Privacy policy

1. Data Controller

Papilles Cocktails SAS (data controller) is a single-member limited liability company, registered under No. 920 079 993 in the Albi Trade and Companies Register. Its headquarters is located at 1 Rue Puech Bérenguier, 81 000, Albi. Papilles Cocktails SAS (hereafter "we") is responsible for the data processing mentioned in this Privacy Policy (hereafter "Policy").

We value your privacy and personal rights and are committed to protecting them under French and European data protection laws.

This Policy aims to inform you about the principles that govern how we handle your personal data and the purposes of the primary data processing performed by Papilles Cocktails SAS.

We invite you to read this Policy carefully and check it regularly for any updates or changes.

2. Legal and Regulatory Framework

We commit to fulfilling our obligations regarding the protection of personal data according to:

  • Law No. 78-17 of January 6, 1978, related to data processing, files, and individual liberties, as amended by Law No. 2018-493 of June 20, 2018;
  • The European Regulation No. 2016/679 of April 27, 2016 (hereafter "Regulation").

3. Personal Data Processing

We process personal data of our customers, prospects, and suppliers during the execution of a contract, for the pursuit of legitimate interests (e.g., commercial interests, service improvement, IT security), and to fulfill our legal obligations for the following purposes:

Customers

  • Managing the business relationship;
  • Opening a customer account;
  • Order management;
  • Delivery organization;
  • Improving customer service;
  • Managing payments, billing, and accounting;
  • Handling overdue payments;
  • Commercial prospecting and communications (websites, blogs, catalog distribution, email marketing);
  • Ensuring IT security and service continuity;
  • Responding to requests concerning individual data rights.

Prospects

  • Commercial prospecting and communications (websites, catalog distribution, email marketing);
  • Creating business statistics;
  • Handling security of goods and people in our premises;
  • Responding to requests concerning individual data rights.

Suppliers

  • Managing the business relationship;
  • Supplier orders and deliveries;
  • Managing supplier payments and accounting;
  • Creating business statistics;
  • Ensuring the security of goods and people in our premises;
  • Responding to requests concerning individual data rights.

In this context, we process data related to your identity (name, email, phone number, postal address, role in the company), economic and professional data (bank account details), and any personal data on related documents.

Generally, this data is processed for no longer than necessary based on the pursued purposes, considering applicable legal retention periods:

  • Customers: five (5) years after the business relationship ends;
  • Prospects: three (3) years after the last contact;
  • Suppliers: five (5) years after the business relationship ends.

Recipients of personal data may include the internal departments of Papilles Cocktails SAS (e.g., management, sales, accounting, IT, marketing), our IT and marketing service providers, transportation partners, banks, our accountant, and credit insurance providers. Some data transfers outside the European Union may occur through our subcontractor Shopify, in which case we ensure adequate protection measures.

4. Security Measures

We are committed to maintaining the confidentiality, integrity, availability, and security of your personal data. Following Article 32 of the Regulation, we implement appropriate technical, logical, and organizational measures to ensure the highest level of security, preventing data loss, unauthorized access, or accidental destruction.

5. Exercising Your Rights

According to applicable law, you have the right to:

  • Access and rectify your personal data;
  • Object to data processing on legitimate grounds;
  • Request the restriction or deletion of your personal data under specific conditions;
  • Request the portability of your data.

For any questions or requests concerning this Policy or the processing of your data, you can contact us:

You also have the right to file a complaint with a supervisory authority, such as the French National Commission on Informatics and Liberty (CNIL), regarding how we process your data.