Privacy Policy

Use

This privacy policy aims to inform users of the website https://destinationsvinsdeprovence.fr about how their personal data may be collected, processed, and protected. We attach great importance to respecting your privacy and protecting your data. By using our website, you agree to this policy, which may be updated to reflect changes in legislation or our internal practices.

1. Identity of the data controller

The data controller is:

CIVP – Interprofessional Council of Provence Wines
Wine House RN7 CS 50002 – 83460 LES ARCS SUR ARGENS
Tel.: +33 (0)4 94 99 50 10
Fax: +33 (0)4 94 99 50 19

For any questions relating to your personal data, you can contact us at the following email address: civp@provencewines.com.

2. Data collected

We only collect the data that is strictly necessary, including:
– Data entered via our contact forms (name, surname, email, telephone number, message content),
– Data related to browsing (cookies, IP address, technical logs),
– Data provided when subscribing to services or newsletters,
– Data voluntarily published in the blog's comment sections (name, email, comment content, IP address).
– Data entered by the user in the chatbot

3. Purposes and legal basis

The data collected is used for:
– To respond to your contact requests (legal basis: consent),
– To ensure the provision and management of the services offered (legal basis: contract),
– Manage and moderate blog comments (legal basis: legitimate interest),
– To carry out statistical analyses (legal basis: legitimate interest),
– To send you commercial information if you have consented to it (legal basis: consent).
– Publication of Google® reviews: consent
– Processing of requests to exercise rights concerning personal data (legal basis: law)
– Processing of user requests by the chatbot (legal basis: consent)
– Chatbot learning (legal basis: consent).

4. Data recipients and subcontractors and location

The data is intended solely for the internal teams of CIVP – Conseil Interprofessionnel des Vins de Provence (Provence Wine Council), as well as our technical service providers (hosting, maintenance) and other service providers/subcontractors: lawyers, accountants. Certain third-party services may also collect data (for example, Google Analytics). All data is hosted in France, without being transferred outside the European Union.

The data processed internally and with our partners is hosted in France.

Some data may be transferred to the USA, particularly regarding the use of Google Analytics services. An adequacy decision was issued on July 10, 2023, and Google® is among the organizations recognized as providing an adequate level of protection for personal data under the Data Privacy Framework Program.

5. Shelf life

The data is kept only for the period necessary for the purposes for which it was collected, namely:
– Contact details: processing time for the request followed by archiving for 3 years for marketing purposes,
– Contract-related data: contract duration followed by 5 years in accordance with legal requirements,
– Comment data: kept for the entire duration of the comment being online and for a maximum of 3 years after publication, unless deleted earlier at the user's request.
– Chatbot data: retained for a maximum of 12 months from the last interaction, unless the user requests earlier deletion. Data used for training purposes is anonymized and may be retained indefinitely.
– Cookies: maximum duration of 13 months (consent decision)
– Information collected via cookies: 25 months from the last visit.
– Processing of requests to exercise rights concerning personal data: 5 years from the date of the request.

6. Rights of individuals

In accordance with Regulation (EU) 2016/679, known as the GDPR, and the French Data Protection Act, you have the following rights:
– Right of access (Article 15 GDPR),
– Right to rectification (Article 16 GDPR),
– Right to erasure (Article 17 GDPR),
– Right to restriction of processing (Article 18 GDPR),
– Right to data portability (Article 20 GDPR),
– Right to object (Article 21 GDPR),
– Right to withdraw your consent at any time for processing based on consent.

You can exercise your rights by writing to us at: civp@provencewines.com. In case of difficulty, you also have the right to contact the CNIL (www.cnil.fr).

7. Cookies and retention periods

Our website uses cookies to ensure its proper functioning and to measure its audience. On your first visit, a banner informs you and allows you to configure your preferences. We use the GDPR-compliant Pressidium Cookie Consent (CMP) solution, combined with Google Consent Mode V2. No non-essential cookies are placed without your explicit consent.

Types of cookies used:

Strictly necessary cookies

NameExpiryDescription

PHPSESSID

Session

Cookie generated by applications based on the PHP language.
This is a generic identifier used to maintain user session variables. It is normally a random number; its use can be site-specific, but a common example is maintaining a user's logged-in state across multiple pages.

Performance and analytics cookies

NameExpiryDescription

^_ga

13 months

This cookie name is associated with Google Universal Analytics, a major evolution of Google's most widely used analytics service. This cookie is used to distinguish unique users by assigning them a randomly generated identifier. It is included in every page request on the site and is used to calculate data on visitors, sessions, and campaigns for the site's analytics reports.

^_hj

1 year

Hotjar is a behavioral analytics tool that helps understand how users interact with your site. Hotjar cookies collect information to improve the user experience by providing detailed analytics on browsing behavior.

^sbjs

1 year

Sourcebuster is a visitor origin analysis tool, designed to track and identify the sources of traffic to your site.

^_ga$

13 months

Google Analytics identifier cookie.

^_ga_

30 minutes

Google Analytics session-related cookie prefix 4.

^_gid$

24 hours

Google Analytics short-term user ID.

^_gcl_au$

90 days

Google Ads/Analytics first-party conversion link.

^_hjSessionUser_

1 year

Hotjar persistent user ID.

^_hjSession_

30 minutes

Hotjar session ID.

Advertising and targeting cookies

NameExpiryDescription

^_fbp

3 months

Used by Meta to offer a range of advertising products, such as real-time bidding from third-party advertisers.

^_pin

1 year

Pinterest uses cookies to improve user experience, personalize content and ads, and analyze site performance. These cookies track user interactions, maintain active sessions, and protect the site from malicious attacks.

^uuid

6 months and 1 day

Brevo collects information about user browsing and preferences on the site. This information may be used to potentially target newsletters based on this data.

^_fbp$

3 months

Meta advertising cookie (Facebook).

^_fbc$

3 months

Meta click identifier cookie (Facebook).

^_pin_unauth$

1 year

Pinterest tag cookie for unauthenticated users.

^uuid$

6 months

Brevo tracking cookie.

Functionality and preference cookies

NameExpiryDescription

pressidium_cookie_consent

1 year

The pressidium_cookie_consent cookie is used to record the user's consent preferences regarding the use of cookies on the website.
This cookie ensures that the site respects user choices and data protection regulations. The information stored in this cookie includes, in particular, the preferences expressed by the user.

NEST

6 months

Google preference cookie (e.g. Google Maps).

AWSALBCORS

7 days

To ensure persistent support for CORS use cases after the Chromium update, additional persistence cookies are created for each of these duration-based persistence features, named AWSALBCORS (ALB).

AWSALB

7 days

AWS Application Load Balancer cookie used to maintain session persistence (Brevo Conversations).

The data is kept only for the period necessary for the purposes for which it was collected, namely:

  • Contact details: processing time of the request and 3 years from the last contact
  • Contract-related data: contract duration followed by 5 years in accordance with legal requirements.,
  • Comment data: retained for the entire duration of the comment being online and for a maximum of 3 years after publication, unless deleted earlier at the user's request.
  • Chatbot data is retained for a maximum of 12 months from the last interaction, unless the user requests earlier deletion. Data used for training purposes is anonymized and may be retained indefinitely.
  • Cookies: maximum duration of 13 months (consent decision)
  • Information collected via cookies: 25 months from the last visit.

Processing of requests to exercise rights concerning personal data: 5 years from the date of the request.

Configuration via browsers and terminals

You can configure your browser to refuse or accept certain cookies. The configuration methods vary depending on the browser. You will find the corresponding help pages below:

For mobile devices:

You can also manage your preferences directly from your device settings.

You can also change your cookie preferences at any time using the module accessible at the bottom of the page. Cookie consent is valid for a maximum of 12 months.

8. Security

We implement all appropriate technical and organizational measures to guarantee the security and confidentiality of your personal data (access controls, hosting in France, secure backups).

9. GDPR Contact

For any questions relating to the protection of your personal data or to exercise your rights, you can contact us by email at: civp@provencewines.com or by mail at: Maison des vins RN7 CS 50002 – 83460 LES ARCS SUR ARGENS.