Privacy Policy

Last updated: May 19, 2025

1. GENERAL INFORMATION

ALENTI , a brand of ALENTI SAS (hereinafter "we", "us" or "the Company") respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we collect, use, store and protect your personal information when you use our website [Site URL] and our online sales services for French bag-in-box wines.

This policy applies to users residing in France, the United Kingdom, Belgium, the Netherlands, Germany and Luxembourg, and complies with applicable regulations, including the General Data Protection Regulation (GDPR) and the UK GDPR.

Contact details of the data controller:

• Company name: ALENTI SAS

• Address: 73 Allée Kléber 34000 Montpellier

• Email: legal@charleewines.com

• Telephone: 04 11 93 41 92

Data Protection Officer:

• DPO Email: dpo@charleewines.com

2. PERSONAL DATA COLLECTED

2.1 Data collected directly

We collect the following information when you:

Create an account or place an order:

• First and last name

• E-mail address

• Phone number

• Shipping and billing address

• Date of birth (to verify legal drinking age)

• Payment information (encrypted and secure)

Contact our customer service:

• Information contained in your messages

• Trade history

2.2 Data collected automatically

Technical data:

• IP address

• Browser type and version

• Operating system

• Pages visited and time spent on the site

• Approximate geolocation data

• Cookies and similar technologies

Behavioral data:

• Browsing history

• Product preferences

• Purchase history

• Abandoned carts

3. PURPOSES AND LEGAL BASES OF PROCESSING

3.1 Execution of the contract

• Processing and delivery of orders

• Payment and invoicing management

• After-sales service and returns management

• Communication relating to orders

3.2 Legal obligations

• Legal age verification (18 years minimum)

• Retention of invoices and accounting documents

• Compliance with tax obligations

• Fight against fraud

3.3 Legitimate interests

• Improving our services and your user experience

• Statistical analysis and market research

• Site security and fraud prevention

• Commercial communication for existing customers

3.4 Consent (with possibility of withdrawal)

• Direct marketing by email or SMS

• Non-essential cookies

• Sharing with business partners

• Profiling for marketing purposes

4. AGE VERIFICATION

In accordance with national alcohol sales laws, we must verify that you are of legal age to purchase alcohol:

• France, Belgium, Netherlands, Germany, Luxembourg: 18 years minimum

• United Kingdom: Minimum age 18

We reserve the right to request proof of identity upon delivery.

5. DATA SHARING

5.1 Internal recipients

Your data is accessible to members of our team who need to access it for:

• Order processing

• Customer service

• Accounting

• Marketing (with consent)

5.2 External service providers

We share your data with our trusted partners:

Delivery :

• Carriers and delivery services

• Package tracking services

Payment :

• Secure payment service providers

• Anti-fraud organizations

Technical services:

• Web hosts

• Web analytics services

• Marketing automation tools

Marketing services (with consent):

• Email marketing platforms

• Social networks

• Advertising retargeting services

5.3 Competent authorities

In case of legal obligation or to protect our legitimate rights.

6. INTERNATIONAL TRANSFERS

Some of our service providers may be located outside the European Union. In this case, we ensure that:

• The country benefits from an adequacy decision from the European Commission, or

• Appropriate guarantees are put in place (standard contractual clauses, certification)

7. RETENTION PERIOD

8. YOUR RIGHTS

In accordance with the GDPR and the UK GDPR, you have the following rights:

8.1 Right of access

You can request a copy of the personal data we hold about you.

8.2 Right of rectification

You can request the correction of inaccurate or incomplete data.

8.3 Right to erasure (“right to be forgotten”)

You can request the deletion of your data in certain circumstances.

8.4 Right to restriction of processing

You can request the limitation of the processing of your data.

8.5 Right to portability

You can request the transfer of your data to another data controller.

8.6 Right to object

You can object to the processing of your data for reasons relating to your particular situation.

8.7 Right to withdraw your consent

You can withdraw your consent at any time for processing based on it.

How to exercise your rights:

• Email: dpo@charleewines.com

• Mail: ALENTI SAS, 73 Allée Kléber 34000 Montpellier

We will respond to your request within a maximum of one month.

9. COOKIES AND SIMILAR TECHNOLOGIES

9.1 What is a cookie?

Cookies are small text files stored on your device when you visit our site. They allow us to remember your preferences and improve your browsing experience.

9.2 Types of cookies used

STRICTLY NECESSARY COOKIES (no consent required) These cookies are essential for the website to function:

• Maintaining your session and shopping cart

• Legal age verification for the purchase of alcohol

• Security and Fraud Protection

• Remembering your cookie choices

PERFORMANCE COOKIES (consent required) These cookies help us analyze site usage:

• Google Analytics: analysis of traffic and user behavior

• Performance and optimization statistics

• Duration: up to 2 years

FUNCTIONALITY COOKIES (consent required) These cookies improve your experience:

• Remembering your preferences (language, currency)

• Recently viewed products

• Wish List

• Duration: 6 months to 1 year

MARKETING COOKIES (consent required) These cookies enable personalized advertising:

• Facebook Pixel and Google Ads (retargeting)

• Measuring the effectiveness of advertising campaigns

• Ad Personalization

• Duration: up to 1 year

9.3 Managing your preferences

Initial consent: A banner appears during your first visit to collect your consent.

Changing your choices: You can at any time:

• Access the preference center via the "Cookie settings" link at the bottom of the page

• Change your browser settings

• Withdraw your consent for non-essential cookies

Consequences of refusal: Refusing non-essential cookies may limit certain functionalities but does not prevent basic use of the site.

9.4 Third-party cookies and international transfers

Some cookies come from third-party services (Google, Facebook) which may transfer your data to the United States under appropriate safeguards (standard contractual clauses).

9.5 Retention period

• Session cookies: deleted when the browser is closed

• Persistent cookies: stored for the specified duration (maximum 13 months for non-essential cookies)

9.6 Your rights

Data collected via cookies is subject to the same rights as your other personal data (access, rectification, erasure, etc.). Contact us at dpo@charleewines.com to exercise your rights.

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data:

Technical measures:

• Encryption of sensitive data (SSL/TLS)

• Firewalls and intrusion detection systems

• Regular and secure backups

• Secure access and strong authentication

Organizational measures:

• Staff training in data protection

• Incident management procedures

• Strict access controls

• Regular security audits

11. DATA BREACH

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you as soon as possible and at the latest within 72 hours of discovering the breach.

12. MARKETING AND COMMUNICATION

12.1 Transactional Communication

We send you emails related to your orders (confirmation, shipping, delivery) based on the execution of the contract.

12.2 Direct Marketing

With your consent, we may send you:

• Newsletters about our new products

• Personalized promotional offers

• Invitations to events

You can unsubscribe at any time via the link in each email or by contacting us.

13. SOCIAL NETWORKS

If you interact with us through social media, your data may be processed in accordance with the privacy policies of those platforms. We encourage you to review their respective policies.

14. MINORS

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If we discover that a minor has provided us with personal data, we will delete it immediately.

15. CHANGES TO THE POLICY

This policy may be amended to reflect changes in our practices or legislation. Any material changes will be notified to you by email or through a notice on our website at least 30 days before they become effective.

16. CLAIMS

If you believe that the processing of your personal data does not comply with applicable regulations, you can:

1. Contact us directly: dpo@charleewines.com 

2. File a complaint with the competent authority:

17. CONTACT

For any questions regarding this privacy policy or exercising your rights:

ALENTI SAS

• Email: dpo@charleewines.com

• Telephone: 04 11 93 41 92

• Address: 73 allée Kléber, 34000 Montpellier

---

This Privacy Policy is effective as of May 19, 2025 and supersedes any prior version.