Privacy Policy
Data Controller
Yumea — The Little Wine Museum 3 rue Passet, 69007 Lyon, France info@lepetitmuseeduvin.com
Data Collected
Via booking (Tsuno booking module and Smeetz ticketing)
When you book a visit, an event or a gift voucher, you do so in the booking module built into this website. This module is provided by Tsuno, software published by Yumea, which operates the Museum. It collects the following data: first name, last name, email address, billing postcode and country, order details (services, date, amount) and, for a group request, your telephone number and company if you provide them. This data is stored in Tsuno, under Yumea’s responsibility, so that we can manage your booking.
Payment and ticket issuing are still handled by our ticketing provider Smeetz (Smeetz SA, Switzerland) and its payment provider Adyen. Smeetz receives the data needed for your order for this purpose. We have no access to your banking details.
Smeetz may also use this data for its own purposes, in particular to offer you similar services, and uses its own measurement tools, as described in its privacy policy.
Via email
This website has no contact form. When you write to our email address, we receive the information you include, and we use it solely to respond to your enquiry. These exchanges are kept for as long as needed to handle your request, then deleted at the latest 3 years after the last exchange.
Via analytical cookies (Google Analytics 4)
With your consent, we collect browsing data, without identifying you by name (pages visited, session duration, country of origin), via Google Analytics 4. This data helps us improve the website.
Legal Basis for Processing
- Contract: processing necessary to fulfil the booking
- Consent: audience measurement cookies (GA4) and advertising cookies (Meta pixel), which you may refuse or withdraw at any time
- Legitimate interest: measuring bookings generated by our advertising, by sending purchases from our ticketing system to Meta. You can object to this at any time.
- Legitimate interest: website security, fraud prevention
Retention Period
- Booking data: 5 years (accounting obligations)
- Contact data: 3 years after the last contact
- Analytical data: 14 months in Google Analytics (the cookies themselves expire after 13 months)
Your Rights
Under the GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: receive your data in a structured format
- Objection: object to certain types of processing
- Restriction: restrict the use of your data
To exercise these rights: info@lepetitmuseeduvin.com
You may also lodge a complaint with the CNIL (French data protection authority) — cnil.fr.
Cookies
Strictly necessary cookies
These cookies ensure the website functions correctly. They do not require your consent.
Audience measurement cookies (Google Analytics 4)
With your consent, these cookies collect browsing data, without identifying you by name. You can refuse these cookies, or withdraw your consent at any time, through the “Manage cookies” link at the bottom of every page.
Before you choose, and whatever you choose, Google receives a record of your visit that contains no cookie and no advertising identifier. No measurement cookie is stored on your device until you have accepted it.
Advertising cookies (Meta pixel)
With your consent, we use the Meta pixel on the pages of this website. It allows us to measure how our Facebook and Instagram advertising performs, and to show it to people who have visited the site.
What the pixel sends to Meta: the page viewed, your IP address, technical information about your browser, and an advertising identifier managed by Meta.
Bookings and purchases are made in the Tsuno booking module built into this website. With your consent, this module reports the steps of your booking to our tag manager (viewing, basket, purchase with its amount and references, without your name, email address or telephone number), to measure bookings generated by our advertising. Without your consent, it sends nothing.
Our ticketing provider Smeetz, which handles payment and issues tickets, may send Meta the details of your purchase (amount, booking) along with your email address, name and telephone number in hashed form, through a direct server-to-server connection, so that your booking can be matched to a Facebook or Instagram account. This takes place regardless of your cookie choices. You can object to it at any time by writing to info@lepetitmuseeduvin.com.
You can refuse these cookies, or withdraw your consent at any time, through the “Manage cookies” link at the bottom of every page.
Cookies and trackers in detail
| Name | Purpose | Provider | Duration | Consent required |
|---|---|---|---|---|
lpmv_consent_v2 | Remembers your cookie choice. This is local storage, not a cookie. | Le Petit Musée du Vin | 6 months | No, necessary for the site to work |
_ga | Distinguishes one visitor from another | 13 months | Yes, audience measurement | |
_ga_EC7554YE6T | Keeps the measurement session state | 13 months | Yes, audience measurement | |
_gcl_au | Attribution for Google campaigns. Set only if the conversion linker is active in our container. | 90 days | Yes, advertising | |
_fbp | Identifies your browser to Meta | Meta | 90 days | Yes, advertising |
_fbc | Records a click on one of our adverts | Meta | 90 days | Yes, advertising |
tr:… | Keeps your basket and the state of your booking in the booking module. This is session storage, not a cookie, cleared when the tab is closed. | The Little Wine Museum (Tsuno module) | Session | No, required for the site to work |
| Payment component | Loaded at the payment step only. May set the cookies or storage needed for secure payment. | Smeetz and its payment provider Adyen | According to their policies | Not collected by our banner (governed by Smeetz) |
Google Tag Manager does not set a cookie of its own: the cookies above are set by the tools it loads.
Our technical audience measurement, provided by Cloudflare, sets no cookie.
The Tsuno booking module sets no cookies. At the payment step only, it loads the payment component of our ticketing provider Smeetz, which relies on its payment provider Adyen. Any cookies and trackers this component may set fall under Smeetz’s cookie management policy, not this policy. They are not governed by our consent banner.
Transfers Outside the EU
Google Analytics 4 transfers data to the United States. This transfer is governed by Standard Contractual Clauses approved by the European Commission.
The Meta pixel also transfers data to the United States. This transfer is governed by the EU–US Data Privacy Framework, to which Meta Platforms, Inc. is certified.
The data needed for payment and ticket issuing is processed by Smeetz SA, in Switzerland. Switzerland benefits from an adequacy decision by the European Commission, which recognises a level of data protection equivalent to that of the European Union.
Amendments
This policy may be updated. The version in force is the one displayed on this page.
Last updated: October 2026