Logo

PRIVACY POLICY

BDM (BRASSERIE DISTILLERIE DE MONTMIRAIL)

PREAMBLE

BDM (Brasserie Distillerie de Montmirail) attaches great importance to the protection of your personal data and the respect of your privacy. The purpose of this Privacy Policy is to inform you about how we collect, use, and protect your personal data when you browse our website, use our contact form, or make online purchases, in accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and the amended French Data Protection Act of January 6, 1978.

ARTICLE 1 – DATA CONTROLLER AND PUBLISHER

The data controller responsible for the personal data collected on the website is:

  • Company name: BDM (BRASSERIE DISTILLERIE DE MONTMIRAIL)
  • Legal form: SAS with a share capital of €50,000
  • Registered office: 13 RUE DE LA RIVIERE, 72320 VIBRAYE
  • RCS: 881 990 006 Le Mans
  • VAT Number: FR53881990006
  • Email: contact@brasseriedemontmirail.com
  • Phone: +33 (0)7 83 81 28 80
  • Publication Director: Nicolas Krafft

ARTICLE 2 – DATA COLLECTED AND PURPOSES

We collect your personal data only in the following situations:

2.1. Online Store Purchases (Guest Checkout) When placing an order without creating an account, we collect only the data strictly necessary for fulfilling the sale:

  • Identity: First name, last name.
  • Contact details: Email address, phone number, billing address, and shipping address / selected Mondial Relay pick-up point.
  • Order details: Purchased products, transaction amount.
  • Payment data: Financial transactions are processed directly and securely by our service provider, Stripe. No banking details (card numbers, CVV codes) are stored on or processed through our servers.

Purposes and legal bases:

  • Performance of the contract of sale (Art. 6.1.b of the GDPR): Order processing, online payment, package preparation, shipping, and delivery tracking.
  • Legal obligations (Art. 6.1.c of the GDPR): Invoicing, accounting, transaction records, and legal guarantee management.

2.2. Contact Form When you contact us via the website's contact form, we collect your name, email address, and message content solely to process and respond to your inquiry (legal basis: legitimate interest / Art. 6.1.f of the GDPR).

ARTICLE 3 – SUB-PROCESSORS AND RECIPIENTS OF DATA

Your personal data is never sold, rented, or transferred to third parties for commercial or advertising purposes.

Data is shared exclusively with technical service providers strictly necessary for operating our services:

  • Stripe: Secure online payment service provider.
  • Sendcloud and Mondial Relay: Logistics and transport providers for parcel delivery, pick-up point distribution, and tracking.
  • Web hosting and technical infrastructure: Service providers ensuring the secure hosting of our website and database.

These service providers are bound by strict obligations of confidentiality and security in compliance with the GDPR.

ARTICLE 4 – DATA RETENTION PERIODS

  • Order and delivery data: Retained for the duration necessary to fulfill the order and handle legal warranties (2 years).
  • Accounting data and invoices: Retained for a mandatory statutory period of ten (10) years from the end of the fiscal year, pursuant to Article L. 123-22 of the French Commercial Code.
  • Contact form data: Retained for a maximum of three (3) years from our last contact at your initiative.

ARTICLE 5 – COOKIES AND TRACKERS

Our website uses exclusively cookies that are strictly necessary for the technical operation of the online store:

  • Shopping cart and session management cookies.
  • Security and fraud-prevention cookies linked to the Stripe payment integration.

In accordance with CNIL guidelines, these technical cookies essential for providing the service explicitly requested by the user are exempt from prior consent. No advertising, targeting, or third-party behavioral analytics cookies are placed on your device.

ARTICLE 6 – DATA SECURITY

We implement appropriate technical and organizational security measures (SSL/TLS encryption, restricted access, firewalls) to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

ARTICLE 7 – YOUR RIGHTS REGARDING YOUR DATA

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): Obtain confirmation of whether your data is being processed and receive a copy.
  • Right to rectification (Art. 16 GDPR): Request the correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR): Request the deletion of your personal data (excluding accounting records whose retention is legally mandated).
  • Right to restriction (Art. 18 GDPR) and Right to object (Art. 21 GDPR): Request the suspension of or object to certain processing activities.
  • Right to data portability (Art. 20 GDPR): Receive your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, you may contact us at:

If you believe, after contacting us, that your rights have not been respected, you have the right to lodge a complaint with the competent supervisory authority: CNIL (Commission Nationale de l'Informatique et des Libertés) 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, France Website: https://www.cnil.fr

ARTICLE 8 – APPLICABLE LAW

This Privacy Policy is governed by French law. In the event of a dispute, and in the absence of an amicable settlement, French courts shall have exclusive jurisdiction.