, offers and events of its store located at 1469 chaussée de Waterloo in Brussels (hereinafter referred to as the “Store”).

The terms “Le Chai des Grands Vins”, “we”, “our” and “us” refer to Le Chai des Grands Vins, in its capacity as data controller for personal data collected as part of your experience on our Website and in the Store when you make a purchase.

We value your privacy and strive to ensure the confidentiality of your personal data. We have developed this privacy statement to provide you with information on our policies and practices with regard to the use of your personal data.

Definitions

Personal data: refers to any data relating to an identified or identifiable natural person (hereinafter referred to as “data subject”).

Processing: refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data controller: refers to the natural or legal person, the public authority, service or other body which, whether alone or jointly with others, determines the purposes and means for the processing.

Processor (or service provider): refers to a natural or legal person, public authority, agency or other body, which processes personal data on behalf of the data controller.

Collected personal data

All personal data we collect is directly provided by you on our Website, with the exception of data collected by cookies, according to your preferences.

Data provided by you during your visit to our Website

When you browse and use our Website, we may ask you to provide personal data, depending on the services you wish to use, namely:

• When you submit a request for information and/or a catalogue;
• When you subscribe to our newsletter;
• When you sign up for our private events.

Depending on the service you wish to use, the personal data you provide may be as follows:

• Your identity (first name, last name);
• Your contact information (email);
• Any other information you may provide when filling out a contact form or any comments field.

When marked as required, your personal data is necessary to process your request, depending on the service requested. If you do not provide the data, we may not, for example, be able to process your order or respond to your request.

Data you provide during your in-Store experience

When you visit the Store to make a purchase, our team may collect your personal data.

The personal data you provide may include the following:

your identity (first name, last name);

your contact information (email, postal address);

your bank details.

• Information on the collection of banking data

When it is provided, banking data is collected through remote payment solutions made available by our processors and is under no circumstance transferred to or stored by Chai des Grands Vins. Moreover, we pay particular attention to the guarantees produced by the processors we select. Specifically, we make sure that all the technical and organisational measures are implemented to ensure the security and confidentiality of the processed data.

• Information on the collection of email addresses for sending electronic receipts (e-receipt)

At your request, we can issue an e-receipt and send it to the email address you provided. For this purpose, your email address is not stored by Chai des Grands Vins and will not be processed for any other purpose other than issuing a receipt related to your purchase.

• Information on the collection of data related to your proof of identity

You will be asked to show proof of identity to pick up your order from the Store. Depending on the value of the order, our team members may make a copy of your proof of identity, or collect the number or any other information that may be useful in the event of a subsequent dispute related to the collection of your order.

Cookies

We may use cookies or any similar technologies placed on your device, to collect data. Some cookies are essential for Website functionality and enhance your user experience.

When you visit our Website, we inform you that cookies may be placed on your device. You are free to accept or reject them, according to the type of cookie. For more information on cookies and to manage your preferences at all times, please refer to our cookie policy.

Processing collected personal data

The personal data we collect is processed on the following legal basis:

• We have, when required by regulations in force, obtained your prior consent – revocable at any time – notably when you subscribe to our newsletter;
• Processing is necessary for the performance of a contract, particularly when you sign up for a private event on the Website or purchase our products in the Store;
• Processing is necessary for our compliance with a legal obligation – particularly when you exercise your rights, as set forth hereafter;
• Processing is necessary for the purposes of our legitimate interests, which are not overridden by your interests or fundamental rights particularly when you make a purchase and we send you similar offers which may be of interest to you.

Your personal data is processed for no longer than is necessary (i) in relation to the purpose for which it was collected (ii) for compliance with legal and regulatory obligations and (iii) for the establishment, exercise or defence of legal claims.

Recipients of collected personal data

To fulfil the purpose for which it was collected, the data gathered on our Website or in-Store may be shared with the following parties:

• Authorised personnel of Chai des Grands Vins,
• Where applicable, our delivery provider when you choose to use this service,
• Where applicable, our provider for remote payment,
• If the case arises, relevant jurisdictions, mediators, certified public accountants, auditors, lawyers, bailiffs, debt collection companies,
• Where applicable, third parties who may drop cookies.
• Any authorised provider and particularly software, hosting and email deployment solution providers…

No data will be disclosed to any other third party whatsoever. No data is transferred outside the European Economic Area.

Your rights with respect to your personal data

According to the regulations in force, you have the right to access, rectify, erase, restrict your data, give instructions relating to your data and object on legitimate grounds.

You can exercise these rights by sending a letter to the following address: Chai & Bar – Le Chai des Grands Vins – 1469 chaussée de Waterloo – Brussels or by email at the following address: rgpd@videlot.com

Once your request has been processed, if you feel that your rights with respect to your personal data are being infringed upon, you can address a complaint to the data protection authority CNIL (Commission Nationale de l’Informatique et des Libertés)

Security

We implement the appropriate measures to ensure the security and confidentiality of your personal data, and particularly the application of the following technical and organisational measures:

Le Chai des Grands Vins staff with access to your data are made aware of the risks related to the security of your personal data. A user authentication system as well as an accreditation system for individuals authorised to handle the data have been implemented.

All personal data processing is performed within the European Economic Area. The data is stored on servers located in the European Economic Area; the installations are secure and designed to protect against any reasonably foreseeable incident. Access is secure and restricted to authorised personnel. Regular data backups are performed and solutions for a continuous supply of power are ensured in the event of a power failure.

When data is transferred to a provider outside the European Economic Area, we will take the steps necessary to ensure said provider is located in a Country deemed to offer an adequate level of data protection or the provider can produce the appropriate guarantees for the security and management of data transfer.

In the event of a personal data breach, a procedure is in place to document the breach with the facts needed to inform the supervisory authority when appropriate.

Changes to this privacy policy

Except in the event of a fundamental change to our practices, we may make changes to this policy from time to time, without notifying you. We therefore recommend that you regularly review its content.

Cookies Policy

A cookie is a small data file (text file), a tracker, placed on your device (computer, tablet, smartphone, etc.…) when you visit a website, read an email, install or use software or a mobile application etc.… Cookies are used to collect information on how you use the website and therefore personalise your experience.

This policy has been designed to provide you with all the necessary information on how we use the cookies, as well as the data collected by them.

This policy is subject to change at any time, particularly in response to changes to regulations and/or practices relating to cookies.

Managing cookies

To manage your cookie consent settings and find more information about the cookies present on our website, please browse the Axeptio module.

Click here to change your cookie settings.

A list of the categories of cookies used on this website is set out below:

Technical and strictly necessary cookies essential for website functionality (required)

These cookies are deposited to guarantee the correct use of the site’s functionalities and services. They may also be essential to access personalised content or respond to a user’s specific request to use a particular function provided by the website.

Functionality cookies

These cookies are deposited to support additional functionality on the website. They may be deposited by us or by third parties who provide services used on the website.

Statistical cookies

These cookies are used to generate statistics on the website’s volume of visits. The analysis of these statistics enables us to continually improve the user experience.

Data collected by cookies

The following data is collected by cookies:

• Identification data (anonymized IP address, user ID, session ID);
• Analytical data (browser, number of pages viewed, user browsing, time spent…)
• Data on tracking consent or use of data.

Retention period

The cookies have a lifespan on your device of a maximum of thirteen months.
The data collected by the cookies is retained for a maximum of twenty-five months from the time it is collected on your device.