Privacy Policy – GRANDCRU GRAPES

Grandcru Grapes located at Valeriuslaan 9, 1985 ET in Driehuis, Netherlands is responsible for processing personal data as outlined in this privacy statement.

Contact Information
Valeriuslaan 9, 1985 ET Driehuis, Netherlands
Phone: +31 850 806 426

(Updated November 2025 – applicable within the European Union)

  1. Introduction

This Privacy Policy explains how GRANDCRU GRAPES, located in Driehuis, the Netherlands, collects, uses, stores, and protects your personal data when you visit our website, purchase our products, or participate in our events and tastings.
We comply with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).

  1. Personal Data We Process

We process personal data that you provide to us or that arise from your use of our services and website.
The categories of data include:

  • First and last name
  • Gender
  • Date of birth (for legal age-verification – 21 years and older)
  • Address details
  • Telephone number
  • Email address
  • Bank account number
  • Data about your activity on our website (e.g. visited pages, purchases, cookies)

We do not collect special categories of personal data unless required by law.

  1. Purposes and Legal Bases for Processing

GRANDCRU GRAPES processes personal data only for specific, legitimate purposes and on the following legal bases under Article 6 of the GDPR:

  1. Performance of a Contract (Article 6(1)(b) GDPR)
    We process personal data to perform and manage our contractual obligations, including:

    • Processing and delivering your orders;
    • Handling payments and invoicing;
    • Providing courses, tastings, or related services;
    • Communicating with you about your purchase or event participation.
  2. Consent (Article 6(1)(a) GDPR)
    When you voluntarily subscribe to our newsletter or agree to receive marketing communications, we process your personal data based on your explicit consent.
    You may withdraw your consent at any time by clicking the unsubscribe link in our emails or contacting us directly.
  3. Legitimate Interests (Article 6(1)(f) GDPR)
    We may process data to pursue our legitimate business interests, such as:

    • Improving our website, products, and services;
    • Analysing customer behaviour to tailor our offerings;
    • Preventing fraud and misuse of our website or services;
    • Protecting our business and customers against unauthorised or illegal activities.
      Where we rely on legitimate interests, we always balance them against your rights and freedoms.
  4. Legal Obligation (Article 6(1)(c) GDPR)
    Certain processing is required to comply with legal obligations, such as:

    • Verifying age and identity before selling alcoholic beverages;
    • Maintaining tax and accounting records;
    • Responding to lawful requests from public authorities.
  1. Retention of Personal Data

We retain personal data only as long as necessary for the purposes for which it was collected or to meet legal obligations.
Once these purposes no longer apply, the data will be securely deleted or anonymised.

Examples:

  • Customer and transaction data: retained while the customer relationship exists and for the statutory tax retention period (currently 7 years).
  • Newsletter subscribers: until you unsubscribe.
  • Job applicants: data deleted immediately after rejection unless explicit consent is given for future vacancies.
  1. Sharing Personal Data with Third Parties

We do not sell your data to third parties. We share data only when necessary to execute our contract with you or to comply with legal obligations.

All external parties that process data on our behalf are bound by data-processing agreements ensuring confidentiality and security.

Current processors:

  • DHL (Teamtrans network)
  • PostNL
  • IT and hosting providers supporting our webshop and email systems.
  1. Cookies and Tracking Technologies

GRANDCRU GRAPES uses functional, analytical, and marketing cookies.
Cookies are small text files stored on your device when visiting our website. They ensure technical functionality and help us improve performance and user experience.

You can manage or delete cookies at any time through your browser settings.

Types of cookies used:

  • Functional: grandcrugrapes.com
  • Analytical: Google Analytics
  • Marketing / tracking: Facebook Pixel, Datatrics
  1. Your Rights

You have the right to:

  • Access your personal data;
  • Correct or delete your data;
  • Restrict or object to processing;
  • Withdraw consent at any time (without affecting prior processing);
  • Receive your data in a portable format (“data portability”).

To exercise these rights, please contact our Data Protection Officer (DPO) at jannes@grandcrugrapes.com.
To verify your identity, please attach a copy of your ID with your photo, MRZ, passport number, and BSN redacted.
We will respond as soon as possible, but within four weeks.

  1. Complaints

If you believe that we have not adequately protected your personal data, or if you have a complaint about our data processing, please contact our DPO first.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
https://autoriteitpersoonsgegevens.nl/en/contact-dutch-dpa

  1. How We Secure Personal Data

We take the security of your data seriously and implement appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, or disclosure.
Measures include:

  • SSL-secured website and encrypted data transfer;
  • Controlled access to digital and physical storage;
  • Staff confidentiality and security training;
  • Processor agreements requiring equivalent safeguards.

We regularly review and update our security practices to maintain an appropriate level of protection.

  1. Contact

Data Protection Officer (DPO)
GRANDCRU GRAPES
Driehuis, The Netherlands
Email: jannes@grandcrugrapes.com

  1. Changes to This Policy

We may update this Privacy Policy from time to time.
The latest version is always available at grandcrugrapes.com/privacy-policy.
The version published on the website at the time of your interaction applies.

© 2025 GRANDCRU GRAPES – All rights reserved
Version: November 2025

Download the Privacy Policy (PDF)