Privacy Policy

Last updated: March 2026

PFWF Events SAS (“we,” “us,” or “the Organizer”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information in connection with the Paris Food & Wine Festival and our website. This policy complies with the EU General Data Protection Regulation (GDPR) and applicable French data protection law.

1. Data Controller

PFWF Events SAS

3 Avenue du General Eisenhower, 75008 Paris, France

Email: privacy@foodwine-festival.com

SIRET: 912 345 678 00015

2. Data We Collect

We collect the following personal data:

Category Examples
Identity First name, last name
Contact Email address, phone number
Payment Credit card details (processed by our payment provider, not stored by us)
Transaction Order number, ticket type, purchase date, amount
Technical IP address, browser type, device info, pages visited
Communication Emails and chat messages sent to our support team
Preferences Dietary restrictions, accessibility needs (voluntarily provided)

3. Purpose & Legal Basis

Purpose Legal Basis (GDPR Art. 6)
Processing ticket purchases and managing registrations Performance of contract
Sending order confirmations and event updates Performance of contract
Customer support (email and chat) Legitimate interest
Sending marketing emails and newsletters Consent
Improving our website and services Legitimate interest
Complying with legal obligations (accounting, tax) Legal obligation

4. Cookies

Our website uses the following types of cookies:

  • Strictly necessary cookies — Required for the website to function (session management, security). No consent required.
  • Functional cookies — Remember your preferences (language, region). Set with your consent.
  • Analytics cookies — Google Analytics to understand how visitors use our website. Data is anonymized. Set with your consent.

We do not use advertising or tracking cookies. You can manage your cookie preferences at any time through your browser settings.

5. Data Sharing

We may share your personal data with the following categories of recipients:

  • Payment processors (Stripe) — to securely process your payment. Stripe is PCI-DSS compliant.
  • Email service provider — to send transactional and marketing emails.
  • Customer support platform (SupportPilot AI) — to manage support inquiries via chat and email.
  • Analytics (Google Analytics) — anonymized website usage data.

We do not sell your personal data. We do not transfer data outside the European Union. All our service providers are EU-based or have appropriate safeguards (Standard Contractual Clauses) in place.

6. Data Retention

Data Type Retention Period
Transaction records & invoices 10 years (French accounting law)
Customer contact data 3 years after the last event attended
Marketing consent records Until consent is withdrawn
Support conversations 2 years
Analytics data 26 months (anonymized)

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Correct inaccurate or incomplete data.
  • Right to erasure — Request deletion of your personal data (“right to be forgotten”).
  • Right to restrict processing — Limit how we use your data in certain circumstances.
  • Right to data portability — Receive your data in a structured, machine-readable format.
  • Right to object — Object to processing based on legitimate interest or direct marketing.
  • Right to withdraw consent — Withdraw your consent at any time (e.g., unsubscribe from marketing).

To exercise any of these rights, email our Data Protection Officer at privacy@foodwine-festival.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for all data in transit
  • Encrypted storage for sensitive data at rest
  • Access controls and authentication for all systems
  • Regular security audits and vulnerability testing
  • Staff training on data protection practices

9. Data Protection Officer

Our Data Protection Officer (DPO) can be contacted at:

Email: privacy@foodwine-festival.com

Postal address: DPO — PFWF Events SAS, 3 Avenue du General Eisenhower, 75008 Paris, France

10. Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the French data protection authority:

CNIL — Commission Nationale de l'Informatique et des Libertes

3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

Website: www.cnil.fr

Phone: +33 1 53 73 22 22

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. If we make significant changes that affect your rights, we will notify you by email or via a prominent notice on our website.

Privacy Questions?

Contact our DPO at privacy@foodwine-festival.com or use the chat widget below.