Privacy policy — Oenolosite
Last updated: 29 October 2026
1. Who processes your data?
The data controller is Clément Boschet, sole trader (entrepreneur individuel, EI), trading as Demat Future, La Boissière Cado, 56380 Monteneuf, France, SIREN 902 052 984 (“Demat Future” or “we”). Contact for any question about your data: contact@getoenolosite.com.
We are responsible for the processing described in section 2: prospecting, trial and account, hosting-provider obligations, security, sales follow-up, content reports and contact requests.
The personal data that you place in your preview (for example the name or photo of a member of your team) is processed by us on your behalf, as a processor, under the annex to the terms of use for the trial: you remain responsible for that data and for the agreement of the people concerned.
2. What data, why, on what basis and for how long?
a) Free trial and preview
| Data | Winery name, preview identifier, contact’s first and last name, business email address, telephone number and winery address if you provide them, content supplied (texts, logo, images), chosen theme, creation and last-activity dates, name of the campaign the visit came from (non-personal parameter) |
| Purposes | Create and display your preview and let you edit it; send you the sign-in link and the reminder before deletion |
| Legal basis | Pre-contractual steps taken at your request (art. 6(1)(b) GDPR) |
| Required fields | At sign-up, all fields are required: without them we cannot create your preview or send you your link. In the editor, the style, title and presentation are required; the story, telephone number, photo and wines are optional |
| Retention | Deleted 10 days after your last activity (last saved change or last sign-in by link), or sooner on request, except data that the law requires us to keep (b below). A sign-up whose link is never opened is deleted 7 days after sign-up, after one reminder. If you launch your website, it is carried over into your contract |
b) Hosting-provider obligations (legal retention)
The French law for confidence in the digital economy (article 6) and Decree no. 2021-1362 of 20 October 2021 require us, as the host of the previews, to keep certain data that makes it possible to identify the author of content put online. This data is used only to answer requests from authorised judicial or administrative authorities, is kept separately, and remains kept after the preview is deleted, for the following periods:
| Category (Decree 2021-1362) | Data we keep | Retention |
|---|---|---|
| Civil identity (article 2), to the extent we collect it | Contact’s first and last name, winery name and postal address, email address, telephone number if provided | 5 years from the end of the trial contract, that is, from the deletion of the preview (automatic or on request) or, if you launch your website, from the end of the publishing contract |
| Account information (article 3) | Preview and account identifier | 1 year from the end of the trial or publishing contract |
| Technical data (article 5) | Connection identifier (your editing session) behind each creation, change or deletion of content, and the protocols used | 1 year from each operation |
The data in article 6 of the decree (content identifier, nature of the operation, author) is kept only when an order made in the cases provided for by law requires it.
Legal basis: legal obligation (art. 6(1)(c) GDPR).
c) Security of the service
| Data | IP address at sign-up and at each content change, technical server logs, result of the anti-robot check |
| Purpose | Prevent abuse (automated creation, spam) and keep the service secure |
| Legal basis | Legitimate interest in protecting the service (art. 6(1)(f)) |
| Retention | 6 months. This period does not apply to data kept under the hosting-provider obligations (b), which follow their own periods |
d) Sales follow-up on previews
| Data | Contact details, preview identifier and address, history of our exchanges |
| Purpose | Contact you again to offer to put your website online |
| Legal basis | Legitimate interest in presenting our offer to a professional who has created a preview (art. 6(1)(f)) |
| Retention | 3 years from collection or from the last contact from you (reply, request), unless you object |
e) Prospecting wineries
| Data | Winery name and address, SIREN number, website address, business email address published by the winery |
| Sources | INSEE’s SIRENE database (public data) and wineries’ websites |
| Purpose | Present our website offer for wineries to you by email, in connection with your professional activity |
| Legal basis | Legitimate interest (art. 6(1)(f)): email prospecting of a professional, on a subject related to their activity, with the right to object at any time |
| Retention | 3 years from collection or from the last contact from you (reply, request for information) |
We write only to business addresses published for the winery’s activity; we set aside those that look personal. Our emails contain no tracking pixel or individualised link: the link to the trial carries only the name of the campaign.
If you object to prospecting, we keep only your email address and the date of your objection in an opt-out list, for 3 years, so as not to contact you again.
f) Content reports
| Data | Name and email address of the person reporting, address of the page, location and reasons for the report, good-faith statement, decision taken and date of the emails sent |
| Purpose | Handle reports and inform of the decision (article 16 of Regulation (EU) 2022/2065 on digital services) |
| Legal basis | Legal obligation (art. 6(1)(c) GDPR) |
| Retention | 1 year from the decision, or from receipt for a report closed without action |
The identity of the person reporting is not disclosed to the winery concerned.
g) Contact form
| Data | Subject of the request, name, email address, telephone number if you give it, message; where applicable, the campaign name and the tracking code of the link that brought you |
| Purpose | Reply to your request and, if it concerns our offers, make you a proposal |
| Legal basis | Pre-contractual steps taken at your request (art. 6(1)(b)) when you ask us about our offers; otherwise, legitimate interest in replying to professionals who write to us (art. 6(1)(f)) |
| Retention | Nothing is kept on our server: the message is sent to us by email and kept in our mailbox for 3 years from our last exchange. Send counters per IP address: 1 hour at most, in memory |
The message is relayed by Brevo and received in our Proton mailbox. You may object to this processing at any time by writing to contact@getoenolosite.com.
3. Who receives your data?
Your data is intended for Demat Future. It is neither sold nor rented. We use the following processors, bound by a processing contract (article 28 GDPR):
| Processor | Role | Data location |
|---|---|---|
| Scaleway SAS | Hosting of the website, previews and data | European Union |
| Brevo (Sendinblue SAS) | Emails related to the trial (sign-in link, reminder) and relay of contact-form messages | European Union |
| Proton AG (Proton Mail) | Prospecting emails and exchanges with you, including contact-form messages | Switzerland |
| Cloudflare, Inc. (Turnstile) | Anti-robot check of the trial and contact forms (IP address and technical information about the browser) | United States |
Two processors handle data outside the European Union:
- Proton AG (Switzerland): Switzerland benefits from an adequacy decision of the European Commission.
- Cloudflare, Inc. (United States): Cloudflare is certified under the EU–US Data Privacy Framework; the transfer relies on the Commission’s adequacy decision of 10 July 2023 for as long as that certification is active. If it ceased, the Commission’s standard contractual clauses provided for in Cloudflare’s data processing agreement would apply.
Data kept under the hosting-provider obligations (2 b) is disclosed only to the authorised authorities that request it.
4. Your rights
You have the rights of access, rectification, erasure, restriction and, in the cases provided for by the GDPR, portability of your data. You may also set guidelines on what happens to your data after your death.
Objection:
- to prospecting: at any time, without having to give a reason — reply “STOP” to one of our emails or write to contact@getoenolosite.com;
- to the other processing based on our legitimate interest (security, sales follow-up, contact requests): on grounds relating to your particular situation; we then stop the processing, unless there are compelling legitimate grounds or we need to defend our rights.
Data kept under a legal obligation (2 b) cannot be erased on request before the end of its retention period.
To exercise your rights: contact@getoenolosite.com. We reply within one month.
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr), the supervisory authority for our establishment, or with the supervisory authority of the Member State where you live, in Portugal the CNPD (www.cnpd.pt).
5. Cookies and trackers
The website oenolosite.com and the previews use only cookies or trackers that are strictly necessary for them to work: remembering the age confirmation, remembering the language you pick in the language menu, your editing session and the anti-robot check (Cloudflare Turnstile, on the trial and contact forms, used only for the security of the service). Being strictly necessary for the service or its security, they are exempt from consent; the personal data they involve is processed as set out in sections 2 c and 3. We use no advertising cookies and no audience measurement that requires consent.
6. Security
We protect your data with appropriate measures: encryption of communications (HTTPS), access restricted to those who need it, hosting in the European Union, separate storage of data kept under a legal obligation, and automatic deletion of inactive previews.
7. Changes
We may update this policy. The date of the last update is shown at the top of the page; in the event of an important change, we will tell you by email if you have a preview in progress.
This policy was written in French and translated into Portuguese and English; if the versions differ, the French version prevails.