INTRODUCTION
Our Privacy Policy explains how we collect, use and protect information in relation to Rémy Martin website and digital services (collectively, the “Services”). This Privacy Policy applies to all visitors and users who access the Services.

This website is operated by E. REMY MARTIN & C°, 20 rue de la Société Vinicole, 16100 Cognac.

E. Rémy Martin & Co operates in its capacity of data controller for the purposes of applicable data protection laws and regulations, including the Regulation (EU) 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data (“GDPR”). For the purposes of the website Privacy Policy, E. Rémy Martin & Co is designated by its trademark Rémy Martin.

1. INFORMATION WE COLLECT
Depending on the Services provided by the website and used by you, on your choices and configuration of your terminal (with respect in particular to cookies), personal data concerning you (your “Personal Data”) collected and processed by Rémy Martin mainly includes: your name, date of birth, e-mail address, postal address, telephone number, your preferences and interests and when purchasing products and services your billing and transactional information, your connection logs, and your nationality when required by specific regulations, as well as the information that you may disclose when you contact us.

The Personal Data that is mandatory for Rémy Martin to fulfil the purposes that are described below is marked with an asterisk on the various pages of the website. Should you not fill in these mandatory fields, Rémy Martin may not be able to take care of your demands and/or to provide you the requested services. Other Personal Data is purely optional and allow us to know you better and to improve our communications and services accordingly.

When you visit the website, we may use cookies to collect information about how you use our Services and provide features to you. For more information about our use of cookies, please visit our Cookie policy.

2. PURPOSES OF PROCESSING
We collect and process your Personal Data with your consent and/or as necessary to perform a contract (e.g. to provide products ordered), meet our legal obligations, or fulfil our legitimate interests (notably for marketing purposes, to prevent fraud or to protect the security of our IT systems).

We use and process Personal Data about you for purposes described below:

– to provide the products or services requested;
– to personalize the content of the website, to send you information about our products, services, offers, news and events (newsletters, invitations and other publications) either by e-mail, telephone, contact forms, or post;
– to understand your preferences and interests;
– to make statistics;
– to prevent fraud and ensure compliance;
– to reply to your questions, complaints or orders of documents or services;
– to improve our website and provide technical support.

We will not process your Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you or collect any Personal Data that is not required for the mentioned purposes. For any new purpose of processing we will ask your separate consent. To the extent necessary, we take all reasonable steps to ensure that Personal Data is reliable for its intended use, accurate, complete, and current. We also undertake to collect only the categories of Personal Data that are strictly required for the purposes mentioned above.

3. YOUR RIGHTS
In accordance with applicable data protection laws and regulations, you have a right to request access to, rectification or erasure of your Personal Data, or restriction of processing, and to object to said processing, as well as the right to data portability to the extent applicable, subject to any overriding legitimate grounds that Rémy Martin might invoke to retain your Personal Data.

You may request at any time that we stop sending you information about our offers, news and events by using the opt-out link inserted in each e-mail that we send you.

Moreover, you have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with the GDPR.

You can exercise your rights by using your account settings or by simply writing us at the following address: privacy@remy-cointreau.com. Please keep in mind that in case of a vague request we may engage a discussion to better understand the motivation for the request and require you to prove your identity (for example, by requesting an ID). This is made to ensure that no right of third parties are violated by your request.

4. DATA RECIPIENTS
Your Personal Data shall be processed by Rémy Martin. It shall not be transferred or made accessible to any third party apart from:

1. our service providers (such as providers of hosting and maintenance services or advertising partners);
2. the other entities of the Remy Cointreau group;
3. in case of a change of control, if we sell or otherwise transfer part or the whole of Rémy Martin or our assets to another company (e.g., in the course of a transaction like a merger, acquisition, liquidation) and;
4. to third parties if such disclosure is required by law, by a regulatory provision or by a court ruling, or if this disclosure is necessary to ensure the protection and defense of rights or to prevent harm.

5. TRANSFER OF PERSONAL DATA & SECURITY MEASURES
Rémy Martin, its affiliates, or service providers may transfer information that we collect about you, across borders. If you are located in the European Union, please note that we may transfer your Personal Data to a country that does not have the same data protection laws as your jurisdiction. Any transfer of your Personal Data outside the European Economic Area shall only take place subject to appropriate safeguards being in place, such as standard contractual clauses and other contractual safeguards. You can contact us to obtain a copy of the safeguards implemented to secure data transfers operated outside the European Economic Area.

We use reasonable and appropriate information security safeguards to help keep the information collected through the Services secure and take reasonable steps to verify your identity before granting you access to your account. Among others, we utilize the following security measures:

– Pseudonymization of certain categories of your Personal Data;
– Encryption of your Personal Data in transit and in rest;
– Regular vulnerability scanning and penetration testing;
– Organizational measures (access control, restriction of access);
– Conducting periodical data protection impact assessments and privacy audit.

6. DATA RETENTION
We will retain your Personal Data as long as your account is active or needed to provide you services, and only for as long as necessary in relation with purposes of processing identified in this Privacy Policy. Information we receive about you may be retained for an extended period of time when it is the subject of a legal obligation, an investigation or otherwise to prevent harm.

The Personal Data that is used for the purpose of sending you information concerning the offers, news and events of Rémy Martin shall be kept for a period of three (3) years as of the date on which it was collected or as of your last contact with Rémy Martin. Your Personal Data shall be destroyed within a maximum of 30 days following any request on your part to unsubscribe.

The Personal Data that is collected and processed under the “Contact us” and/or or similar section shall only be kept throughout the duration of the processing of your request. It shall be deleted thereafter.

Finally, the connection logs that are collected, subject to your consent, using the cookies implemented on our website, shall be kept in accordance with applicable laws and regulations for a period of time that does not exceed twentyfour (24) months.

7. CHILDREN’S PRIVACY
Rémy Martin website is not directed to users under the legal age of drinking. If you are younger this legal age, depending of your country, you may not use our Services. If you are a parent or guardian and believe we may have collected information about a child, please contact us.

8. U.S. STATE PRIVACY RIGHTS
You may have certain rights with respect to Personal Information under U.S. State Privacy Laws. Under the California Privacy Rights Act (CPRA) and/or the Virginia Consumer Data Protection Act (VCDPA), these rights have been extended to Personal Information collected, used, and shared between businesses (B2B); however, these rights have not been extended in any other state.  As a result, these rights are limited to consumers, not applicable to individuals in their capacity as employees of businesses that are exchanging personal information between one another.  For purposes of this subsection, the terms “consumer”, “Personal Information”, “categories of Personal Information”, “business purpose”, “third party”, “sell”, and “share” have the meanings ascribed to them respectively in the applicable state law. To the extent provided under applicable laws, you have the right to:

Access and Disclosure. You have the right to send us a request, up to two times every 12 months, that we disclose to you the categories of Personal Information we collected about you, the categories of sources from which we collected your Personal Information, the business or commercial purposes for collecting, selling, or sharing your Personal Information, the categories of third parties to whom we have shared your Personal Information, and the specific pieces of Personal Information we have collected about you, the categories of Personal Information we sold or disclosed. You also have the right to request a portable copy of your Personal Information.

Correction and Deletion. You have the right to send us a request to correct or delete Personal Information we have about you, subject to certain exceptions allowed under applicable law.

Do Not Sell or Share My Personal Information (Opt-out of Targeted Advertising). Under certain U.S. State Privacy Laws, you may be able to request that we not sell, or share for targeted behavioural advertising, your Personal Information. We may sell, share, and use for targeted advertising the following categories of Personal Information to companies that provide marketing and advertising services to us, as well as advertisers that place advertisements on our Services: Device, Internet, and Network Activity Information, IP Address, cookie IDs and Device ID, and General Location Information. This information is shared to help us understand who our users are, so that we can sell ads on the Services and advertise and market the Services to new users. You can request that we not sell or share your Personal Information by sending an email with your request.

Opt-out Preference Signals; Global Privacy Control. You have the right to send us a request to opt-out of the selling and sharing of Personal Information through an opt-out preference signal. If you use an opt-out preference signal, we will apply the opt-out to the device or browser which sends the opt-out preference signal and to any consumer profile associated with that browser or device, including pseudonymous profiles. You can use an opt-out preference signal by downloading a supported browser or extension. If known, we will also treat the opt-out preference signal as a valid request to opt-out of sale/sharing for the user. Some browsers allow you to send a Do Not Track signal, an older request to block tracking of users by third parties. We may not honor these older signals.

Sensitive Personal Information. You have the right to send us a request to limit the use of your Sensitive Personal Information to those uses that are necessary to perform the services reasonably expected by an average person and to certain other permitted business purposes. These business purposes include helping to perform services reasonably expected by users of this Services who have requested such services, ensuring security and integrity (to the extent the use of the information is reasonably necessary and proportionate for these purposes), ensuring physical safety of natural persons (to the extent the use of the information is reasonably necessary and proportionate for these purposes), short-term, transient use (subject to certain conditions), performing certain services, and engaging in certain activities related to quality or safety of our services or products. We do not collect or process Sensitive Personal Information for the purpose of inferring characteristics about you.

No Financial Incentives. We do not offer any programs that would be considered a “financial incentive” for sharing your Personal Information under U.S. state privacy laws.

9. CONTACT US
If you have any questions about this Privacy Policy and if you wish to exercise your rights, please contact our Data Protection Officer at the following email address: privacy@remy-cointreau.com.

Rémy Martin may modify or update this Privacy Policy from time to time, so please review it periodically. We may provide you additional forms of notice of modifications or updates as appropriate under the circumstances.