Champagne Sophie Cossy (hereinafter “Champagne Sophie Cossy” or “we”), acting as data controller under the European Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the French Data Protection Act of 6 January 1978, as amended (together, the “Regulations”), places great importance on the protection of personal data and respect for your privacy.

This policy (hereinafter the “Policy”) aims to inform you, in accordance with the Regulations, about our practices regarding the collection, use, and sharing of personal data provided through our website, https://champagne-cossy.com/ (hereinafter the “Site”).

This Policy applies only to the processing of information that can identify or make identifiable users of the Site, directly or indirectly (hereinafter “Personal Data”). Users of the Site may include visitors, prospective clients, customers, or job applicants (hereinafter “Users” or “you”).

The purpose of this Policy is to inform Users about the processing of Personal Data we carry out, how we use, share, and protect this data, and the rights you have regarding your Personal Data.

1. Personal Data We Collect

By using our Site, including accepting cookies or using our contact form, you may provide us with Personal Data such as:

• Identification data: name, email address, etc.
• Technical data: IP address, device information, etc.
• Browsing data: pages visited, navigation behavior on the Site.
  
  

2. Purpose and Legal Basis for Processing

We process your Personal Data to:

• Conduct commercial prospecting: based on our legitimate interest to promote our platform, provided you voluntarily gave this information, were informed of this purpose, and can object at any time. Data will be retained no longer than three (3) years after our last interaction.
• Respond to requests for information or contact: necessary to pursue our legitimate interest in communicating and responding to inquiries.
• Maintain a safe and secure environment: necessary to ensure IT security, comply with legal obligations, or assert, exercise, or defend legal rights.
• Manage the Site and perform internal technical operations: based on our legitimate interest to improve functionality, perform analysis, testing, research, or surveys.
• Recruitment management: based on our legitimate interest to fill positions. Mandatory fields will be indicated, and incomplete submission may prevent processing.
  
  

3. Recipients of Your Personal Data

• Authorities: Personal Data may be disclosed to competent authorities, courts, or rights holders as required by law.
• Internal transfers: Data may be shared with our staff, accounting, IT, and communication departments.
• Service providers: Third-party companies providing IT services such as hosting, storage, and maintenance may process Personal Data on our behalf. Servers are located in France. We ensure subcontractors act under our instructions and implement appropriate technical and organizational measures.
  
  

4. Data Retention

Personal Data is kept no longer than necessary for the purposes outlined above:

• Contact requests: 3 years after last interaction.
• Commercial prospecting: max 3 years after end of relationship or last interaction.
• Recruitment: 2 years for non-selected candidates, unless consent is given for longer retention.

Data may be archived beyond these periods for legal compliance or investigation purposes.

5. International Data Transfers
Some data necessary for the Site’s operation may be transferred outside the EU, under agreements compliant with GDPR standards.

6. Data Security
We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, alteration, disclosure, loss, or destruction. Subcontractors are required to comply with security obligations.

7. Your Rights

You have the following rights under the Regulations:

• Access and information: confirm whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion, subject to legal requirements.
• Restriction of processing in certain circumstances.
• Data portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest or marketing purposes.
• Withdrawal of consent: withdraw consent at any time without affecting prior processing.
• Complaint: contact the relevant data protection authority (e.g., CNIL in France).
• Post-mortem instructions: provide directives for your Personal Data after death.

To exercise your rights, contact us at: info@champagne-cossy.com. Identity verification may be required.

8. Changes to the Privacy Policy
We may update this Policy occasionally due to regulatory, legal, or technical changes. Changes will be indicated with a “last updated” date. Major changes will be communicated directly if possible.

Cookie Policy

1. Use of Cookies
When visiting our Site, cookies may be stored on your device. Cookies help analyze traffic and improve the Site. Users can accept or refuse cookies via the mechanism on the bottom banner.

2. What is a Cookie?
A cookie is a small text file stored on a device to collect information about browsing activity and provide personalized services.

3. Types of Cookies

• First-party vs. third-party: First-party cookies are from the Site you visit; third-party cookies come from other domains.
• Session cookies: temporary, deleted when the browser is closed.
• Persistent cookies: remain on your device for a defined period.
  
  

4. Purposes of Cookies

• Strictly necessary cookies: required for Site functionality.
• Analytics cookies: track usage for statistics and site improvement.
• Social media cookies: allow sharing and targeted social media ads.
  
  

4. Managing Cookies

• Necessary cookies are always enabled.
• Consent-based cookies can be enabled/disabled via the cookie banner.
• Consent lasts 13 months from first acceptance.
• Disabling cookies may affect navigation and content personalization.