Skip to content
Organic wines from the Sands of the Camargue · Delivery to a pick-up point or free collection in our shops
EN

Privacy policy

This translation is provided for information only: the French version alone is legally binding. Read the French version

Translation provided for information purposes only; in the event of any discrepancy, the French version prevails, without prejudice to the mandatory provisions of the law of your country of residence.

Last updated: 1 November 2026.

This policy explains how the company M.D.J (“Mas des Jeux”, “we”) collects and uses the personal data of people who visit the website https://masdesjeux.com (the “Site”), place orders on it, subscribe to our newsletter or contact us, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and the amended French Law No. 78-17 of 6 January 1978 (“Loi Informatique et Libertés”, the French Data Protection Act).

1. Data controller

M.D.J, a société par actions simplifiée à associé unique (simplified joint-stock company with a sole shareholder), registered with the Tarascon Trade and Companies Register (RCS) under number 819 650 193, whose registered office is at 33 rue Victor Hugo, 13460 Saintes-Maries-de-la-Mer, France.

Contact for any question about your data: [email protected] – +33 6 19 02 36 29 – or by post to the registered office address.

2. Data we collect

  • When you order: e-mail address, first name, surname, telephone number, country, postal address, postcode and town, chosen pick-up point or collection shop, order contents, amounts, promotional code used, optional message left with the order, declaration of legal age (tick box) for orders containing alcohol, order history (payment, shipment, tracking number, delivery).
  • Payment data: payment is made directly on Stripe’s secure page. We neither receive nor store your card number; we only keep the transaction reference and its status.
  • On the order page, before confirmation: your e-mail address and first name are saved with your basket as soon as you enter them, so that we can send you a reminder if the order is not completed (see § 3.5). You are informed of this by a notice placed under the e-mail field.
  • Newsletter: e-mail address, language, date and source of subscription (form on the Site or box ticked when ordering), text of the consent displayed, country (of delivery or inferred from your connection), and, where applicable, date of confirmation of the subscription.
  • Contact and “Professional offers” (“Offres pro”) forms: name, e-mail address, telephone, subject and content of your message, and, for professional enquiries, the name of your organisation and the information you choose to send us.
  • Technical data: IP address, date and time of connection, pages requested, browser type, recorded in the server’s technical logs and processed by our security provider; approximate country inferred from the IP address.

Mandatory fields are indicated in the forms. Without them, we cannot process your order or request.

We do not collect any so-called “sensitive” data and do not take any decision based solely on automated processing producing legal effects concerning you.

3. Why we use your data, on what basis, and for how long

3.1 Order management, delivery and customer service

Purposes: recording and preparing your order, collecting payment, organising shipment and collection (pick-up point or shop), informing you by e-mail of each step (confirmation, shipment, tracking number, change of collection point, availability), enabling order tracking on the Site using your order number and e-mail address, handling withdrawals, complaints and guarantee claims.

Legal basis: performance of the sales contract (Article 6(1)(b) GDPR). E-mails relating to your order do not require consent and do not contain advertising.

Retention period: for the duration of the order and its follow-up, then archiving for evidential purposes for 5 years from the order (ordinary limitation period); 10 years from delivery for orders of 120 € or more (Article L.213-1 of the French Consumer Code).

3.2 Age verification

Purpose: complying with the prohibition on selling alcohol to minors (Article L.3342-1 of the French Public Health Code), by means of a declaration of legal age when entering the Site and a declaration when placing any order containing alcohol. We do not collect identity documents online; an identity document may be requested when collecting in a shop or by the pick-up point.

Legal basis: legal obligation (Article 6(1)(c) GDPR).

Retention period: the declaration made when entering the Site is stored in your browser for 12 months (see § 6); the declaration ticked when ordering is recorded, with its date and time, together with the order and kept for the same period as the order.

3.3 Accounting and legal obligations

Purposes: issuing and keeping invoices and accounting records, responding to requests from authorities (in particular tax and customs).

Legal basis: legal obligation (Article 6(1)(c) GDPR).

Retention period: 10 years from the end of the financial year (Article L.123-22 of the French Commercial Code).

3.4 Newsletter

Purposes: sending you by e-mail, no more than about once a month, our new products, gift boxes, recipes and offers, and measuring, on an aggregate and non-nominative basis, interest in our mailings.

Legal basis: your consent (Article 6(1)(a) GDPR and Article L.34-5 of the French Postal and Electronic Communications Code). Subscription is optional: it is done via the form in the footer or via a box, unticked by default, on the order page. Your order does not depend on this subscription.

Confirmation of subscription: where the country of delivery or the country from which you connect is Germany, the subscription, whether made via the form or via the box on the order page, only takes effect after you have confirmed your address using the link received by e-mail (double opt-in). We keep proof of your consent: source of the subscription, text displayed, country, dates of the request and of the confirmation.

Unsubscribing: you may withdraw your consent at any time, in one click, using the link in each newsletter, or by writing to us. Withdrawal of consent does not affect the lawfulness of previous mailings.

Newsletter audience measurement: we only measure aggregate, non-nominative statistics (for example the total number of visits to the Site originating from a newsletter). Our e-mails contain neither individual tracking pixels nor per-recipient click-tracking links.

Retention period: until you unsubscribe, or 3 years after your last active contact with us (last order or last request from you); proof of your consent is kept for the duration of the subscription and then for 5 years. After unsubscribing, your address is kept on a suppression list for 3 years, solely to ensure that you no longer receive newsletters.

3.5 Reminder of an uncompleted basket

Purpose: where you have entered your e-mail address on the order page without completing your purchase, sending you a single reminder e-mail 3 days (72 hours) later, containing the products left in your basket and a link to resume it. This reminder contains no promotional code or other commercial offer.

Legal basis: our legitimate interest in enabling you to complete a purchase you have started (Article 6(1)(f) GDPR). You are informed of this reminder by a notice placed under the e-mail field on the order page, and each reminder includes a “Ne plus recevoir de rappel” (“Stop receiving reminders”) link allowing you to object in one click. Where the country of delivery is Germany, this reminder is only sent to people who subscribe to our newsletter.

Retention period: the basket and the address entered are kept for no more than 60 days after the last change to the basket; the addresses of people who have refused reminders are kept for 3 years on a suppression list.

3.6 Contact requests and professional enquiries

Purposes: answering your questions and requests for quotations; for professionals, subsequently sending you commercial proposals related to your business.

Legal basis: pre-contractual measures taken at your request (Article 6(1)(b) GDPR) and our legitimate interest in answering requests and prospecting professionals (Article 6(1)(f)), with the possibility of objecting at any time.

Retention period: 3 years from the last contact.

3.7 Site security and fraud prevention

Purposes: protecting the Site against attacks and abuse (request rate limiting, bot filtering, denial-of-service protection), detecting fraudulent payments, diagnosing technical incidents.

Legal basis: our legitimate interest in ensuring the security of the Site and of payments (Article 6(1)(f) GDPR).

Retention period: web server logs are kept for 14 days; data processed by Cloudflare and Stripe are kept for their own periods, described in their policies.

3.8 Handling disputes and your rights

Legal basis: legitimate interest (defence of our rights) and legal obligation (responding to your requests to exercise your rights).

Retention period: for the duration of the dispute and until all avenues of appeal have been exhausted; requests to exercise rights are kept for 5 years.

4. Recipients of your data

Your data are intended for the authorised staff of M.D.J responsible for orders, customer relations, accounting and communication. They are never sold. They are disclosed, solely for the purposes described above, to the following service providers, who act as processors or, for certain processing operations of their own (payment, transport, fraud prevention), as separate controllers:

  • Stripe (Stripe Payments Europe Ltd., Ireland): online payment and fraud prevention; and, depending on the payment method chosen, PayPal, Amazon Pay, Apple Pay, Google Pay or Link, for their own processing of the payment;
  • Boxtal (France): shipping platform used to create shipments, search for pick-up points and track parcels;
  • Mondial Relay (France, InPost group) and Chronopost (France): transport and delivery of parcels (name, telephone, e-mail, address and pick-up point);
  • OVHcloud (OVH SAS, France): hosting of the Site and its database on a server located in the United Kingdom (OVHcloud data centre in London), a country recognised by the European Commission as providing an adequate level of data protection;
  • Cloudflare (Cloudflare, Inc., United States): content delivery network and protection of the Site; Cloudflare processes in particular visitors’ IP addresses;
  • Resend (Resend, Inc., United States): sending of order e-mails, basket reminders and newsletters, from servers located in the European Union (Ireland); as the company is established in the United States, any access to this data is governed by the safeguards described in section 5;
  • OVHcloud (OVH SAS, France): mailboxes for our @masdesjeux.com addresses (receiving your messages and our replies);
  • LUMERAS EXPERTISE, chartered accountant (244 rue Jean Vilar, 34070 Montpellier, France): keeping and auditing the accounts; this firm receives the data appearing on invoices and accounting records (identity, address, amounts and contents of orders) and acts as a recipient bound by professional secrecy, or as a processor for the tasks it performs on our behalf;
  • administrative or judicial authorities, where required by law.

The “View on map” links to Google Maps or OpenStreetMap on the Site do not transmit any data unless you click on them; once on those sites, their own privacy policies apply.

5. Transfers outside the European Union

The Site is hosted in the United Kingdom, a country covered by an adequacy decision of the European Commission: this transfer does not require any additional safeguard. Certain providers (in particular Stripe, PayPal, Amazon Pay, Cloudflare and Resend) may process data in the United States or in other countries outside the European Economic Area. These transfers are governed by the European Commission’s adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, for certified companies, and/or by the standard contractual clauses adopted by the European Commission. You may obtain a copy of the applicable safeguards by writing to us.

6. Cookies and storage in your browser

The Site uses no advertising cookies, no third-party audience measurement tools and no social media buttons placing trackers. It only places the following items, which are strictly necessary for its operation or for providing the service you request, and which are exempt from consent under Article 82 of the French Data Protection Act:

  • mdj_cart (cookie, 60 days): identifies your basket so that it is kept from one page to another and from one visit to another;
  • mdj_age (cookie and browser local storage, 12 months): remembers that you have declared that you are 18 or over, so that you are not asked again on each visit;
  • mdj_admin and mdj_pos (session cookies): reserved for the staff administration area and point-of-sale application; they are never placed on customers’ devices;
  • technical cookies from Cloudflare (for example “__cf_bm” or “cf_clearance”), which may be placed to distinguish humans from bots and protect the Site against attacks;
  • during payment, the Stripe page to which you are redirected places its own cookies, necessary for payment security and fraud prevention, under Stripe’s responsibility.

You can delete or block these items in your browser settings; some functions (basket, remembering the declaration of legal age) will then no longer work properly. Should we ever add trackers requiring consent (non-exempt audience measurement, advertising), a banner would allow you to accept or refuse them just as easily, before anything is placed.

7. Security

We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), payment delegated to a PCI-DSS certified provider, access to the administration area protected by password and limited to authorised persons, limitation of login attempts, regular backups. In the event of a data breach likely to result in a high risk to your rights, you will be informed under the conditions laid down by the GDPR.

8. Your rights

You have the following rights over your data:

  • right of access and to obtain a copy of your data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure, in the cases provided for by law (we will, however, have to keep the data necessary to comply with our legal obligations, in particular accounting obligations);
  • right to restriction of processing;
  • right to object, at any time and without giving reasons, to the newsletter and basket reminders, and, on grounds relating to your particular situation, to processing based on our legitimate interest;
  • right to portability of the data you have provided to us, for processing based on the contract or on consent;
  • right to withdraw your consent at any time;
  • right to give instructions regarding the fate of your data after your death.

To exercise these rights, write to us at [email protected] or by post to M.D.J, 33 rue Victor Hugo, 13460 Saintes-Maries-de-la-Mer, France. We will reply within one month, which may be extended by two months for complex requests; you will then be informed. We may ask you to prove your identity only in case of reasonable doubt, for example by writing to you from the e-mail address used for the order.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr – or with the data protection authority of your country of residence in the European Union.

9. Minors

The Site offers alcoholic beverages and is not intended for minors. We do not knowingly collect data concerning persons under 18. If you believe that a minor has sent us data, please contact us so that we can delete it.

10. Changes to this policy

We may amend this policy, in particular to take account of changes to the Site, our providers or the regulations. The date of the last update appears at the top of this page. In the event of a significant change, we will inform you by appropriate means.