Privacy Policy

Last updated: September 2026

FREIXENET GRATIEN attaches particular importance to the protection of personal data and to respecting the privacy of users of the Gratien Meyer website.

The purpose of this Privacy Policy is to inform you clearly and transparently about the personal data that may be collected when you browse and use the website, the purposes for which it is processed, its recipients, how long it is kept and the rights you have.

It applies in particular to browsing the website, orders placed on the online shop, bookings for tours and events, requests sent via the contact form and newsletter subscriptions.

1. Data controller

The controller of the personal data collected via the website is: FREIXENET GRATIEN, a simplified joint-stock company (société par actions simplifiée), registered with the Bordeaux Trade and Companies Register under number 410 381 206, represented by Katy Murarotto, Managing Director.

The personal data processing described in this Policy is carried out under the responsibility of FREIXENET GRATIEN.

For any question relating to the protection of your personal data, or to exercise your rights, you may contact:

Fabien Devaud
Site Manager – Quality and HR
FREIXENET GRATIEN
Tel.: +33 6 64 25 32 49
Email: fabien.devaud@freixenetgratien.fr

2. Personal data collected

Depending on how you use the website, different categories of personal data may be collected.

2.1 Orders placed on the online shop

When you place an order or create a customer account, the following data may in particular be collected:

• surname and first name;
• email address;
• telephone number;
• delivery and billing address;
• information relating to the products ordered, amounts, any promotional codes used and purchase history;
• information linked to the customer account, in particular saved addresses and marketing preferences;
• technical data necessary for the shop to function, such as IP address, browser and device used, and session or basket cookies.

Payment information is processed by the Shopify Payments solution. The bank details required for the transaction are processed and secured by the payment provider. FREIXENET GRATIEN does not have access to your full bank card details.

The payment methods offered may include Visa, Mastercard, American Express, Apple Pay and Google Pay.

2.2 Booking tours, tastings and events

Online bookings for tours, tastings and events are managed using the Regiondo solution.

When you make a booking, the following data may in particular be collected:

• surname;
• first name;
• email address;
• telephone number;
• postal address;
• information relating to the tour, event or booking made.

This data is used to record and manage your booking, follow it up and send you the information necessary for it to run smoothly.

2.3 Contact form

When you use the website's contact form, the information you provide is used to process your request and reply to you.

The form is built directly into the website. The information submitted is not stored in a dedicated database and is only sent by email to the relevant recipient within FREIXENET GRATIEN.

2.4 Newsletter subscription

When you subscribe to the Gratien Meyer newsletter, your email address is collected.

This address is used to send you the newsletters and communications you have chosen to subscribe to.

Newsletters are managed and sent using the Brevo solution.

You may withdraw your consent at any time by clicking on the unsubscribe link included in every newsletter you receive.

2.5 Data collected while browsing

Subject to your choices regarding cookies and other trackers, certain technical and browsing information may be collected, in particular:

• browser type and version;
• operating system;
• type of device used;
• screen resolution and language;
• pages viewed and URLs;
• browsing duration and path;
• referring website or page;
• date and time of browsing events;
• session identifier;
• identifier generated by audience measurement cookies;
• approximate geographical location at country, region or city level.

The website uses in particular Google Tag Manager to deploy certain tags and Google Analytics 4 for audience measurement.

For visitors located in the European Union, the United Kingdom or Switzerland, the IP address used by Google Analytics to determine an approximate location is not recorded or stored by GA4. No precise geolocation is enabled.

3. Purposes and legal bases of processing

Personal data is collected and processed only where necessary for a specific purpose.

• Management of orders, deliveries and customer accounts
  Legal basis: performance of the contract.
• Payment management
  Legal basis: performance of the contract.
• Management of bookings for tours, tastings and events
  Legal basis: performance of the contract.
• Handling requests sent via the contact form
  Legal basis: FREIXENET GRATIEN's legitimate interest in responding to requests received or, depending on the nature of the request, the performance of pre-contractual measures.
• Sending the newsletter
  Legal basis: consent.
• Compliance with accounting, tax and regulatory obligations
  Legal basis: legal obligation.
• Operation and security of the website
  Legal basis: FREIXENET GRATIEN's legitimate interest and/or technical necessity, depending on the processing concerned.
• Audience measurement and use of non-essential trackers
  Legal basis: consent, where required.

4. Recipients and service providers

Personal data is accessible only to the persons and service providers who need it for the purposes described in this Policy.

Depending on the services used, it may in particular be shared with:

• the authorised departments of FREIXENET GRATIEN;
• Shopify, used to host and operate the online shop;
• Shopify Payments and the relevant payment providers, to process transactions;
• Regiondo, to manage bookings for tours, tastings and events;
• Brevo, to manage and send the newsletter;
• Google, where you have consented to the use of the relevant audience measurement tools;
• the service providers required to prepare, process and deliver orders;
• more generally, technical service providers whose involvement is necessary for the operation and security of the website.

These service providers have access to data only to the extent necessary to carry out their respective tasks.

5. Data retention period

Personal data is kept only for as long as necessary for the purposes for which it was collected, plus, where necessary, any periods required by legal or regulatory obligations.

Accordingly:

• data required for order management is kept for the duration of the business relationship and then, for documents subject to accounting and tax obligations, for the applicable legal periods, which may be up to 10 years;
• booking data is kept for as long as necessary to process the booking and then, where it constitutes records that must be kept under legal or accounting obligations, for the corresponding periods;
• requests received via the contact form may be kept for up to 3 years from the last contact, unless longer retention is necessary to process the request or to comply with a legal obligation;
• the email address used to send the newsletter is kept until consent is withdrawn and, in the absence of any interaction, for no more than 3 years from collection or from the last contact initiated by the person;
• data associated with Google Analytics is kept in accordance with the tool's settings, within the retention periods configured on the website;
• cookies and other trackers are kept for a period appropriate to their nature and purpose.

Some data may be archived beyond these periods where retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

6. Cookies and other trackers

The website uses cookies and other trackers that are necessary for it to function and, subject to your consent where required, audience measurement or tracking tools.

Consent is managed using the Shopify Customer Privacy solution.

When you first visit the website, a banner allows you in particular to:

• accept cookies and trackers that require consent;
• refuse them;
• manage your preferences.

Cookies that are strictly necessary for the website to function may be placed without your consent where they meet the conditions set out in the regulations.

Other trackers, in particular those used for audience measurement or advertising purposes where subject to consent, are only activated once consent has been obtained.

You may change or withdraw your consent at any time using the cookie management tool available on the website.

7. Data transfers outside the European Economic Area

Some service providers used to operate the website may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, FREIXENET GRATIEN ensures that such transfers are carried out in accordance with the applicable data protection regulations.

Where necessary, these transfers are governed in particular by an adequacy decision of the European Commission, standard contractual clauses approved by the European Commission or any other appropriate safeguard provided for by the applicable regulations.

8. Data security

FREIXENET GRATIEN and its service providers implement appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.

Access to data is limited to the persons and service providers who need it in the course of their duties or the performance of their services.

9. Your rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights, under the conditions set out in the regulations:

• the right of access to your personal data;
• the right to rectify inaccurate or incomplete data;
• the right to erasure of your data;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability, where applicable;
• the right to withdraw your consent at any time where processing is based on consent;
• the right to set out instructions regarding what happens to your data after your death;
• the right not to be subject, under the conditions set out in the regulations, to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

To exercise your rights, or for any question relating to the processing of your personal data, you may contact:

Fabien Devaud
Site Manager – Quality and HR
FREIXENET GRATIEN
Tel.: +33 6 64 25 32 49
Email: fabien.devaud@freixenetgratien.fr

Proof of identity may be requested where necessary to verify the identity of the person making the request.

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), if you consider that the processing of your personal data infringes your rights.

10. Changes to this Privacy Policy

FREIXENET GRATIEN may amend this Privacy Policy, in particular to take account of regulatory or technical changes or changes to the services offered on the website.

The applicable version is the one published on the website on the date it is consulted.

Last updated: September 2026.