PRIVACY POLICY
This is a translation provided for convenience. In case of discrepancy, the French version prevails.
Effective date: 27/09/2026
This policy explains what personal data vinyaqui.com collects, why, who it is shared with, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
Data controller
The website vinyaqui.com is published by Julien Cappiello, sole trader (SIRET 52774944400032), 26 rue Lulli - 66000 Perpignan, France.
Contact for any question about your data: contact[at]vinyaqui.com
Data collected and purposes
Booking an activity
When you book a tour, a tasting or any other activity, we collect: last name, first name, email address, phone number, postal address, number of participants, chosen date and time slot, and any special requirements you mention.
- Purpose: to process the booking, send you the confirmation and reminders, allow the wine estate to welcome you, and handle cancellations and refunds.
- Legal basis: performance of a contract (Article 6.1.b GDPR).
- Recipients: the partner wine estate organising the activity receives your last name, first name, email address, phone number, the number of participants and your special requirements, so that it can welcome you. It may not use them for any other purpose.
Payment
Payment is processed by Stripe (Stripe Payments Europe Ltd.). Your card details are entered directly with Stripe: vinyaqui.com never receives or stores them. We only keep the transaction reference, its amount and its status.
- Legal basis: performance of a contract; accounting obligations (Article 6.1.c).
User account
If you create an account: name, email address, password (stored in encrypted form, never in plain text), and, if you sign in with Google, your Google account identifier.
- Purpose: to give you access to your bookings, reviews, gift cards and balance.
- Legal basis: performance of a contract.
Gift cards
Purchaser's email address, recipient's name and email address, personal message.
- Purpose: to send and manage the gift card.
- Legal basis: performance of a contract.
Reviews
Rating, comment and name displayed publicly with the review you post after an activity.
- Legal basis: performance of a contract and legitimate interest in informing other visitors (Article 6.1.f).
Contact form
Name, email address and the content of your message.
- Purpose: to reply to you.
- Legal basis: legitimate interest.
Newsletter
Email address, only if you sign up. You can unsubscribe at any time using the link included in every email.
- Legal basis: consent (Article 6.1.a).
Partner estates
For registered professionals: identity of the representative, contact details, information about the estate and its activities, SIRET number. The bank details and identity documents required to receive payments are collected and verified directly by Stripe Connect; vinyaqui.com has no access to them. The partner may receive booking notification text messages (SMS).
- Legal basis: performance of the contract concluded with the partner; legal obligations.
Security and logging
To protect the website against fraud and abuse, we record the IP address and browser associated with certain actions (signing in, changing data in the personal or administration area). Forms are protected by Google reCAPTCHA, and technical errors are reported to a monitoring tool (Sentry) so they can be fixed.
- Legal basis: legitimate interest in ensuring the security of the service.
Cookies and audience measurement
Strictly necessary cookies (session, form security, remembering your language and your cookie choice) are set without consent.
Audience measurement (Google Analytics, via Google Tag Manager) and interactive maps (Google Maps) are only enabled after you give your consent in the cookie banner. If you refuse, these services are not loaded. You can change your choice at any time by deleting your browser's cookies for this website: the banner will reappear.
Processors
Your data is processed by the technical service providers that are strictly necessary for the service to operate:
| Provider | Role |
|---|---|
| o2switch (France) | Hosting of the website and database |
| Cloudflare | Content delivery network and protection against attacks |
| Stripe | Payments, refunds and payouts to estates |
| Email delivery provider | Booking, account and gift card emails |
| Mailchimp (Intuit) | Newsletter |
| Audience measurement, maps, reCAPTCHA, sign-in with Google | |
| Sentry | Technical error monitoring |
| SMS gateway | Booking notifications to partner estates |
Some of these providers (Stripe, Cloudflare, Mailchimp, Google, Sentry) may process data outside the European Union, in particular in the United States. These transfers are governed by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.
Your data is never sold or rented.
Retention periods
- Bookings and invoices: 10 years, under accounting obligations.
- User account: as long as the account is active; deleted or anonymised after 3 years of inactivity.
- Contact form messages: 3 years after the last exchange.
- Newsletter: until you unsubscribe.
- Security logs: 12 months maximum.
- Audience measurement cookies: 13 months maximum.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions regarding what happens to your data after your death.
To exercise these rights, write to contact[at]vinyaqui.com. We reply within one month. Proof of identity may be requested if there is reasonable doubt about your identity.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority) (www.cnil.fr).
Changes
This policy may be updated to reflect changes to the service or to the regulations. The effective date shown at the top of the page indicates the latest version.