Privacy Policy
Last updated: 9 September 2026 – Luxembourg
Vinomerum places great importance on the protection of your personal data and respect for your privacy.
This policy explains simply what data we may collect, why we use it, with whom it may be shared, and what your rights are.
Who is responsible for your data?
The data controller is Vinomerum S.à r.l., a company established in Luxembourg, whose full contact details are provided in our Legal Notice.
For any questions regarding your personal data or to exercise your rights, you can contact us at the following address:
What data can we collect?
Depending on how you use our services, we may collect the following:
- your first and last name;
- your contact details: postal address, email address, and phone number;
- information related to your business or professional activity;
- information necessary for the creation and management of your account or your membership in our network;
- information related to your orders, purchases, requests for quotes, and exchanges with Vinomerum;
- information necessary for billing, payment, and delivery;
- your communication preferences ;
- certain technical data related to the use of our website.
We only collect the information necessary for providing our services, managing our relationship with you, and complying with our legal obligations.
When certain data is not collected directly from you, it may come from professional relationships, recommendations, professional events, directories, or publicly accessible sources in a professional context.
Why do we use your data?
We may use your personal data in order to :
- respond to your contact or information requests ;
- prepare quotes and establish a potential business relationship ;
- manage your orders, payments, deliveries, and invoices ;
- manage your account, your membership, or your relationship with Vinomerum ;
- ensure our customer service and follow up on our business relationship ;
- inform you about our wines, services, events, or news when regulations allow us to do so ;
- manage our accounting and comply with our legal, tax, and regulatory obligations ;
- ensure the security of our site and our IT systems ;
- improve our site and our services, particularly when you have consented to the use of audience measurement cookies.
These processes are carried out as necessary because they are required for the performance of a contract or its preparation, to comply with a legal obligation, to pursue our legitimate interests in the context of our activities, or based on your consent when it is required.
When we rely on your consent, you can withdraw it at any time.
Commercial communications
Vinomerum may send you information regarding its wines, services, events, or news in compliance with applicable regulations.
When your consent is necessary, we will ask you for it beforehand.
In situations where regulations allow us to contact you without prior consent, particularly in the context of certain existing professional or commercial relationships, you can object at any time and free of charge to receiving our communications.
Each electronic communication of a commercial nature allows you to easily unsubscribe.
Who do we share your data with?
Your data is accessible only to those who need it in the context of their roles within Vinomerum.
It may also be shared, when necessary for the provision of our services or to meet our obligations, with certain service providers acting on our behalf, including:
- our IT and hosting providers;
- our payment providers;
- our carriers and logistics partners;
- our accounting, legal, or administrative service providers;
- public authorities when the law requires us to provide them with certain information.
These service providers only access the data necessary for the performance of their tasks.
Vinomerum does not sell your personal data.
How long do we keep your data?
We keep your data only for as long as necessary for the purposes for which it was collected and to comply with our legal obligations.
In practice:
- the data necessary for managing your business relationship is kept for the entire duration of that relationship, then archived when necessary to comply with our legal obligations or to defend our rights;
- accounting documents and data that must be kept for tax or accounting purposes may be retained for 10 years;
- data used for prospecting purposes concerning a prospect may be kept for 3 years from the date of collection or the last contact with them;
- data used for prospecting purposes concerning a client may be kept during the business relationship and then, in principle, for 3 years from the end of that relationship;
- data related to cookies are kept for the durations specified in our Cookie Policy.
Some data may be kept longer when necessary to comply with a legal obligation or for the establishment, exercise or defence of legal rights.
Is your data transferred outside the European Economic Area?
We prioritise the processing of your data within the European Economic Area.
However, some of our service providers may process data from countries outside this area.
When this occurs, we ensure that these transfers are carried out in accordance with applicable regulations, notably based on an adequacy decision from the European Commission or appropriate safeguards.
What are your rights?
In accordance with applicable regulations, you have the following rights:
- the right of access to your data;
- the right to rectify inaccurate or incomplete data;
- the right to erasure of your data when legal conditions are met;
- the right to restrict processing;
- the right to object, particularly to the use of your data for direct marketing purposes;
- the right to data portability for certain of your data;
- the right to withdraw your consent at any time when processing is based on that consent.
You can exercise these rights by contacting us at:
To protect your data, we may ask you for additional information when there is reasonable doubt about your identity.
We respond to your requests within the timeframes set by applicable regulations.
Security of your data
We implement appropriate technical and organisational measures to protect your data against, in particular, loss, unauthorised access, disclosure, alteration or destruction.
Access to personal data is limited to individuals and providers who need it in the course of their duties.
Cookies
Our site uses cookies and similar technologies.
You will find more information about their use and how to manage your preferences in our Cookie Policy.
Modification of this policy
We may modify this policy to reflect changes in our services or regulations.
The applicable version is the one published on our website, with the date of the last update at the top of this page.