PERSONAL DATA PROCESSING POLICY

SAS BEYIM under the trade name Golonya, 204 Avenue de Colmar 67100 Strasbourg, registered in the Strasbourg Trade and Companies Register under number 909 824 732, hereinafter referred to as ‘Seller’.

SAS Beyim, hereinafter referred to as Beyim or Golonya, sells premium spirits, primarily Raki, and accessories on its website.
Within the framework of its activities, Golonya undertakes to comply with the legislation in force in France and throughout the EU, in particular EU Regulation 2016/679 on general rules for the protection of personal data, which aims to ensure the protection, confidentiality and security of personal data of service users, potential users and website visitors within the framework of the collection and processing of personal data.

Your personal data is collected, processed and used exclusively in accordance with legal provisions. Our processes are designed to ensure that data protection requirements are taken into account and that personal data are anonymised in such a way that the identity of the data subject cannot be identified or can no longer be identified, without compromising the agreed purpose. Golonya uses your personal data for the technical administration and improvement of this website, customer and user management and for marketing purposes to inform you about our products and services.

Data is collected on the website https://www.Golonya.store/. This personal data is used, in particular, to ensure the smooth processing and delivery of your order in accordance with our production and trade policy and our general terms and conditions of sale.

WHAT KIND OF PERSONAL DATA IS PROCESSED BY GOLONYA?

In accordance with Article 4, 11) of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 and Article 2 of Law No. 78-17 of 6 January 1978 on Data Processing, Data Files and Personal Freedoms, as amended by Law No. 04-801 of 6 August 2004 and Law No. 18-493 of 20 June 2018, personal data is any information relating to a natural person who is directly or indirectly identified or identifiable.

Golonya processes your personal data collected directly from you or resulting from the use of the website, in particular through:

Contact form
Online ordering process
Subscription to our newsletters or surveys
Any remote ordering tool.

Golonya may also receive data collected from you by a third party acting on your behalf or with your consent, especially when you request information or participate in social networks.

Golonya may process the following types of data:

Identity data: surname, first name, company name, email address, postal address, telephone number, etc.

Financial data: payment instruments, invoices, payment history (outsourced to a secure platform)
Ordered products and services
Information on quantities, recommendations on storage, use and nicotine levels
Technical data: browsing data, connection logs in your customer account, etc.

Complaints and possible disputes.

When personal data is collected, you will be informed whether it is mandatory or optional. Where applicable, failure to provide personal data provided as mandatory may make it impossible to process your order or request.

The processing of your personal data is carried out in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the French Data Protection Act.

In relation to the fulfilment of contractual obligations (RGPD Article 6 paragraph 1 b):

Personal data is processed in connection with the online sale of alcoholic beverages and accessories, as well as the delivery of the products sold by post.

All our products are described in detail on the website. You can read more about the data processing purposes in the general terms and conditions and the legal notice.

As part of the balancing of interests (RGPD Article 6 paragraph 1 f):
If necessary, we process your data beyond the actual performance of the sales contract in order to protect our interests. This includes monitoring and optimizing the needs analysis processes for direct customer communication (sending targeted promotions), advertising or market and opinion research purposes, unless you object to your data being used for this purpose, assertion of legal rights and defense in the event of legal disputes, ensuring IT security and the functioning of the Golonya website, prevention and clarification of crimes at the behest of a public authority and measures for the development of the business and products offered by Golonya.

Based on your consent (Article 6 paragraph 1 a of the GDPR):
If you have consented to the processing of your personal data for specific purposes (e.g. the evaluation of data for marketing purposes), the lawfulness of such processing is ensured based on your consent. The consent given can be revoked at any time. Revocation of consent does not affect the lawfulness of the data processing carried out up to the revocation.

For legal reasons (Article 6 paragraph 1 c GDPR) or in the public interest (Article 6 paragraph 1 e GDPR):
This includes, for example, identity verification, the ability to bind the client company (in the case of professional clients who are legal entities), etc. Unless further explained below, no personal data is processed in principle when using this website, i.e. no data is stored, changed or transmitted to third parties.

HOW LONG DO WE STORE YOUR PERSONAL DATA?

Your data is stored for the following period:

Necessary for the fulfillment of the purposes specified above,
Defined in accordance with the legal retention obligations,
Legal limitation periods.

The retention periods for personal data are applied based on the following criteria:

Processing purpose Storage period
Management of potential customer files Maximum 3 years
Management of customer files Duration of the commercial relationship + 3 years

Times required to prove a right or contract: statute of limitations in legal and commercial matters 5 years
Obligation to keep books and documents created during commercial activities: 10 years from the end of the fiscal year.
Storage of contracts concluded by electronic means: 10 years from delivery or service
Exercise of the right of access or correction 1 year
Exercise of the right of objection Storage of identity documents for 3 years
Contracts concluded between professionals Statute of limitations for lawsuits between professionals for goods and services provided 5 years
Management of orders, deliveries, invoicing Accounting documents and supporting documents 10 years
Audience measurement statistics 13 months
Connection data 13 months
Newsletter management Until unsubscribe.
Storage of credit card numbers No credit card data, payment via a secure platform
Credit card visual cryptogram (CVV2) No credit card data, payment via a secure platform
Management of the opposition list At least 3 years from registration on the list Legal limitation 5 years
Management of recruitment files (applicable in the event of recruitment) Storage of data for 24 months after the last contact with the candidate

YOUR RIGHTS

Any person affected by the processing of personal data has the following rights:

Information (§ 34 BDSG, Article 15 RGPD),
Correction (§ 16 RGPD),
Deletion (§ 35 BDSG, Article 17 RGPD),
Restriction of processing (§ 18 RGPD),
Data transferability (§ 20 RGPD) and
cancellation (§ 21 GDPR).

However, restrictions apply to the right to information and deletion (§ 23 GDPR). There is also a right of objection to a competent data protection supervisory authority (§ 77 RGPD).

YOUR OBLIGATION TO PROVIDE DATA

As part of your request for the completion of an order, the creation of a customer account or a request for information made on the site, you must provide us with personal data that is necessary for the fulfilment of contractual obligations in connection with this or that we are legally obliged to collect. Without this data, we cannot conclude or perform this contract or the exercise of your legal rights (e.g. guarantees) would be impaired.

AUTOMATED DECISION-MAKING AND USE OF THE SITE

We do not use fully automated decision-making for the purpose of concluding and performing the contract in accordance with Article 22 GDPR. If we use such procedures in individual cases, you will be informed separately to the extent required by law. In some cases, we process your data automatically to evaluate certain aspects of your use of our website.