Privacy policy

Who processes your data?

La Truffe française (MGCODB), in Drôme provençale, handles requests at Contact us. Publisher details are available in the legal notice.

MGCODB, SASU.

Necessary information

The contact form uses your email, subject and the details needed for your enquiry. Name and telephone are optional there. A visit request may need a date, group size and organisation name. The professional form also requests the business and contact person’s names; volumes and sizes are optional. Required fields are indicated: without them we cannot handle that request. Do not put health information, identity documents or bank details in messages.

Purposes and legal bases

Quote and visit requests are processed to take steps at your request before a contract; other correspondence relies on our legitimate interest in answering you. Confirmed orders rely on contract performance and invoicing on legal obligations. Site security and abuse prevention rely on our legitimate interest in protecting the service. Optional audience measurement relies on consent. Sending a form does not subscribe you to marketing.

Recipients

People handling your request and the providers listed below receive data relevant to their tasks. For an order, necessary contact details may go to the selected carrier and invoicing records to accounting providers. Stripe is involved only for an enabled payment you request. Google Analytics receives browsing data only with your consent and when measurement is enabled. We do not sell your data.

• Vercel Inc. : Hosting and technical processing of requests: IP address, logs and data passing through forms.
• Gmail (Google) : Email used for correspondence with the House: contact details, message contents and relevant attachments.
• EmailJS Pte Ltd : Delivery of configured forms: contact details, subject and enquiry contents, recipient and reply address.

Retention

Correspondence is retained while handling your request and for the necessary follow-up. For a commercial enquiry without an order, retention does not exceed three years after the last contact initiated by you; a message we send does not restart this period. Sales accounting records are kept for ten years from the end of the financial year. Documents needed as evidence of a contract or dispute may be archived for the applicable limitation period or proceedings. Browser storage periods are detailed in the cookie policy.

Providers and transfers

Processing countries and transfer mechanisms for the providers used are detailed below. The links give access to their official documents and the safeguards they provide.

Your rights

Write to Contact us to request access, correction, erasure, restriction, objection or, where applicable, portability. Erasure does not override statutory retention obligations. You may withdraw consent without affecting earlier lawful processing. You may complain to the CNIL at cnil.fr or the competent supervisory authority in your EU country of residence.

Technical data and security

The host may process IP addresses and request logs to operate, secure and diagnose the site. When payment is available, a rate limiter uses an in-memory hash of the IP address and email. No account is needed to read the guides. Our measurement events contain limited action categories; our code excludes messages, emails, order numbers and URL parameters from those events. This does not make the data handled by the analytics provider anonymous.

Orders, delivery and refunds

If an order is confirmed, necessary data may include your identity, email, telephone, delivery and billing addresses, products, amounts, references and payment status. A withdrawal request uses your identity, email, order reference and affected items. These details serve to fulfil the sale, deliver products, handle the request and meet accounting obligations. When Stripe payment is available, card details are entered with Stripe; our application does not receive the full card number or security code.

Marketing communications

An enquiry, booking or cookie choice is not a marketing subscription. If you ask to receive seasonal news, consent is separate and you may withdraw it at Contact us. You may object to marketing at any time. Refusing marketing does not prevent an enquiry or order.

Handling your rights request

State the right you wish to exercise and the email used in our correspondence so we can find the data. We do not routinely ask for an identity document: further details are requested only if there is reasonable doubt about your identity. We normally respond within one month. If complexity or the number of requests justifies an extension, we tell you within that month; the extension may be up to two further months.

External links and services

Links to Wecandoo, tourism offices or the wine estate open separate services. Information you give them is also governed by their own policies. This policy covers processing by La Truffe française; following a link does not consent to our marketing.

Reviews published on Wecandoo

The site displays short excerpts from public reviews on our Wecandoo listing, with the author name as displayed and publication date. The source is identified. They inform future visitors about past experiences, based on our legitimate interest in presenting our business. Reviews are not collected through a form on this site. If you wrote a reproduced review, you may request correction or removal at Contact us. An older review does not necessarily describe the current season’s arrangements.

Visit sources after consent

When measurement is configured and accepted, ltf_analytics_source stores a source category (search engine, Wecandoo, assistant, other site or unknown) in sessionStorage for the browser session. This category accompanies measurement events. This mechanism does not retain the full previous URL, its parameters or your searches. The storage is cleared when consent is withdrawn. Without a transmitted referrer, a visit cannot be attributed to an assistant.