Supplier registration privacy notice

Who is responsible

SAS Wine Pilgrimage, 6 Place Bouqueyre, 33330 Saint-Émilion, France, is responsible for this processing. Contact: [email protected].

What we collect

Your name, verified email, business name and type, country, location and description of experiences; your website and phone number are optional. We retain application revisions, status, decisions and review correspondence. Required fields let us create your account and assess your application; optional fields can be left blank.

We also store protected password records, sessions, verification information, the notice version presented during registration or submission, and technical security records. Do not include identity documents, bank details or sensitive personal information in your application description.

Why we use it

We administer the account service you request and use our legitimate interests in assessing business partnerships and protecting the service to review applications, communicate with you and prevent misuse. Our team reviews applications; approval is not decided solely by an automated system. Your application is not a public traveler listing.

Verification, reset and application-update emails support your request. Registration does not subscribe you to marketing, and the notice record is not marketing consent.

Access and providers

Access is limited to authorized staff and providers supporting hosting, maintenance, security and email. Application infrastructure uses Infomaniak hosting in Switzerland. Resend delivers account and application emails and stores customer data in the United States, including message content and delivery logs. Its Ireland sending region does not make that storage European.

Resend’s published data-processing terms include EU Standard Contractual Clauses for international transfers. Contact us for information about providers and applicable safeguards. Its standard email/log retention is 30 days, with different enterprise arrangements possible; this does not delete our own email records or historical copies.

Application and account review

Unsuccessful or withdrawn applications are reviewed for archiving after 12 months from the final decision or withdrawal. Incomplete or unanswered applications are reviewed after 12 months from your last meaningful contact; automated reminders do not restart that period. Approved application-only information is reviewed after 12 months from approval, while information needed for the supplier relationship continues to support it.

Our unused application-only account policy is closure after 24 months without meaningful activity, with an email warning and 30 days to sign in and keep the account active. Accounts used for bookings or a supplier relationship are handled separately. Automatic warnings and closure are currently disabled.

Historical records and backups

Archiving an application or closing a login does not erase all personal information. Earlier details can remain in database transaction history and backup copies after they are no longer accessible through ordinary account or application screens. Access to historical copies is restricted to authorized technical or recovery operations. There is currently no automatic expiry for transaction history; these actions are not complete deletion or irreversible anonymization.

Where a documented legal obligation or a particular dispute requires information, access is restricted to that purpose. We assess rights requests separately and explain applicable limits; account closure alone is not a complete response to an erasure request.

Security records and cookies

Our operational/security log policy sets a maximum of 90 days, with shorter periods where configured. This is separate from retained transaction history, backups and providers’ own administrative records.

Necessary cookies support sign-in and security. The account session normally lasts up to seven days and can renew with use; verification links normally expire after one hour. Signing out revokes that session. This notice does not authorize optional analytics or marketing cookies.

session_wp

The website also sets a separate session_wp identifier cookie for up to 100 days. It does not grant account access.

Your rights

Contact [email protected] to request access, correction, erasure or restriction, to object to legitimate-interest processing, or to request portability where applicable. We may ask for proportionate information to confirm your identity. We will explain limits arising from legal obligations or legal claims. You can also complain to the French data-protection authority, the CNIL.