Privacy policy

1. Introduction
This Privacy Policy aims to inform users of the Château d’Issan website about how their personal data is collected, used and protected.
Château d’Issan undertakes to respect the confidentiality of personal data and to process it in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the amended French Data Protection Act (Loi Informatique et Libertés).

2. Data Controller
The data controller responsible for the processing of personal data is:
Château d’Issan
Chemin de la Ménagerie
33460 Cantenac – France
Phone: +33 (0)5 57 88 35 91
Email: issan@chateau-issan.com

3. Personal Data Collected
Château d’Issan may collect the following personal data:

First name and last name
Email address
Telephone number (where applicable)
Browsing data (IP address, browser type, pages viewed, cookies)
Any information voluntarily provided via the website forms

This data is collected only when users voluntarily provide it (contact form, newsletter subscription).

4. Purposes of Processing
The personal data collected is used for the following purposes:

Responding to enquiries submitted via the contact form
Managing newsletter subscriptions and distribution
Communicating news related to Château d’Issan (events, wine releases, wine tourism offers)
Improving user experience and website performance
Complying with legal and regulatory obligations

5. Newsletter Subscription
When subscribing to the Château d’Issan newsletter, users provide their email address (and possibly their first and last name).
Newsletter distribution is carried out via the Brevo platform, an email marketing tool compliant with GDPR, acting as a data processor on behalf of Château d’Issan.
The data collected is used exclusively for sending communications related to the activities of Château d’Issan.
Users may unsubscribe at any time by clicking the unsubscribe link included in each email or by contacting Château d’Issan directly.

6. Legal Basis for Processing
The processing of personal data is based on:

The user’s explicit consent (forms, newsletter subscription)
The legitimate interest of Château d’Issan in communicating about its activities
Compliance with legal obligations

7. Data Retention Period
Personal data is retained:

For 3 years from the last contact or last interaction for prospects
Until unsubscription for newsletter subscribers
In accordance with applicable legal obligations for certain data

8. Recipients of Data
Personal data is intended exclusively for:

Château d’Issan
Its technical service providers (website hosting, Brevo email platform), acting as data processors and subject to contractual obligations of confidentiality and security.

Personal data is neither sold, rented nor transferred to third parties.

9. Transfer of Data Outside the European Union
As part of the use of the Brevo tool, some personal data may be processed outside the European Union.
Brevo implements appropriate safeguards in accordance with GDPR requirements (standard contractual clauses, enhanced security measures).

10. Data Security
Château d’Issan implements all appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data and to prevent any unauthorised access, loss or disclosure.

11. Users’ Rights
In accordance with applicable regulations, each user has the following rights:

Right of access to their data
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability

These rights may be exercised at any time by sending a request by email to:
issan@chateau-issan.com
A response will be provided within a maximum period of one month.

12. Cookies
The Château d’Issan website uses cookies to ensure proper functioning, measure audience statistics and improve user experience.
Upon the first visit, an information banner allows users to accept, refuse or configure cookies in accordance with applicable regulations.

13. Changes to the Privacy Policy
Château d’Issan reserves the right to modify this Privacy Policy at any time.
The applicable version is the one published on the website at the time of consultation.