In force on: 21/04/2026 — v1.0
This privacy policy describes how earl walczak pere et fils collects, uses, stores and protects your personal data when you use the website https://champagne-walczak.fr/, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the amended French Data Protection Act no. 78-17 of 6 January 1978.
1. Data controller
The controller of personal data processing is:
earl walczak pere et fils
Registered office: 7 rue de la presle
SIRET: 43211207600018
GDPR contact email: contact@champagne-walczak.fr
Website: https://champagne-walczak.fr/
2. Data collected and purposes
The personal data collected depends on your use of the website:
Orders
- Data collected: surname, first name, postal address, email, telephone, payment data (processed by the payment provider)
- Purpose: processing and tracking of orders, invoicing, delivery
- Legal basis: performance of the contract (article 6.1.b of the GDPR)
- Retention period: 10 years (accounting obligations — article L.123-22 of the Commercial Code)
Customer account
- Data collected: surname, first name, email, password (encrypted), address, order history
- Purpose: management of the user account and the customer relationship
- Legal basis: performance of the contract (article 6.1.b of the GDPR)
- Retention period: duration of the commercial relationship + 3 years
Customer reviews
- Data collected: name or pseudonym, email, content of the review
- Purpose: publication of verified reviews, improvement of services
- Legal basis: legitimate interest (article 6.1.f of the GDPR)
- Retention period: duration of publication of the review
Browsing data (automatic collection)
- Data collected: IP address, browser type, operating system, pages visited, date and time of connection
- Purpose: ensuring the technical operation of the website, security, traffic statistics
- Legal basis: legitimate interest (article 6.1.f of the GDPR)
- Retention period: 1 year (technical logs)
3. Hosting
The personal data is hosted by:
Hidora S.A.
Rue des Charmilles, 8, 1203 Geneva, Switzerland
Telephone: +41 22 552 14 14
Email: contact@hidora.com
Registration: CH-660.2.661.016-5
Switzerland benefits from an adequacy decision of the European Commission dated 26 July 2000, guaranteeing a level of data protection equivalent to that of the EU.
4. Security measures
earl walczak pere et fils implements the following technical and organisational measures to protect your personal data:
- Encryption of communications via HTTPS / TLS 1.3
- Encryption of passwords (bcrypt / argon2)
- Daily automatic backups at the host
- Web application firewall (WAF)
- Security monitoring (SIEM)
- Regular security updates
- Restricted access to data (strong authentication for the technical team)
- Access logging kept for 1 year
5. Subcontractors and recipients
Your data may be passed on to the following subcontractors, all subject to confidentiality and security obligations compliant with the GDPR:
| Subcontractor | Role | Country |
|---|---|---|
| Hidora S.A. | Hosting | Switzerland |
| Zetruc | Technical maintenance | France |
| Google LLC | Analytics (GA4) | United States |
| mailjet | Emailing | — |
| PayPlug | Online payment | France |
| Meta Platforms | Advertising (Facebook/Instagram Pixel) | United States |
| Google LLC | Advertising (Google Ads) | United States |
| Google LLC | Security (reCAPTCHA) | United States |
| Google LLC (YouTube) | Embedded videos | United States |
6. Data transfers outside the EU
Some of our subcontractors are located outside the European Union. These transfers are governed by the following safeguards:
- Switzerland (Hidora): adequacy decision of the European Commission dated 26 July 2000.
- United States: EU-US Data Privacy Framework (DPF), adopted by the European Commission on 10 July 2023 (adequacy decision C(2023) 4745), and/or the European Commission’s standard contractual clauses (SCCs).
7. Cookies
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. In accordance with the ePrivacy Directive and the recommendations of the CNIL (the French data protection authority), we use the following categories of cookies:
Strictly necessary cookies
These cookies are essential for the operation of the website (session, security, cookie preferences). They do not require your consent.
Analytical / audience-measurement cookies
These cookies make it possible to measure the website’s traffic and performance:
- Google Analytics 4: audience measurement, browsing reports. Duration: 14 months maximum.
Advertising / targeting cookies
These cookies are used to display personalised advertising and measure its effectiveness:
- Meta Pixel: Facebook and Instagram conversion tracking.
- Google Ads: conversion tracking and remarketing.
Cookie retention period
In accordance with the recommendations of the CNIL, cookies have a maximum lifespan of 13 months. Your consent is renewed each time they expire.
Managing your preferences
On your first visit, a consent banner allows you to accept, refuse or customise the cookies placed. You can change your preferences at any time by clicking the “Manage cookies” link at the bottom of the page.
8. Your rights
In accordance with the GDPR (articles 15 to 22), you have the following rights over your personal data:
- Right of access (article 15): obtain confirmation that data concerning you is being processed and receive a copy of it.
- Right of rectification (article 16): have inaccurate or incomplete data corrected.
- Right to erasure (article 17): request the deletion of your data, subject to legal retention obligations.
- Right to restriction (article 18): request the suspension of the processing of your data in certain cases.
- Right to object (article 21): object to the processing of your data, in particular for commercial prospecting purposes.
- Right to portability (article 20): receive your data in a structured and commonly used format.
- Right to withdraw your consent at any time, where the processing is based on consent.
- Post-mortem directives: set directives regarding the fate of your data after your death (article 85 of the French Data Protection Act).
To exercise these rights:
Write to us at: contact@champagne-walczak.fr
We undertake to respond within one month of receiving your request. Proof of identity may be requested in the event of reasonable doubt about your identity.
9. Complaint to the CNIL
If you consider that the processing of your personal data constitutes a breach of the GDPR, you have the right to lodge a complaint with the French data protection authority (Commission Nationale de l’Informatique et des Libertés, CNIL):
CNIL
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Telephone: 01 53 73 22 22
Website: www.cnil.fr
10. Personal data breach
In the event of a personal data breach likely to create a risk to your rights and freedoms, earl walczak pere et fils undertakes to:
- Notify the CNIL within 72 hours of becoming aware of it (article 33 of the GDPR);
- Inform the persons concerned as soon as possible if the breach is likely to create a high risk to their rights and freedoms (article 34 of the GDPR).
11. Changes to the policy
earl walczak pere et fils reserves the right to modify this privacy policy at any time. The version in force is the one accessible on the website. In the event of a substantial change, a notification will be displayed on the website.
Date of last update: 21/04/2026.
