Personal data
Privacy policy
Your data belongs to you. Here, in plain words, is what we collect, why, how long we keep it and how to exercise your rights.
Last updated: 16 October 2026
Introduction
Les Coteaux Nantais (hereinafter “Côteaux Nantais”) takes your privacy seriously. This policy explains which personal data we collect through the Côteaux Nantais website and what we do with it, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
- Data controller
- Les Coteaux Nantais
- Address
- 27 rue des Ajoncs, 44120 Vertou, France
Data collected
We only collect the data we need to reply to you and to protect the website:
- Contact form: last name, first name, email address, subject of the enquiry and message. Your message is sent to us by email and routed to the relevant department (sales, quality or human resources); it is not stored on the website.
- Spam protection: on the Contact page, Google’s reCAPTCHA service analyses technical information (IP address, interactions with the page) to tell a visitor from a bot.
- Technical logs: IP address, date and time, pages viewed and browser type, recorded by the server for the security of the website.
The website has no customer account, no orders, no online payment and no newsletter, and uses no audience measurement or advertising tools. We do not sell or rent your data.
Purposes and retention periods
| Purpose | Legal basis | Retention period |
|---|---|---|
| Replying to your enquiries (sales, quality, other) | Legitimate interest in replying to the enquiries we receive, or pre-contractual measures (Art. 6(1)(f) and 6(1)(b) GDPR) | 3 years from the last exchange |
| Reviewing job applications (“Human resources” subject) | Pre-contractual measures (Art. 6(1)(b) GDPR) | 2 years from the last exchange, unless you ask us to delete them |
| Protecting the website against spam and abuse (reCAPTCHA, technical logs) | Legitimate interest (Art. 6(1)(f) GDPR) | 12 months at most |
Recipients of the data
Your data is only available to the Côteaux Nantais departments in charge of your enquiry. It is also processed on our behalf by our technical service providers:
- the website host, Scaleway SAS (servers located in France);
- the provider sending the emails of the form, Mailchimp Transactional (Intuit Inc., United States);
- Google (Google Ireland Limited), for the reCAPTCHA spam protection service.
Some of these providers may process data in the United States. These transfers are covered by the safeguards provided for by the GDPR (the “Data Privacy Framework” adequacy decision or the European Commission’s standard contractual clauses).
Your rights
You have the right to access, rectify and erase your data, to object to and restrict its processing, to data portability, and to give instructions on what happens to your data after your death.
To exercise these rights, write to us by email at contact@coteaux-nantais.com, by post to Les Coteaux Nantais, 27 rue des Ajoncs, 44120 Vertou, France, or through our contact form. We will reply within one month.
If, after contacting us, you feel that your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Cookies
The website only sets one cookie, on the Contact page: a technical session cookie (PHPSESSID), needed to secure the submission of the form and deleted when you close your browser. As it is strictly necessary, it does not require your consent.
On that same page, Google’s reCAPTCHA service may read or set its own cookies for security purposes (see Google’s privacy policy). No advertising or audience measurement cookies are used, and the fonts are served from our own servers.