Privacy Policy

Data Controller

Yumea — The Little Wine Museum 3 rue Passet, 69007 Lyon, France info@lepetitmuseeduvin.com

Data Collected

Via booking (Smeetz)

When you book a visit, the following data is collected by our partner Smeetz: first name, last name, email address, payment information. This data is processed by Smeetz in accordance with their own privacy policy.

Via the contact form

When you contact us, we collect: first name, last name, email address, and the content of your message. This data is used solely to respond to your enquiry.

Via analytical cookies (Google Analytics 4)

With your consent, we collect anonymised browsing data (pages visited, session duration, country of origin) via Google Analytics 4. This data helps us improve the website.

Legal Basis for Processing

• Contract: processing necessary to fulfil the booking
• Consent: analytical cookies (GA4) — you may withdraw this consent at any time
• Legitimate interest: website security, fraud prevention

Retention Period

• Booking data: 5 years (accounting obligations)
• Contact data: 3 years after the last contact
• Analytical data: 14 months (GA4 settings)

Your Rights

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Portability: receive your data in a structured format
• Objection: object to certain types of processing
• Restriction: restrict the use of your data

To exercise these rights: info@lepetitmuseeduvin.com

You may also lodge a complaint with the CNIL (French data protection authority) — cnil.fr.

Cookies

Strictly necessary cookies

These cookies ensure the website functions correctly. They do not require your consent.

Analytical cookies (Google Analytics 4)

With your consent, these cookies collect anonymised browsing data. You can refuse or withdraw your consent via the cookie banner.

No targeted advertising

We do not use advertising or cross-site tracking cookies.

Transfers Outside the EU

Google Analytics 4 transfers data to the United States. This transfer is governed by Standard Contractual Clauses approved by the European Commission.

Amendments

This policy may be updated. The version in force is the one displayed on this page.

Last updated: March 2026