1. Introduction
This cookie policy explains how Not Only Wine S.à r.l. (24, Rue Jacques Santer, L-6139 Junglinster, Grand Duchy of Luxembourg, RCS Luxembourg B 221858) uses cookies and similar technologies on the website www.notonlywine.lu (the “Site”). The Site is hosted on infrastructure located within the European Economic Area, in accordance with the applicable regulations; the arrangements governing our use of processors and the safeguards covering any transfers outside the EEA are described in our Privacy Policy. This policy supplements our Privacy Policy.
The storing of and access to cookies are governed by Article 5(3) of Directive 2002/58/EC on privacy and electronic communications, transposed into Luxembourg law by the amended Law of 30 May 2005 on the protection of privacy in the electronic communications sector, as well as by the GDPR and the guidelines of the National Commission for Data Protection (CNPD).
2. What is a cookie?
A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. It enables the party placing it to recognise your device and to store certain information relating to your browsing (basket contents, login session, preferences, traffic statistics).
This policy also covers similar technologies: pixels and invisible tags, measurement scripts, browser local storage (local storage / session storage) and equivalent identifiers. A distinction is drawn between “first-party” cookies (placed by the Site) and “third-party” cookies (placed by partners), and between session cookies (deleted when the browser is closed) and persistent cookies (retained for a set period).
3. Your consent
On your first visit to the Site, a cookie management banner allows you, with the same degree of ease, to accept all cookies, to refuse them (with the exception of strictly necessary cookies) or to configure your choices by category. No cookie subject to consent is placed or read before you have expressed your choice.
You may withdraw or amend your consent at any time via the “Manage my cookies” link in the footer of the Site. Your choice (acceptance or refusal) is retained for a maximum of 6 months, after which your consent will be requested again. Evidence of the consents collected is retained in accordance with the applicable rules. Refusing non-essential cookies does not restrict your access to the Site.
4. Categories of cookies used
Strictly necessary cookies (exempt from consent): essential to the operation of the Site and to the provision of the service you expressly request: management of the basket and of the order process, authentication and security of the customer account, fraud prevention, load balancing, storing your cookie choices. Disabling them would prevent the shop from functioning.
Preference / functional cookies: storing your display preferences (language, location) in order to improve your experience.
Analytics / performance cookies: compiling statistics on visits to and use of the Site (pages viewed, source, purchase journey) in order to improve its content and usability. Placed only with your consent.
Marketing / advertising cookies: the shop currently uses no cookies in this category. Should such cookies (advertising campaign measurement, targeted advertising) be deployed in the future, they would be placed only with your prior consent and this policy would be updated.
5. List of cookies placed
5.1. Strictly necessary cookies and trackers (exempt from consent)
| Cookie / tracker | Purpose | Indicative duration |
|---|---|---|
| Basket and shopping session | Retaining the contents of your basket and the state of your session during your visit | Session to 30 days |
| Customer account authentication | Keeping you signed in and securing access to your customer area | Session to 30 days |
| Consent record | Storing your cookie choices so that you are not asked again on every visit | 6 months |
| Display preferences | Storing the language and display preferences you have selected | Session to 12 months |
| __stripe_mid, __stripe_sid | Securing the payment process and preventing fraud (Stripe, processor) | 30 minutes to 1 year |
| Infrastructure security | Protecting the Site against automated traffic and attempted attacks (technical processor) | 30 minutes |
5.2. Analytics / performance cookies (subject to consent)
| Cookie / tracker | Purpose | Indicative duration |
|---|---|---|
| _now_session | Browsing session analysis (in-house audience measurement) | 30 minutes |
| _now_visitor | Statistical visitor identifier (in-house audience measurement) | 1 year |
| _landing_page, _orig_referrer | Landing page and referring site | 2 weeks |
Strictly necessary cookies are described by purpose, in accordance with the CNPD guidelines. The exact list of trackers may change as the Site and the services integrated into it are technically updated. The current list, including identifiers and precise retention periods, is available at any time via the “Manage my cookies” module on the Site. The durations of third-party cookies are set by their respective publishers.
6. Cookies placed by third parties
To date, no advertising cookie or third-party social network cookie is placed via the Site. The only third-party cookies liable to be placed come from our technical processors, acting on our documented instructions under contracts compliant with Article 28 GDPR: our payment service provider (Stripe Payments Europe, Limited, Ireland), for securing transactions and preventing fraud, and our hosting provider, for the security and availability of the Site. The safeguards applicable to any transfer of data outside the European Economic Area are described in our Privacy Policy. Should third-party services be activated in the future, the corresponding cookies would be placed only with your prior consent.
7. Managing cookies from your browser
In addition to the “Manage my cookies” module on the Site, you can configure your browser to accept, refuse or delete cookies, either case by case or generally. Instructions are set out in your browser’s help menu: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge, or any other browser. You may also use private browsing mode.
Warning: blocking or deleting strictly necessary cookies may prevent essential functions of the Site from being used (basket, account login, placing an order).
8. Retention periods
In accordance with the good practice recommended by the data protection authorities, the lifetime of cookies placed on your device does not exceed thirteen (13) months, and data collected via audience measurement cookies is retained for a maximum of twenty-five (25) months. On expiry of these periods, your consent is collected again.
9. Changes
We may amend this policy at any time, in particular where the Site, the cookies used or the applicable rules change. The version in force, bearing a date, is published on the Site.
10. Contact and rights
For any question concerning cookies, or to exercise your rights (access, rectification, erasure, objection, withdrawal of consent), please contact us at info@notonlywine.lu or by post at the company’s registered office. You also have the right to lodge a complaint with the National Commission for Data Protection (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Grand Duchy of Luxembourg – www.cnpd.lu. For more information on the processing of your personal data, please see our Privacy Policy.