Personal data

Article 1 - Preamble

This privacy policy applies to the www.vsiberique.com website and all its subdomains. The purpose of this privacy policy is to explain to users of the site :

  • How their personal data is collected and processed. Personal data is any data that can identify a user, including first and last names, age, postal address, email address, user location, and IP address.
  • What rights users have regarding this data.
  • Who is responsible for processing the collected and processed personal data.
  • To whom this data is transmitted.
  • If applicable, the site's policy on cookies.

This privacy policy complements the legal notice.

Article 2 - General Principles for Data Collection and Processing

In accordance with the provisions of European Regulation 2018-493 of June 20, 2018, on Data Processing, Data Files, and Individual Liberties, and the General Data Protection Regulation (GDPR), the collection and processing of site users' data comply with the following principles :

  • Lawfulness, Fairness, and Transparency : Data can only be collected and processed with the consent of the user who owns the data. Users will be informed whenever personal data is collected and of the purposes for which it is collected.
  • Limited Purposes : Data collection and processing are carried out to meet one or more of the purposes outlined in these general terms of use.
  • Data Minimization : Only the data necessary for the proper execution of the objectives pursued by the site are collected.
  • Data Retention : Data is kept for a limited period, which the user is informed about.
  • Integrity and Confidentiality : The data controller commits to ensuring the integrity and confidentiality of the collected data.

In its operations, www.vsiberique.com adheres to the new GDPR provisions :

  • The user has expressly consented to the processing.
  • The processing is necessary for the performance of a contract.
  • The processing complies with a legal obligation.
  • The processing is necessary to protect the vital interests of the data subject or another natural person.
  • Processing may be necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
  • The processing and collection of personal data are necessary for the purposes of legitimate and private interests pursued by the controller or a third party.

Article 3 - Personal Data Collected and Processed When Browsing the Site

The data controller will store all collected data in the site's IT systems under reasonable security conditions for a maximum period of 3 years.

3.1 - Personal Data Collected and Processed

The personal data collected on the www.vsiberique.com website includes :

  • Civil status, identity, identification data, images (e.g., surname, first name, address, phone number, email address, etc.).
  • Information related to site usage: time spent, articles viewed, etc.

3.2 - How Personal Data is Collected

This data is collected when the user performs one of the following actions on the website :

  • Browsing the website.
  • Requests to save their data.
  • Requesting online or telephone assistance.
  • Requesting a quote or sending the contact form.

Article 4 - Purpose of Processing Personal Data

Data is collected and processed for the following purposes :

  • Creation of documents ;
  • Carrying out formalities ;
  • Establishing contact with third-party partners ;
  • Sending marketing and commercial information ;
  • Conducting satisfaction surveys ;
  • Customer management ;

And more generally, all activities related to the sale of services or products related to the information presented on the website.

Article 5 - Transmission of Data to Third Parties

Your personal data is used exclusively by www.vsiberique.com. However, it may be transmitted to our subcontractors listed below :

  • OVH: website hosting, cloud services, email management ;
  • SAGE: accounting services ; 
  • CREDIT MUTUEL bank: banking services ;
  • CREDIT MUTUEL: online payment system ;
  • PAYPAL: online banking and payment services ;
  • KIAMO: telephone management system ;
  • MAILJET: email system ;
  • MARCOM'CONSEILS: communications agency ;

Under no circumstances does www.vsiberique.com sell or rent your personal data to third parties.

In the event of illegal activities or suspicions of illegal activities, for investigations or judicial requisitions, your personal data may be transmitted, upon request, to judicial or control authorities: police, gendarmerie, magistrate, departmental directorate for the protection of populations (formerly DGCCRF), tax or social services, etc.

The personal data collected and processed directly by www.vsiberique.com is stored exclusively in France, on AXN servers.

Article 6 - Data Hosting

The www.vsiberique.com website is hosted by Cyres, headquartered at : 19 rue Edouard Vaillant, 37000 Tours, France.

The host can be contacted at : 02 47 68 48 50.

The data collected and processed by the site is exclusively hosted and processed in European Union countries.

Article 7 - Data Controller and Data Protection Officer

7.1 - The Data Controller

The person responsible for processing personal data is : Jessy Moncuit.

He can be contacted as follows :

  • by telephone at 00 33 (0)2 99 52 52 85, Monday to Friday from 9am to 6pm
  • or by email : dpo@vsf41.com

The data controller is responsible for determining the purposes and means of processing personal data.

7.2 - Obligations of the Data Controller

The data controller undertakes to protect the collected personal data, not to pass it on to third parties without the user's knowledge, and to respect the purposes for which the data was collected.

The site has an SSL certificate to ensure that information and data transfer via the site are secure. The purpose of an SSL certificate ('Secure Socket Layer' Certificate) is to secure the data exchanged between the user and the site.

Additionally, the data controller undertakes to notify the user in the event of data rectification or deletion, unless this would involve disproportionate formalities, costs, and steps for the user. If the integrity, confidentiality, or security of the user's personal data is compromised, the data controller undertakes to inform the user by any necessary means.

Article 8 - User Rights

In accordance with data processing regulations, the user has the following rights. To comply with the user's request, the data controller requires the following information: first and last name, email address, and, if relevant, account number or personal/subscriber space number. The data controller is obligated to respond to the user within a maximum of 30 (thirty) days.

8.1 - Presentation of User Rights Regarding Data Collection and Processing

1. Right of Access, Rectification, and Deletion

Users may access, update, modify, or request the deletion of data concerning them by following this procedure :

  • The user must send an email to the person responsible for processing personal data, specifying the subject of the request and using the provided contact email address.
  • If applicable, the user has the right to request the deletion of their personal space by sending an email to the data controller, specifying their personal space number.
  • The data deletion request will be processed within 30 working days.

2. Right to Data Portability

The user has the right to request the portability of their personal data held by the site to another site, following this procedure :

  • The user must request the portability of their personal data to the data controller by sending an email to the provided address.

3. Right to Limit and Object to Data Processing

The user has the right to request the limitation of or to object to the processing of their data by the site, which the site cannot refuse unless it can demonstrate legitimate and overriding reasons that may override the user’s interests, rights, and freedoms. To request the limitation of data processing or to object to data processing, the user must follow this procedure :

  • The user must request the data controller to limit the processing of their personal data by sending an email to the provided address.

4. Right Not to Be Subject to a Decision Based Exclusively on Automated Processing

According to Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on automated processing if the decision has legal effects concerning them or significantly affects them similarly.

5. Right to Determine the Fate of Data After Death

Users are reminded that they can organize what should happen to their collected and processed data upon their death, in accordance with Law No. 2016-1321 of October 7, 2016.

6. Right to Refer the Matter to the Competent Supervisory Authority

If the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if they believe any of the above rights have been infringed, they are entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.

Article 9 - Personal Data of Minors

According to Article 8 of European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 or over may consent to the processing of their personal data. If the user is under the age of 15, consent from a legal representative is required for personal data to be collected and processed.

The site editor reserves the right to verify by any means that the user is over 15 years of age or that they have obtained the agreement of a legal representative before browsing the site.

Article 10 - Conditions for Modifying the Privacy Policy

This privacy policy can be consulted at any time on the website. The site editor reserves the right to modify it to ensure compliance with current legislation. Users are therefore invited to review this privacy policy regularly to stay informed of any changes. The privacy policy was last updated on 01/12/2018.

Article 11 - Acceptance by the User of the Privacy Policy

By browsing the site, the user certifies that they have read and understood this privacy policy and accept its conditions, particularly concerning the collection and processing of their personal data.