This policy explains personal information handling for the Australian edition of Vinabox. Policy date: 20 October 2026.
Who is responsible
HONOM SASU, 13 Rue Tarillon, 38000 Grenoble, France, is the publisher and data controller. Email contact@vinabox.net for privacy questions or requests. HONOM is established in France and is subject to the European General Data Protection Regulation for its relevant processing.
Australian privacy law can also apply to overseas businesses in specified circumstances. Its scope depends on the organisation and its activities, with exceptions to the small-business exemption. This policy does not limit any rights you have under applicable Australian law.
Information collected and why
| Situation | Information | Purpose |
|---|---|---|
| Browsing | IP address, requested page, request time, browser and technical error information | Deliver pages, protect the website and investigate faults or misuse. |
| Email enquiries | Email address, name if supplied, message and attachments | Respond, investigate a correction or manage a privacy request. |
| Age and privacy choices | Your adult confirmation and browser preferences | Remember your choices without asking for a copy of your identity document. |
Please provide only the information needed for your enquiry. Do not send identity documents, payment details or health information unless we explain a specific need and a suitable method. This publication does not operate a wine checkout, visitor account, newsletter subscription or reader-comment service.
Optional services and external websites
Google Analytics 4 is optional and loads only after you agree to Statistics in the Complianz cookie banner. The site has no advertising or embedded video players. Refusing statistics does not prevent you from reading the guides.
Ordinary links do not load a merchant website until you follow them. Once you leave Vinabox, the destination has its own information-handling practices. Read the cookie policy for browser controls.
Legal grounds, recipients and overseas handling
Under the GDPR, necessary website security and ordinary correspondence rely on our legitimate interests in operating the publication and answering requests. A legal duty may require some records to be retained or disclosed. Optional consent-based processing requires a choice that you can withdraw.
Website hosting and the central email service are provided by o2switch in France. Messages to contact@vinabox.net are forwarded to hello@vinabox.fr, the central Vinabox mailbox. Authorised people working for HONOM may handle enquiries. We do not sell personal information. Information may be provided to authorities or advisers where legally required or needed to protect legal rights. Data sent from Australia is handled in France; Google Analytics data may also be processed in the United States, as explained below.
Retention and security
We keep personal information only as long as needed for its purpose, required by law or necessary for a specific dispute or security investigation. We review correspondence once an enquiry and necessary follow-up are complete. Server logs are managed by o2switch and the publisher for operation, security and applicable legal obligations. Ask us about a particular record if you need more detail.
We use access controls and reasonable safeguards, but no internet service or email transmission can be guaranteed completely secure.
Access, correction and complaints
You can ask what personal information we hold about you, request access or correction, and request deletion where the applicable law allows it. Under the GDPR you may also have rights to object, restrict processing and receive portable data. We may need proportionate information to confirm the request comes from you.
Email us first with the details of a privacy concern. We aim to respond within one month, explaining any lawful extension. If unresolved, you may complain to the French data protection authority, the CNIL. Where Australian privacy law applies, you may also be able to complain to the OAIC, subject to its complaint requirements.
Sources and further reading
Sources checked 20 October 2026.
- OAIC: small business and Privacy Act coverage
- OAIC: APP 8 cross-border disclosure
- OAIC: complain to an organisation
- OAIC: coverage and Australian link
Google Analytics 4
With your consent, HONOM SASU uses Google Analytics 4 to measure page visits and interactions. Google Ireland Limited processes information about pages viewed, your browser and device, approximate location and cookie identifiers on our behalf. We do not send the content of your emails to Analytics.
The legal basis is consent under Article 6(1)(a) GDPR. Data may be transferred to the United States under the EU-US Data Privacy Framework where applicable. Read Google's privacy policy. Analytics cookies can last up to two years. User and event data is retained for 14 months, separately from cookie lifetime.
Use the button below to change your choice. Withdrawal stops future Analytics collection on this browser; it cannot undo information already sent. Reading the site remains available.
Redirect links
Links starting with /au/go/ take you to the named merchant. The redirect records an aggregate click count for the destination. It does not create a visitor profile or an affiliate identifier. The server receives the technical request information described above.