Hinano World logo

Privacy notice
Hinanoworld.com

 V2-032026

1- General

SA BRASSERIE DE TAHITI undertakes to ensure that the processing of your personal data collected via the website https://www.hinanoworld.com complies with the ‘Informatique et Libertés’ french law of the january 6 of 1978 modified, and with the General Data Protection Regulation (GDPR).

This privacy policy applies only to the website https://www.hinanoworld.com.

Third-party websites or mobile applications to which you may be redirected when using the website have their own policies. We therefore advise you to consult the legal notices and privacy policies of these websites.

This privacy policy explains our policies and practices regarding how we collect and use the personal data we collect on our digital platforms.

2- Who is the data controller?

The data controller is the organization that determines how and for what purpose your personal data is used.

The data controller is BRASSERIE DE TAHITI, a public limited company with capital of 8,109,000,000 FCFP, registered in the Papeete Trade and Companies Register under number TPI 53 1B and number T.A.H.I.T.I 031195, whose registered office is located in Papeete, 17 place Notre Dame, TAHITI – 98 713 FRENCH POLYNESIA – BP 597 – 98713 Papeete; Telephone: (689) 40 46 76 00 –– Email: dpo@hinanoworld.com

 

3- What personal data do we collect?

Personal data is information relating to an identified or identifiable natural person.

We may collect the following categories of personal data when you use our site:

    • Identification data
    • Contact details
    • Account login details
    • Billing data and payment methods
    • The content of your requests via the form
    • Subscriptions (newsletter)
    • Relationship history
    • Technical information related to browsing (IP address and cookies)
    • Website usage information (language, duration of visit, etc.)

4- Why do we collect your personal data? How long do we keep it and on what legal basis?

4.1 Purposes

We use personal data for:

Order management

    • Customer account management
    • Order and delivery management
    • Billing and collection management

Payment for your orders

When you pay on our site, your payments are secure. We do not collect your payment details. SA Brasserie de Tahiti is committed to the security of online payments. Payment details are encrypted as soon as they are entered on the Banque de Tahiti’s SYSTEMPAY platform (PCI-DSS certified), to which the customer will be redirected when placing an order on our website. It is impossible to read them during their single transfer via the Internet. The only information that circulates on the site during orders is a transaction number associated with the payment card, which does not allow the actual card number to be retrieved under any circumstances.

Complaint management

    • Complaint management and returns management
    • Processing requests for access, rectification, opposition, and erasure.
    • Litigation management

Commercial prospecting management

The data we collect about you enables us to improve and personalize the services we offer you and the communications we send you. We may also recommend products similar to those you have already purchased or viewed and which match your interests. You can opt out of this marketing at any time by clicking on the hyperlink in each newsletter you receive, which allows you to unsubscribe.

Fraud prevention

The personal data collected on the website is also processed in order to secure payments and deliveries and thus ensure you receive the best possible service. If a payment or order check reveals an unpaid bill, fraud, or attempted fraud, the customer may be entered into a file listing fraud and unpaid bills until their situation is resolved.

4.2 Retention period:

We retain personal data for a period that does not exceed the time necessary for the purposes for which it is collected, in accordance with the provisions of the ‘Informatique et Libertés’ french law of the january 6 of 1978 modified and the GDPR.

Personal data is therefore retained by SA Brasserie de Tahiti:

    • In order to comply with legal and regulatory obligations, for the entire duration of the commercial relationship and ten (10) years for accounting obligations.

    • In order to enable the personalization of the services offered and the information sent to the Customer by the Seller for the entire duration of the commercial relationship and three (3) years from the last purchase.

    • Until consent for the newsletter subscription is withdrawn.
    • After this period, they are deleted.

4.3 Applicable legal bases:

    • Performance of a contract: the processing of personal data is necessary for the performance of the contract to which you have consented.

    • Consent: you agree to the processing of your personal data by means of express consent (checkbox, click, etc.). You may withdraw this consent at any time.

    • Legitimate interest: We have a legitimate interest in processing your data that is justified, balanced, and does not infringe on your privacy. Except in exceptional cases, you may object to processing based on legitimate interest at any time by notifying us.

    • Legal obligation: the processing of your personal data is required by law.

5- How do we share your personal data?

Your personal data collected on the website https://www.hinanoworld.com is confidential and is only shared internally with employees who are authorized to process it for the purposes mentioned above and who are committed to respecting its confidentiality. The CNIL or any other competent supervisory authority may also have access to it.

We may also be required to disclose personal data to third parties acting on behalf of SA Brasserie de Tahiti. All such processing is based on our prior instructions set out in a contract that complies with the requirements of applicable law. Such disclosures are made for various reasons, including:

    • Website hosting;
    • Website maintenance
    • Newsletter management
    • Management of consent to the use of cookies
    • Verification of your information, payment authentication,
    • Operational management of your orders and returns management

These service providers undertake to respect confidentiality and are not authorized to use your personal data for any other purpose. We also verify that appropriate security measures are in place to protect your personal data.

    • OVH: https://www.hinanoworld.com is hosted by OVH Canada. OVH SAS is a subsidiary of OVH Groupe SA, a company registered with the Lille Trade and Companies Register under number 537 407 926, located at 2, rue Kellermann, 59100 Roubaix. (Website: https://www.ovhcloud.com )
    • The WASA B agency located in Papeete, French Polynesia, is responsible for maintaining the website. Contact: webmaster@hinanoworld.com
    • Secure payment on the website is provided via the SYSTEMPAY payment solution, which is 3D Secure and PCI-DSS certified( https://www.banque-tahiti.pf/fr/systempay )
    • Order preparation, shipping, and returns management are handled by FUTURLOG, 7 rue du 29 juillet, 75001 Paris;
    • The management of the newsletter is outsourced to BREVO , Sendinblue, 9-17, rue Salneuve 75017 Paris ( https://www.brevo.com/legal/termsofuse/#appendix-3-data-processing-agreement-dpa)
    • Complianz for cookie management: Complianz BV, Kalmarweg 14-5, 9723JG Groningen, Netherlands.
    • Matomo: For web statistical analysis, InnoCraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand, (https://matomo.org/matomo-cloud-dpa/),  Represented in the EU by ePrivacy Holding GmbH, Professor Christoph Bauer, Burchardstraße 14, 20095 Hamburg, Germany (email: eu.rep@eprivacy.eu)

We may also disclose your personal data in order to comply with our legal obligations, which includes providing information to regulatory bodies when required by law, in particular to comply with our legal obligations in relation to the prevention and combating of fraud, money laundering, and terrorist financing.

Finally, in the event that S.A Brasserie de Tahiti or its assets are acquired by or merged with another company, including in the event of bankruptcy, your personal data will be shared with any of its legal successors.

Transfer outside the EU: Your personal data collected may be transferred outside the EU in connection with technical services necessary for the provision of our services. These transfers are governed by appropriate protection mechanisms in accordance with the GDPR.

6- How do we protect your personal data?

SA Brasserie de Tahiti has implemented security measures to protect your personal data from unauthorized access and use. We follow appropriate security procedures in the storage and disclosure of your personal data to prevent unauthorized access by third parties and to avoid accidental loss of your data. We limit access to your personal data to those who genuinely need it for professional reasons. Those who access your data will be subject to a duty of confidentiality to SA Brasserie de Tahiti.

We have also put procedures in place to deal with any suspected data security breaches. We will notify you and the French Supervisory Authority in the event of a suspected data security breach when required to do so by law.

Relationships with our service providers/subcontractors are governed by contractual clauses that meet the requirements of data protection regulations.

The site has an SSL certificate to ensure that the information and data transfer passing through the site are secure. An SSL (“Secure Socket Layer”) certificate is designed to secure the data exchanged between the user and the site.

7- Social networks

In order to give you the opportunity to share content or give your opinion on our products or services, we may integrate elements (buttons, plug-ins, etc.) related to social networks into our site. These elements allow social networks to track your browsing, provided that you are connected to the social network on your browser.

The terms of use for information related to these elements are defined by the social network of which you are a member; we have no control over the actions taken. We invite you to consult the privacy policies of these social networks to learn about how the data collected during your browsing is used and how to configure the privacy settings for your accounts.

8- What are your rights regarding your personal data?

You have the right to access, rectify, restrict, erase, transfer, and object to the processing of your personal data at any time, as well as to determine what happens to your personal data after your death.

    • Right of access: the right to receive a copy of your personal data.
    • Right of rectification: the right to request the correction of any errors in your data.
    • Right to erasure: the right to request the deletion of your personal data.
    • Right to restriction of processing: the right to request the restriction of the processing of your personal data in certain circumstances, for example if you contest the accuracy of the data.
    • Your right to data portability: the right to receive the personal data you have provided to us, in a structured, commonly used, and machine-readable format, and/or to transmit this data to a third party in certain situations.
    • Your right to object to the continued processing of your personal data.
    • Your post-mortem instructions.

If you have any questions about our Privacy Policy or the processing of your data, if you wish to exercise any of your rights mentioned above or withdraw your consent, you can contact the Data Protection Officer of SA Brasserie de Tahiti

    • by email at dpo@hinanoworld.com
    • or by mail at the following address:

Data Protection Officer _ Legal Department, SA Brasserie de Tahiti – BP 597 – 98 713 Papeete – TAHITI – French Polynesia

Please note that you may be asked to provide us with certain information (copy of a legally recognized identity card) for identification purposes in order to process your request and protect you against any fraudulent requests.

If you are not satisfied with our response, you may lodge a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr/fr/plaintes or to your supervisory authority.

8- Last update: 03/12/2026

This privacy policy outlines our current practices but may be modified and updated.

HINANO WORLD © 2026 - ALL RIGHTS RESERVED - LEGAL NOTICE - PRIVACY NOTICE - COOKIE POLICY - TERMS AND CONDITIONS