Privacy policy

Papilles Cocktails SAS (Data Controller) is a single-member limited liability company with its headquarters located at 144 Route de Fauch, Albi (81000), and registered with the Albi Trade and Companies Register under the number 920 079 993. Papilles Cocktails SAS is responsible (hereinafter referred to as "we") for certain data processing activities mentioned in this privacy policy (hereinafter referred to as the "Policy").

We place great importance on protecting your privacy and individual freedoms, and we are committed to ensuring this protection in accordance with French and European laws related to the processing of personal data.

This Policy aims to inform you, in particular, of the principles governing how we process your personal data, as well as the purposes pursued by the main processing activities carried out by Papilles Cocktails SAS.

We invite you to read it carefully and to consult it regularly to be aware of any changes or updates made to it.

1. Legal and Regulatory Framework

We are committed to complying with our obligations regarding the protection of personal data under:

  • Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended by Law No. 2018-493 of June 20, 2018;
  • European Regulation No. 2016/679 of April 27, 2016 (hereinafter referred to as the "Regulation").

2. Personal Data Processing Methods

We process the personal data of our clients, prospects, and suppliers in the context of fulfilling contracts through which we have entered into relationships, pursuing our legitimate interests (commercial interests, improving the services offered, IT service continuity, IT security, security of premises and personnel), and meeting our legal obligations for the following purposes:

Clients

  • Management of the commercial relationship;
  • Opening of the client account;
  • Order management;
  • Organization of deliveries;
  • Improvement of customer service;
  • Payment management;
  • Billing management;
  • Accounting management;
  • Monitoring of unpaid invoices;
  • Debt collection;
  • Handling of complaints;
  • Management of commercial prospecting;
  • Management of commercial communication (websites, blog articles, catalog distribution, emailing, sample sending);
  • IT support associated with client account management;
  • Personalized interaction (incoming calls);
  • Business statistics development;
  • IT security management;
  • Management of the security of property and individuals (during presence in our premises);
  • Monitoring of requests to exercise the rights of concerned individuals.

Prospects

  • Management of commercial prospecting;
  • Management of commercial communication (websites, catalog distribution, emailing, sample sending);
  • Business statistics development;
  • Management of the security of property and individuals (during presence in our premises);
  • Monitoring of requests to exercise the rights of concerned individuals.

Suppliers

  • Management of the commercial relationship;
  • Supply management;
  • Supplier order management;
  • Delivery management;
  • Supplier payment management;
  • Accounting management;
  • Personalized interaction (incoming calls);
  • Business statistics development;
  • Management of the security of property and individuals (during presence in our premises);
  • Monitoring of requests to exercise the rights of concerned individuals.

To this end, we process data related to your identity (name, first name, email address, phone number, postal address, job title within the company) and economic and professional data (bank details of the company you work for, credit card data), as well as any personal information appearing on documents associated with the implemented processes.

In this context, except for specific exceptions, these personal data are processed for a duration not exceeding that necessary for the purposes pursued, taking into account the applicable limitation periods, particularly:

  • Clients: five (5) years from the end of the commercial relationship;
  • Prospects: three (3) years from the last contact with the prospect;
  • Suppliers: five (5) years from the end of the commercial relationship.

The recipients of personal data are (strictly considering the pursued purposes):

  • Internal departments of Papilles Cocktails SAS, including management, sales, accounting, IT, marketing, CSR departments;
  • Our IT service providers;
  • Our marketing service providers;
  • Our transport providers;
  • The banks;
  • Our accountant;
  • Our credit insurance and insurance broker.

In the context of these processes, data transfers outside the European Union are carried out by one of the IT service providers, Shopify. When your personal data is transferred outside the European Union, we strive to systematically take all necessary measures to ensure that the recipients guarantee an adequate and equivalent level of protection to national and European regulations, particularly through the use of standard contractual clauses by applying additional technical, organizational, and legal measures to further regulate these transfers.

3. Security Measures

We are committed to maintaining the confidentiality, integrity, availability, and security of your personal data. In accordance with Article 32 of the Regulation, we strive to implement appropriate technical, logical, and organizational measures to ensure the most appropriate level of security against the risks encountered during the processing of your personal data. We also take steps to prevent, as far as possible, any loss, accidental destruction, alteration, and unauthorized access to your personal data.

4. Methods of Exercising Rights

In accordance with applicable law, you have the right:

  • To access and rectify your personal data (right of access and rectification);
  • To oppose the processing of your personal data for legitimate reasons (right of opposition);
  • Within the limits provided by law, to request that the processing of your data be limited or that personal data be deleted (right to limitation and right to erasure);
  • To request the portability of your personal data (right to portability).

For any questions regarding this policy or any requests related to the processing of your data, you can contact us:

Finally, we inform you that you have the right to lodge a complaint with a supervisory authority such as the Commission Nationale de l’Informatique et des Libertés (CNIL) regarding how we process your data.