Privacy policy

1. Data controller

The controller of the personal data collected on this site is:

2. Data collected

When subscribing to our newsletter, we collect the following personal data:

• First name: used to personalise communications
• Last name: used to personalise communications
• Email address: used to send the newsletter
• GDPR consent: proof of your consent to receive the newsletter

This data is collected directly from you when you voluntarily subscribe to the newsletter.

3. Purposes of processing

Your personal data is used exclusively for the following purposes:

• Sending the newsletter containing Rivierão press releases and news
• Personalising communications (use of first and last name)
• Managing your subscription and preferences
• Meeting our legal obligations (keeping proof of consent)

4. Legal basis

The processing of your personal data is based on your consent (Article 6.1.a of the GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before that withdrawal.

5. Data recipients

Your personal data is processed by Rivierão and may be shared with the following recipients:

• Brevo (Sendinblue): an EU-based email service provider used to manage and send the newsletter. Brevo is GDPR-compliant and acts as a processor under a data processing agreement.
• Authorised Rivierão staff: only people authorised to manage the newsletter and customer support.

Your data is never sold, rented or shared with third parties for commercial purposes.

6. Retention period

Your personal data is retained:

• For the entire duration of your newsletter subscription
• Up to 3 years after you unsubscribe to meet our legal obligations (proof of consent, complaint handling)
• Beyond this period, your data is permanently deleted

7. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: you can obtain a copy of your personal data
• Right to rectification: you can correct inaccurate or incomplete data
• Right to erasure: you can request the deletion of your data
• Right to object: you can object to the processing of your data
• Right to portability: you can retrieve your data in a structured format
• Right to withdraw consent: you can withdraw your consent at any time
• Right to restriction: you can request the restriction of the processing of your data

To exercise these rights, you can:

• Unsubscribe directly via the link in every newsletter email
• Contact us by email at contact@rivierao.com
• Send us a written request with a copy of your identity document

You also have the right to lodge a complaint with the French data protection authority (CNIL) if you believe the processing of your personal data breaches the GDPR. CNIL website

8. Data security

Rivierão implements all appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our providers (notably Brevo) are selected for their GDPR compliance and level of security.

9. Cookies and trackers

This site uses technical cookies necessary for its operation. No tracking or advertising cookies are used. For more information, see our About page.

10. Changes

This privacy policy may be changed at any time. The date of the last update is shown at the top of this page. We encourage you to review this page regularly to stay informed of any changes.

11. Contact