The purpose of this Privacy Policy is to inform you how Pernod Ricard S.A. collects, stores and uses the personal data collected from you on Pernod
Ricard.com website.
This Privacy Policy may be updated at any time as a result of, among others, legal, technical or commercial changes. We will notify you, by appropriate
mean, of any substantive change in this Privacy Policy. You are also invited to regularly read this Privacy Policy to make sure you are aware of the latest
version
1. Who is the data controller for the processing of your personal data?
Pernod Ricard S.A., a corporation duly organized under the laws of France, with its registered address at 5 Cours Paul Ricard, 75008 Paris France (“Pernod Ricard” or “we”, “our”, “us”) acts as the “data controller” for the processing of your personal data (i.e. it is the entity that determines “why” and “how” your personal data are used).
2. What are the purposes, legal basis, categories of personal data and retention periods for processing your personal data?
“Personal data" refers to any information that may identify you directly (e.g., your name) or indirectly (e.g., your phone number, postal/email address, pseudonymized data such as a unique identifier).
We collect most of the personal data directly from you, we may also collect personal data from cookies on our website (see for more details the Cookie Policy available in the footer of our website).
The personal data collected is necessary to achieve the purposes described below. If you do not provide the personal data we request, it may delay or prevent us from providing you with products or services.
Pernod Ricard collects and processes personal data that are relevant, adequate, not excessive and strictly necessary for the purposes pursued.
You will find below a table listing:
- The different purposes of the processing operations (i.e. why we use your personal data);
- The legal basis on which we rely to carry out the processing (i.e. why we are authorized to use your personal data).
- The categories of personal data processed;
- The data retention periods (i.e. how long we retain your personal data).
| PURPOSE OF THE PROCESSING | LEGAL BASIS | CATEGORIES OF PERSONAL DATA | DATA RETENTION PERIODS |
|---|---|---|---|
| Restrict access to our website to comply with applicable law or contractual restrictions | Pernod Ricard’s compliance with its legal obligations | Date of birth, IP address | The time of your visit on the website, unless you tick the box "remember me". |
| Ensure the proper functioning of our website (for example via audience measurement and statistics) through trackers such as cookies strictly necessary for the provision of an online communication service expressly requested by the user or solely intended to enable or facilitate communication by electronic means (for more information you can refer to our Cookie Policy.) - For example: for user interface customization trackers (for example, for language selection or the presentation of a service), when such customization is an expected element of the service; for trackers enabling load balancing of equipment contributing to a communication service. | Pernod Ricard’s legitimate interest to ensure the proper functioning of its website. Your consent, when necessary | IP address, online identifiers | See the cookies policy for details |
| Optimize your user experience, provide you with advertising and content adapted to your interests through the setting of cookies on our website – for more information you can refer to our Cookie Policy. | Your consent | IP address, online identifiers | See the cookies policy for details |
| Maintain the safety and security of our website and ensure fight against the fraudulent use of our websites or services | Pernod Ricard’s legitimate interest, more specifically its business and economic interest to provide you with secure website and services. | IP address | The time of your visit on the website. |
3. To whom do we disclose your personal data and why?
- To internal authorized employees
We will communicate your data to our employees who need to process your personal data for the purposes specified in Section 2 of this Privacy Policy.
- To service providers
For IT support purposes: we will share your data with our IT support service providers (for hosting, maintenance and technical support services) to help us for the internal operations of our website and to assist us with administering them or the various features, programs and promotions available on it.
- To other third parties
For litigation and safety purposes: we may also disclose your personal data to authorities and/or external counsels if we are required to do so by law, or if in our good faith judgment, such action is reasonably necessary to comply with legal processes, to respond to any claims, or to protect the security or rights of Pernod Ricard, its customers, or the public.
4. Is your personal data sent to recipients outside the European union?
Pernod Ricard is a global company and your personal data may be transferred to countries outside the European Economic Area, where third parties operate, in particular our IT support providers, such transfers will take place only if permitted and carried out in compliance with applicable laws. For these transfers, Pernod Ricard takes the appropriate measures to maintain security of the personal data both during transit and at the receiving location and ensure that countries have been deemed as providing an adequate level of protection by the European Commission, or that third parties implement relevant safeguards provided by applicable laws i.e. the Standard Contractual Clauses as set out by the European Commission or, where applicable, Binding Corporate Rules. You may obtain a copy of these safeguards at any time: to do so, please contact Pernod Ricard at the email address specified in section 9 of this Privacy Policy.
5. How long do we keep your personal data?
We will store your personal data in accordance with our internal retention procedure as necessary to comply with our legal and regulatory obligations, resolve disputes and enforce our agreements.
You can find details on the data retention periods implemented in the table in section 2.
6. How do we secure your personal data?
Pernod Ricard takes all necessary technical and organizational measures to protect the confidentiality and security of your personal data collected via our website. These efforts include but are not necessarily limited to: (i) storing your personal data in secure operating environments to which the public does not have access, but only authorized Pernod Ricard employees, and our agents and contractors; and, (ii) verifying the identities of registered users before they can access the personal data we maintain about them.
Our website may link up users to other websites of third parties and/or affiliates or subsidiaries of Pernod Ricard, through hyperlinks; this is a service available to you as a user of the site. Such links do not constitute an endorsement by Pernod Ricard of the linked sites, their content, including products, advertising or any other materials featured on them. Pernod Ricard has no control over these linked sites and cannot be held responsible or liable for their content, including products, advertising or any other materials featured on them, or any purchase you may choose to make on these linked sites.
7. What are your rights regarding your personal data?
You have the following rights with respect to your personal data:
- If your personal data has been processed on the basis of your consent, you can withdraw your consent at any time (see the table in section 2 of this Privacy Policy to understand which processing are based on your consent).
- You have the right to obtain a copy of the personal data we hold about you.
- You can request to rectify your personal data if they are inaccurate, incomplete or out of date.
- You can request the erasure of your personal data (i) if your personal data is no longer necessary for the purposes mentioned above in section 2, (ii)
if you have withdrawn your consent for a data processing based exclusively on such consent, (iii) if you have objected to the data processing, (iv) if
the personal data processing is unlawful, (v) if the personal data must be erased to comply with a legal obligation applicable to Pernod Ricard. Please
note however that this is not an absolute right, as we may be obliged to retain your personal data for legal or legitimate reasons. - You can request the restriction of the processing. You may ask us to restrict the processing of your personal data in specific cases (e.g., if you contest
the accuracy of your personal data). - You have the right to data portability, meaning to receive (and transmit to another data controller) personal data that you have provided to us and
that we hold about you in a structured, commonly used and machine-readable format. This applies only where the processing is based on your consent
or the execution of pre-contractual measures / performance of a contract and is carried out by automated means (see the table in section 2 of this
Policy to understand which processing rely on these legal basis). - If you are a French citizen, you also have the right to give general and specific instructions to decide the fate of your personal data after your death.
- You have the right to object to the processing of your Personal Data by usif the data processing is based on the legitimate interest of Pernod Ricard,
except if we can demonstrate compelling legitimate grounds for the processing - (see the table in section 2 of this Privacy Policy to understand
which processing are based on Pernod Ricard's legitimate interests).
To exercise all these rights, you can send a request to groupdpo@pernod-ricard.com.
You are informed that you can also lodge a complaint with the supervisory authority of the country where you are located if you have any concern about the
conditions of processing of your personal data by Pernod Ricard. In France, you can contact the Commission Nationale de l’Informatique et des Libertés via
their website at: Homepage | CNIL.
However, we invite you to contact Pernod Ricard at the address below before filing any complaint before any supervisory authority.
8. How do we treat children's personal data?
Our websites are not intended for children under the legal drinking age (“Minor”), we have implemented an age gate so we do not knowingly collect personal data from Minors. If we are notified or learn that a Minor has submitted personal data, we will delete such personal data.
9. How can you contact us?
If you have any questions, complaints, or comments regarding this Privacy Policy or our information collection practices, please contact us by writing to:
Pernod Ricard S.A., 5 Cours Paul Ricard, 75008 Paris France.
or by sending an email to groupdpo@pernod-ricard.com.
10. Digital security incident response team (CSIRT)
The Pernod Ricard CSIRT is an operational team responsible for preventing and responding to information security incidents affecting the Pernod Ricard group.
Description of Pernod Ricard CSIRT (EN)
Signature document (EN)
For any security incident involving the Pernod Ricard group as either the source or the target, you can contact the Pernod Ricard CSIRT at the following address: Csirt@pernod-ricard.com