Last updated: October 2026. This page explains what personal data Vino Veritas collects, why, how long it is kept and how to exercise your rights.

Who is responsible for your data?

HERNANDEZ SASU, which operates the Vino Veritas brand, 4 rue de la Cachette, 69250 Fleurieu-sur-Saône. For any question about your data: contact@vino-veritas.fr.

What data, and why?

  • Orders and delivery: name, addresses, email, telephone, order contents. This data is used to prepare, deliver and invoice your order (performance of the contract).
  • Customer area: login details, order history and invoices, so that you can keep track of your purchases. When we issue you an invoice, an account is automatically created with your email address: you then receive a message inviting you to choose your password, and you can request the deletion of this account at any time (performance of the contract).
  • Invoices: your invoices are issued with our accounting software, sent to your email address and available in your customer area, under “My invoices” (legal obligation and performance of the contract).
  • Age verification: confirmation that you are at least 18 years old, as the sale of alcohol to minors is prohibited (legal obligation).
  • Contact form: name, telephone, e-mail and message, so that we can reply to you (legitimate interest).
  • Newsletter: your email address, only if you subscribe; you can unsubscribe at any time using the link in each mailing (consent).
  • Audience measurement and cookies: only with your consent, obtained through the cookie banner. Details are given in the cookie policy.

Payment

Card, Apple Pay and Google Pay payments are processed by WooPayments (Stripe): your card numbers do not pass through our website and are never stored by Vino Veritas. For a bank transfer, a payment in Gonette or a cheque, we only keep a record of the payment linked to your order.

Who receives your data?

  • Infomaniak (Switzerland), website hosting. Switzerland benefits from an adequacy decision of the European Commission.
  • WooPayments / Stripe, card payment.
  • Boxtal and the chosen carrier (for example Mondial Relay), for shipping: name, address, telephone and e-mail.
  • MailPoet, sending of emails and the newsletter.
  • Analytics tools (Google Analytics, Jetpack), only with your consent.
  • Pennylane, our accounting and invoicing tool, and the authorities, for accounting and tax obligations.

Some of these service providers may process data outside the European Union; these transfers are governed by the safeguards provided for by the GDPR. Your data is neither sold nor rented.

How long?

  • Customer account with no login or order for 3 years: deleted automatically.
  • Orders and invoices: 10 years, the period required by the Commercial Code, then anonymised.
  • Unpaid, failed or cancelled orders: deleted after 30 days.
  • Contact form messages: 3 years after our last exchange.
  • Newsletter: until you unsubscribe, or 3 years without any opening or click.

Your rights

You can request access to your data, its rectification, erasure or portability, or the restriction of its processing, or object to its use, and withdraw any consent given at any time. Write to contact@vino-veritas.fr: we reply within one month. If you believe your rights are not being respected, you can refer the matter to the CNIL (cnil.fr).

Security

The website is fully encrypted (HTTPS). The customer area is password-protected, repeated login attempts are blocked and the website is monitored for known vulnerabilities.