Who is responsible for your data?
SCEV Domaine de Cardon, registered office 9 place de la Mairie, 71640 Dracy-le-Fort, France (estate: 2 rue de la République, 71150 Rully). For any question about your data: contact@domaine-de-cardon.fr.
What data do we collect, and why?
Contact form: name, email address, phone number (optional) and your message, to answer your request (visit, tasting, order, information). Legal basis: our legitimate interest in answering people who write to us. Retention: 3 years after the last exchange.
Customer account and orders: first and last name, billing and delivery addresses, email, phone, order history. This data is used to manage your account, prepare and deliver your orders, and meet our accounting obligations. Legal basis: performance of the sales contract and our legal obligations. Retention: for the duration of the business relationship, then 3 years for an inactive account; invoices are kept for 10 years (accounting obligation).
Payment: handled by Up2pay e-Transactions (Crédit Agricole). We neither receive nor store your bank card details.
Age check: since alcohol may not be sold to minors, viewing the wine pages requires confirming that you are of legal drinking age. Only this confirmation is remembered, in a 90-day cookie.
Audience measurement and advertising: only if you accept them in the cookie banner. Details of the cookies, their duration and how to change your mind are in our legal information (section 8).
Who receives your data?
The Domaine staff who handle your request or order, and our service providers, each for their own part:
- OVH (website hosting, in France);
- Crédit Agricole, Up2pay e-Transactions (payment);
- the carrier delivering your order;
- Google (reCAPTCHA protection of the contact form; Google Analytics and Google Ads if you accept them);
- Meta (measurement of our Facebook and Instagram ads, if you accept it).
Google and Meta may process some data in the United States, under the EU-US Data Privacy Framework. We never sell or rent your data.
Your rights
You can ask to access, correct or delete your data, to restrict its processing or to receive it in a portable format, and you can object to its use. Write to us at contact@domaine-de-cardon.fr; we reply within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Security
The site is served over HTTPS, access to the administration is protected and restricted, and the site is backed up regularly.
Last updated: 29 October 2026.
