This privacy policy (the "Policy") sets out the policy of Établissements Nicolas SA and its subsidiary Nicolas Direct SARL (hereinafter "Nicolas", "we", "our") regarding personal data and cookies.

This Policy is intended to inform you of the conditions under which Maison Nicolas collects your personal data ("personal data"), the reasons for which this data is collected, how it is used and your respective rights. It applies to all information provided by you or collected by Maison Nicolas during your interaction(s) with us.

When we refer to our Platform, we mean any of the digital and/or physical channels and/or means you may use to interact with us: the online store www.nicolas.com (the "Site"), Maison Nicolas stores, post, email or telephone.

1. Data controllers

1.1 Online sales

For online sales (Internet stock) and the administration of the Site, the joint controllers of your data are:

• Nicolas Direct SARL, with share capital of 122,000 euros, registered with the Créteil Trade and Companies Register under SIREN number B 343 093 464, whose registered office is located at 1, Rue des Oliviers 94320 Thiais;
• Établissements Nicolas SA, a French public limited company (Société Anonyme) with share capital of 1,921,152 euros, whose registered office is located at 1 rue des Oliviers 94320 Thiais, registered with the Créteil Trade and Companies Register under SIREN number 542 066 238.

1.2 Click & Collect and telephone purchases

For the online Click & Collect service (your store's stock), which allows you to order products, pay for them online and then collect them from your store, and for the telephone purchase service with online payment, the controller of your data is:

• Établissements Nicolas SA, a French public limited company (Société Anonyme) with share capital of 1,921,152 euros, whose registered office is located at 1, rue des Oliviers 94320 Thiais, registered with the Créteil Trade and Companies Register under SIREN number 542 066 238.

2. Data Protection Officer (DPO)

In accordance with applicable regulations, the law firm POGGI Avocats IT, represented by Ms Anne-Sophie Poggi, attorney at the Paris Bar (avocat à la Cour), 33 avenue de l'Opéra 75002 Paris, aspoggi@poggiavocats.com, has been appointed as Data Protection Officer (DPO).

3. Data concerned

The personal data that we collect or that you choose to provide to us includes in particular:

• Identification data: your first name, surname, title, telephone numbers, delivery/billing address, email address;
• Contractual and payment data: payment card data, data relating to your orders or returns;
• Data relating to your online or in-store purchases: date of purchase, store address, products purchased, basket amount;
• Data on your interactions with our Site (if you are logged in to your account): pages visited, abandoned baskets, etc.;
• Data collected via cookies and trackers:
• Electronic identification data relating to your computer or phone: user ID, IP address, operating system, device, browser, internet service provider, etc.; and
• Data relating to your browsing: for further information on the browsing data collected, please refer to Article 9 on cookies;
• Data on your approximate location: based on your IP address, if you click on the "Find my location" function to locate the nearest Maison Nicolas stores;
• Data relating to the loyalty programme: customer number, products purchased, date of purchase, amount, etc.

4. Your rights and complaints

4.1 Your rights

In connection with the processing of your personal data by Maison Nicolas, you have the following rights:

• Right of access: the right to request a copy of your personal data. If your request is unfounded or excessive, we may charge you a fee.
• Right to rectification: the right to request the correction of inaccurate personal data. You can access your account to change your personal data. You must ensure that your data is accurate and up to date. Any damage or loss resulting from the communication of inaccurate or incomplete information is your sole responsibility.
• Right to erasure: the right to request the deletion of your data, where one of the following conditions is met:
• Your personal data is no longer necessary in relation to the purposes pursued;
• You have withdrawn your consent and there is no other legal ground for continuing to process your personal data;
• You have validly exercised your right to object;
• The processing of your data is unlawful;
• Your personal data must be erased to comply with a legal obligation.
• 
  
• There are, however, cases in which you cannot exercise your right to erasure, even if one of these conditions is met (in particular where the processing of your data is necessary to comply with a legal obligation or for the establishment, exercise or defence of our legal claims).
• Right to object: the right to object, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest. In that case, we will stop processing your data unless we have a legitimate ground to continue processing it. If your data is used for direct marketing or advertising purposes, you have the right to object without having to give reasons.
• Right to restriction of processing: the right to request, in certain cases, the temporary suspension of the processing of some of your data, or its retention, if you need it, for longer than necessary.
• Right to data portability: if the processing of your personal data is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive the data concerning you in a structured, commonly used and machine-readable format, in order to transfer it to another entity, provided this is technically possible.
• Right to set out instructions regarding the fate of your personal data after your death.

4.2 How to exercise your rights

These rights may be exercised directly and at any time by contacting our customer service: either by completing the contact form available on the Site under "Contact us" (at the bottom of the page), by sending an email to service-clients@nicolas.com, or by registered letter with acknowledgement of receipt to Établissements Nicolas, Service Clients, 1 Rue des Oliviers 94320 Thiais, stating the reason for your request.

Maison Nicolas undertakes to process requests within a reasonable time and at the latest within one month.

If there is any doubt about your identity, we may ask you for a copy of your identity document or other proof.

4.3 Complaint to the CNIL

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred. In France, the supervisory authority is: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, Tel: +33 1 53 73 22 22.

5. Purposes and legal bases for the collection and processing of your personal data by Maison Nicolas

5.1 Performing and monitoring your reservations and purchases of products made on the Site

Performing your purchase contract on the Site. To make a purchase on our Site, you must log in to your user account or create one. We collect and process the data necessary to perform the purchase contract you have entered into with us, manage payments, issue invoices, organise delivery, and manage unpaid amounts and returns.

Managing your gift card. You can request a gift card from your Maison Nicolas wine merchant. We have a legitimate interest in processing the data necessary to manage your gift card.

Detecting fraud. When you make a purchase, we have a legitimate interest in carrying out the checks necessary to detect and prevent any fraud.

Finding nearby stores. If you agree to share your location, we can show you nearby stores. By clicking on the "Find my location" button and authorising Maison Nicolas to know your location, we use your IP address to determine your approximate location and show you the nearest stores.

5.2 Performing and monitoring your orders and purchases of products by telephone (in store only)

You can make a purchase by contacting a MAISON NICOLAS store by telephone. You will need to provide the information necessary to process your order and will receive an order form by email. Once validated, you will be invited to make payment via a payment link valid for 24 hours. The order will be handed over in store or shipped once payment has been received. For these orders, MAISON NICOLAS collects your personal data in order to perform the order contract concluded by telephone.

5.3 Performing and monitoring your in-store orders and purchases

When you make a purchase in one of our stores, our wine merchants may ask you to identify yourself if you have a loyalty card, or to create one if you do not. In both cases, our wine merchants will process the information necessary to properly perform your orders and purchases, in particular to process payments and issue the corresponding invoices. Except when placing an order (for example for a product not available in store), you are not required to identify yourself and may ask the wine merchant to complete your purchases without creating a loyalty card.

5.4 Responding to any questions, requests or complaints forwarded to Customer Service

Requests relating to an order or purchase. If your request relates to your order or a purchase via our Platform, the processing is necessary for the performance of the contract and the proper management of after-sales service. We may contact you by telephone, text message or email.

Other requests and complaints. We consider that we have a legitimate interest in processing the personal data strictly necessary to properly handle your requests and complaints and to answer your questions.

Recording of customer service calls. When you call our customer service, telephone conversations may be recorded for quality control and training purposes, in line with our legitimate interest. You may object to this.

Exercising your rights. If your question concerns the exercise of the rights set out in Article 4 "Your rights" or relates to a complaint about our products or services, we will need to process your data to comply with our legal obligations.

5.5 Managing your user account on the Site

To make a purchase on our Site, you must create a user account. When creating your account, you will need to provide certain personal data necessary to identify you and to access the various features, services and products available to registered users. The processing of your data is required for the performance of the Site's terms of use.

5.6 Managing your membership of the loyalty programme

Managing your loyalty card. You can create a digital loyalty card online from your user account on our Site, or request a physical loyalty card in a store, which you must then activate online in your account. The processing of your data is necessary for the performance of the loyalty programme, in particular to calculate your points balance and inform you of their expiry.

Adding your loyalty card to your mobile wallet. If you add your loyalty card to your mobile wallet (Apple Wallet or Google Wallet) by receiving a text message or scanning a QR code, your device will send Apple or Google the data necessary to display the card, such as its number and name. The processing of your data is governed by the privacy policy and legal notices of Apple or Google, which we invite you to consult. You can delete your digital card, or disable push notifications and/or automatic updates from your mobile at any time.

Emails about your loyalty card. We have a legitimate interest in sending you an email update of your points balance after each purchase, as well as a reminder before they expire.

5.7 Carrying out direct marketing and marketing activities

Email newsletters. By subscribing to our newsletter, you consent to receive, at the email address associated with your user account, promotional offers, information about our products, invitations to events and advice for your cellar. You can unsubscribe at any time from your MAISON NICOLAS account in the "My communication preferences" tab, by contacting customer service, or by clicking the "unsubscribe" link at the bottom of each email.

Push notifications on your mobile. If you have added your loyalty card to your mobile wallet, we have a legitimate interest in sending you Nicolas offers, information and invitations by push notification on your mobile. You can disable these notifications at any time from your phone.

Proximity messages on your mobile. If you have added your loyalty card to your mobile wallet, we have a legitimate interest in sending you messages when you are near a Nicolas store. Your device triggers your location without any exchange with our servers, and your location data is never shared with Nicolas. You can stop receiving these messages by disabling notifications on your mobile.

Personalised advertising via our partners. If you have a user account on our Site and have made a purchase, we may share your (encrypted) data with our partners (social networks, video-sharing platforms, etc.) to show you personalised advertisements for similar Maison Nicolas products. Partners with whom you use the same identifier (email) as for your Maison Nicolas account may show you our personalised advertisements. You can object to this type of communication by contacting our customer service (see section 4.2) or by changing your advertising preferences in the settings of the partner networks and platforms.

Ad targeting via cookies and trackers. If you have visited our Site and accepted advertising cookies, you consent to receive targeted Maison Nicolas advertisements on third-party websites, social networks and applications. You can withdraw your consent at any time by changing your preferences via the "Cookie settings" link on the Site or by deleting the cookies stored in your browser (see chapter 9 on cookies and other trackers below).

Personalisation of our communications and prospecting of people with a profile similar to yours. We have a legitimate interest in analysing your data to build your profile, which allows us in particular to better understand your preferences, behaviour and needs. This allows us to tailor our offers and personalise our communications. We may also communicate with people whose profiles are similar to yours via our partners (e.g. social networks).

The data analysed may include:

• Your customer account information;
• Your loyalty card data;
• Your in-store (if you use your loyalty card) or online purchase history;
• Your interactions with our Site (if you are logged in to your account) (e.g. pages visited, abandoned baskets);
• Data collected via the cookies you have accepted (see chapter 9 on cookies and other trackers below). You can object to this profiling by contacting customer service (see section 4.2 above).

5.8 Competitions

If you take part in a competition via the Platform, we process the data collected for the performance of the contract relating to that competition. The data collected is only used for advertising purposes with your consent.

5.9 Managing customer reviews

We have a legitimate interest in using your data to respond to the reviews you post online.

5.10 Conducting customer satisfaction surveys and customer studies

We have a legitimate interest in conducting polls and surveys to analyse our customers' level of satisfaction in order to improve the quality of our products and services.

5.11 Producing anonymous statistics on Site traffic

We consider that we have a legitimate interest in analysing the usability and quality of our Site in order to improve our users' experience and offer a better Site to our customers. Please read Article 9 "Cookies" for more information.

5.12 Producing commercial statistics

We have a legitimate interest in using your data to produce commercial statistics.

6. Data retention period

The retention period of your data is determined according to the purpose for which the data was collected. Once that purpose has been achieved, your data will be archived, deleted or anonymised (in particular in order to produce statistics).

6.1 Retention in the active database for the period necessary for the purposes for which it was collected

Initially, Maison Nicolas retains your personal data for a period not exceeding that necessary for the purposes for which it was collected:

• Data relating to your contracts (orders, deliveries, invoices, payments, after-sales service), including the loyalty programme. Retained for the purposes of performing your contract, i.e. for the time necessary to complete the sale, the lifetime of your user account or the lifetime of your loyalty card, as applicable.
• Data relating to the payment cards used. Deleted once the transaction has been completed, i.e. upon actual payment, which may be deferred until receipt of the product, plus, where applicable, the 14-day withdrawal period (during which you may change your mind) for purchases made on our Site. If you pay by bank card, the card number and its expiry date may nevertheless be retained as evidence in the event of a dispute over the transaction, in intermediate archives, for a period of 13 months following the debit date, or 15 months for deferred debit cards.
• Data held in our customer and prospect databases (your identification data, your user account data, your interactions with our Site when you are logged in to your account). Retained for 3 years from your last contact with us (a purchase online or with your loyalty card, a login to your account, an exchange with customer service, or a click on a hyperlink in an email), or until the withdrawal of your consent for processing based on consent (the "Contact").
• Your exchanges with Customer Service. Retained for the time necessary to process your request. Recordings of telephone conversations with our customer service are kept for a limited period (6 months maximum), except in exceptional cases (for example for investigation, fraud or legal reasons).
• Your data collected via cookies and other trackers. Retained for a period not exceeding 13 months from your connection, in accordance with applicable regulations. For more details on cookies, how they work and how to disable them, see Article 9 "Cookies and other trackers" below.
• Your responses to our satisfaction surveys and customer studies. 3 years after the last Contact.
• Your customer reviews. This data is retained for 3 years after the last Contact.
• Your requests to exercise your rights. This data is retained for 1 year from the responses to the requests to exercise rights.
• Statistical data. The statistical data retained is aggregated (compiled) and anonymous.

6.2 Retention in archives

Subsequently, regardless of the retention period necessary to achieve the purpose of the processing, it may be justified for us to archive your data for a limited period, securely and with restricted access, for various reasons:

• To comply with a legal data retention obligation (Article L123-22 of the French Commercial Code requires accounting documents and supporting documents, such as invoices, to be kept for 10 years; likewise, Articles L213-1, D213-1 and D213-2 of the French Consumer Code require contracts concluded electronically for more than 120 euros to be kept for 10 years).
• We may archive your data for evidential purposes during the period in which our liability could be incurred, i.e. for the applicable limitation period (e.g. Article L218-2 of the French Consumer Code provides that actions by professionals in respect of goods or services they supply to consumers are time-barred after two years).

Once the retention period required by law has expired and any actions have become time-barred, your personal data will be deleted or anonymised.

6.3 Deletion of your loyalty card and your account

You can cancel your loyalty card at any time from your personal account. Please note, however, that this deletion will automatically result in the loss of any points you may have accumulated as a member of our loyalty programme. To delete your user account on the Site, simply send your request to service-clients@nicolas.com or Établissements Nicolas, Service Clients, 1 Rue des Oliviers 94320 Thiais.

7. Data recipients

Your personal data is intended for the relevant Maison Nicolas departments.

When you order or reserve a product on the Platform, the data necessary to fulfil the order is communicated to the Maison Nicolas subsidiary, to Maison Nicolas stores and to the subcontractors responsible for the order.

In addition, the data we collect may be transferred to the service providers (processors) that Maison Nicolas uses for the following services:

• IT and data hosting;
• Packaging, logistics and delivery;
• Customer service, customer reviews and satisfaction surveys;
• Direct marketing campaigns by email and/or text message;
• Delivery of targeted advertising (e.g. third-party websites, social networks);
• Commercial and statistical data analysis;
• Payment service providers and fraud detection and prevention entities.

Where applicable, any transfer of your personal data outside the European Union will be carried out with appropriate safeguards in place and while preserving the security of your data.

MAISON NICOLAS may be required to disclose personal data concerning you to judicial and police authorities, regulatory authorities, public bodies or third-party companies in order to comply with a court decision or any other legal or regulatory obligation.

8. Data security

MAISON NICOLAS has endeavoured to implement appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of the personal data processed and to prevent it from being distorted, damaged or destroyed, or accessed by unauthorised third parties. MAISON NICOLAS does not, however, control all the risks associated with the operation of the Internet and draws users' attention to the existence of possible risks inherent in its use and operation. Your data is hosted in the European Union.

The security measures implemented by MAISON NICOLAS may result in an interruption of access, degraded operation and/or a modification of the Platform. In such cases, MAISON NICOLAS accepts no liability for the consequences of any interruption, degraded operation or modification of the Platform.

9. Cookies and other trackers

9.1 Cookies and other trackers that may store or access data on your browser when you visit the Site

When you connect to the Site, MAISON NICOLAS places cookies on your browser. Cookies are small files stored on your device (computer, phone, etc.) and associated with our Site's domain.

Certain cookies necessary for the use of our online store are placed without your consent for the following purposes:

• Storing the choice you have expressed regarding the placement of cookies and trackers that are not exempt from consent;
• Authenticating you on your account and ensuring the security of the authentication mechanism, for example by limiting automated access attempts;
• Remembering the contents of your shopping basket;
• Measuring Site audience to produce anonymous statistical data (performance, detection of browsing problems, optimisation of technical performance or usability, estimation of the server capacity required, analysis of content viewed, etc.).

Other cookies, pixels and advertising trackers are only placed after your express consent has been obtained:

• Trackers using the same identifier across several websites or applications to allow overall tracking of your browsing across different websites or applications;
• Trackers transmitting data to third parties (for example social networks, audience measurement and online advertising service providers);
• Trackers leading to your data being cross-referenced with other processing operations.

These trackers may be used for audience measurement purposes (collection of data on your online activity) and for advertising purposes (delivery of targeted or personalised advertising on other websites, applications or social networks matching your interests).

9.2 Configuring your cookie preferences

You can configure your browser to block all or some cookies, block only third-party cookies, allow all cookies, and delete cookies stored in your browser. This configuration is your responsibility.

You can also accept or refuse all cookies, or set your preferences, from the cookie banner displayed when you first visit the Site from a browser. Some cookies are strictly necessary for the Site to function and cannot be disabled. You can, however, accept or refuse performance cookies, which allow us to analyse Site traffic, and/or advertising cookies. Finally, you can change your cookie choices at any time in the "Cookie settings" section at the bottom of the Site.

If you refuse the storage of all or some of the necessary cookies, or if you delete those stored, you may no longer be able to access the Site, or may access it in a degraded manner. In such cases, MAISON NICOLAS accepts no liability for the resulting consequences.

For more information on cookies and their use, you can consult the guidance of the Commission Nationale de l'Informatique et des Libertés (CNIL) at the following address: https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs.

9.3 Social network and video-sharing platform buttons

The Site includes buttons that allow you to share one of our products on social networks or video-sharing platforms, and to access the MAISON NICOLAS page in order to follow it. The processing of your data on these networks and platforms is governed by their privacy policies. We invite you to review your cookie preferences and privacy settings on the networks and platforms you interact with.

9.4 Pixels and other trackers that may access data on your browser when you open an email or click on a link

MAISON NICOLAS uses tracking pixels whose name contains an anonymous identifier, informing us that an anonymous person has opened an email or clicked a link to visit a page of our Site.

A tracking pixel is a transparent image embedded in an email or on a web page. When you open something containing the tracking pixel, your browser or email client sends a request to the server on which the tracking pixel is stored. When the server receives this request, it records the time, date and an anonymous identifier of the device that requested the pixel. This information is used as confirmation that an email has been read or a link has been clicked.

10. If you share the use of your device with other people

If your device is used by several people, or if the same device has several browsers, Maison Nicolas cannot be certain that the services and advertisements intended for your device correspond to your own use of that device and not to that of another user of the device.

Where applicable, sharing the use of your device with other people is your free choice and your responsibility.

11. Amendments to the Policy

MAISON NICOLAS may amend this Policy and will ensure that you are informed either by a specific notice on the Site or by a personalised notice, in particular through newsletters.

12. Personal data policy relating to minors

The Site is not aimed at minors. Access to the Site is prohibited to them, as it contains content prohibited to minors under the age of 18.

Users must provide their date of birth in order to access the Site.

Version in force as of 20/10/2026