PRIVACY POLICY

VVNT

 

This privacy policy (hereinafter the “Policy”) is issued by the company VVNT, a limited liability company (Société à responsabilité limitée) with share capital of 1,000.00 euros, registered with the Bobigny Trade and Companies Register under number 910 579 200, whose registered office is located at 13 bis, rue Saint Antoine 93100 Montreuil, represented by Ms. Marion Granger and Mr. Frédéric Verdier, Tel: +33 (0)6 28 91 56 26, email: info@magasinvivant.com (hereinafter “VVNT”, also referred to hereinafter as “we”, “our”, “us”).

 

When you browse our website and/or place an order for a product on our site, we may collect and process certain of your personal data, as the data controller (hereinafter “Data Controller”) within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”).

 

In this capacity, as Data Controller, VVNT is committed to respecting the privacy of its customers and protecting their personal data. VVNT undertakes to ensure that the processing of personal data it carries out complies with the applicable provisions of the GDPR and Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.

 

The purpose of this Policy is to inform you about VVNT’s practices regarding the collection, use, and sharing of data. 

 

  1. Collection and processing of personal data by VVNT

 

I.1 Data collected when browsing the Site

 

If you visit our website to obtain general information about VVNT, without contacting us directly or placing an order, we collect the personal data that your browser transmits to our server (“server log files”). VVNT collects the following data, which is necessary to display the website:

 

- Browser used;

- Operating system used;

- IP address;

- Date and time of access;

- Amount of data sent in bytes;

- Source from which you reached the page.

 

This data is stored and used exclusively for the purpose of ensuring access to and functionality of our website.

 

The legal basis for the processing of this data is our legitimate interest in providing access to our website, in accordance with Article 6.1 (f) of the GDPR.

 

You can consult our cookie policy to manage your settings and obtain detailed information on this subject.

 

II.2 Data collected when using the contact form or contact email address

 

When you contact us (e.g., via the contact form or by email), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request. 

 

If your contact is intended for the conclusion of a contract, the additional legal basis for data processing is Article 6 (1) (b) of the GDPR. Otherwise, Article 6 (1) (a) of the GDPR serves as the legal basis. 

 

Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the issue raised has been definitively clarified and provided that there are no statutory retention requirements.

 

I.3 Data collected when opening a customer account 

 

When you create a customer account on our website, we collect and process some of your personal data, namely: surname, first name, email address. 

 

In accordance with Article 6 (1) (b) of the GDPR, personal data will continue to be collected and processed if you provide it to us in order to execute a contract or when opening a customer account. 

 

The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the controller at info@magasinvivant.com. We save and use the data you provide to process the contract between us. After complete processing of the contract or deletion of your customer account, your data will be blocked in compliance with tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we reserve the right to continue using your data as permitted by law.

 

I.4 Data collected when ordering a product on the VVNT website 

 

When you order a product on our website, we collect and process some of your personal data, namely: surname, first name, email address, telephone number, postal address. We process and collect this data to respond to your request, process your order, and inform you about the status of this order. 

 

The legal basis for the processing of this data is compliance with our contractual obligations, in accordance with Article 6.1 (b) of the GDPR. 

 

The data processing carried out is intended for the management of your order. 

 

After your last order of a work from VVNT or after your last contact with VVNT, your data will be kept for three years, and then deleted or archived.

 

I.5 Subscription to the VVNT newsletter 

 

When you agree to receive our newsletter by email, we send you emails to keep you informed of our sales, news, and offers. In this context, VVNT collects some of your personal data, namely your email address.

 

This data is stored and used exclusively for the purpose of sending you our newsletters.

 

The legal basis for the processing of this data is your consent, in accordance with Article 6.1 (a) of the GDPR.

 

You can withdraw your consent at any time via the link provided for this purpose in each of the newsletters or by sending us an email at the address specified in the “Contact us” section of this Policy. 

 

The data collected is kept for a period of three years, and then will be deleted or archived. 

 

At the end of this period, all of your collected data will be automatically deleted, unless you exercise your right to deletion before this deadline, or a longer retention period is imposed by virtue of a legal or regulatory provision. 

 

  1. Retention period for personal data 

 

In accordance with the GDPR, we will use your personal data for the specific purposes for which it was collected (as described in Article I above) or to comply with any regulations (e.g., commercial or tax) for limited periods.

 

The following table summarizes the periods for which we keep your personal data:

 

Category of personal data

Retention period

Personal data related to creating a customer account

Three (3) years from the collection of data and/or the last contact with the prospect

Personal data related to contact requests

Until the request has been processed

Personal data related to sending the newsletter   

Three (3) years from the collection of data and/or the last contact with the prospect

Personal data related to ordering products 

Three (3) years from the collection of data and/or the last contact with the client

Cookies and log files

Six (6) months from the deposit of the cookie 

 

 

In addition, unless more specific information is provided in this Policy, VVNT archives or erases all stored personal data when it is no longer necessary for the purposes for which it was collected and processed.

 

  1. VVNT’s obligations

 

For personal data processing carried out, in particular via the website, VVNT is the Data Controller. 

 

As Data Controller, VVNT undertakes to:

 

  • Process your personal data fairly and lawfully for specified purposes;
  • Process your personal data only for the purposes described in Article I of this Policy 
  • Implement all appropriate technical and organizational measures necessary to ensure the security, confidentiality, integrity, availability, and resilience of processing systems and services 
  • Limit access to your personal data to persons duly authorized for this purpose;
  • Raise awareness and train employees on the processing of personal data;
  • Notify the competent supervisory authority of any security breach presenting a serious risk to the rights and freedoms of our website users within 72 hours of the occurrence of such a violation;
  • Ensure that processors within the meaning of the GDPR have implemented all necessary technical and organizational measures to ensure the security, confidentiality, integrity, availability, and resilience of processing systems and services.

 

  1. Recipients of the collected data

 

The personal data collected and processed by VVNT is accessible only to persons duly authorized for administrative, commercial, website maintenance, or VVNT order management purposes.

 

The data collected may be transmitted to our service providers, IT providers, and hosting services in compliance with the provisions of this Policy. These service providers are external companies that may be called upon to help us ensure our business activities. 

 

Processors and service providers and their staff are subject to a confidentiality obligation and may only use the data on our behalf for the specific tasks entrusted to them, based on our instructions, in accordance with the aforementioned purposes and in compliance with the provisions of the GDPR.

 

VVNT’s service providers are:

 

  • For website operation: Shopify 
  • For newsletter campaign delivery: Omnisend
  • For the payment solution: Stripe/PayPal
  • For order delivery: Colissimo/DPD/ChronoRelais

 

VVNT may be required to share personal data with third parties when a legal obligation requires it, or if this communication is necessary to respond to any claim made against it, comply with any judicial request, in case of emergency involving public health or the physical integrity of a person, as part of investigations, or to guarantee the rights, property, and security of VVNT. 

 

  1. Your rights 

 

Under the GDPR, you have several rights.

 

You have: 

 

  • the right to access and receive a copy of the personal data concerning you held by VVNT;
  • the right to access your personal data to rectify, modify, or erase any errors or incorrect information; 
  • the possibility of requesting the deletion and erasure of all data held by VVNT; 
  • the right to object at any time to the processing of your personal data for marketing purposes or to the processing carried out; 

- the right to request the suspension of the processing of your personal data; 

the right to data portability, i.e., the right to receive the data we possess in a structured, commonly used, and machine-readable format and the right to transmit this data to another data controller; 

- the right to define directives regarding the fate of your personal data after your death. 

 

All these rights can be exercised upon a simple written request from you, accompanied by a copy of a valid and signed identity document, sent by email to the following address info@magasinvivant.com or by post to the following address: VVNT – 13 bis, rue Saint Antoine in Montreuil (93100). 

 

In order for VVNT to respond to you within a reasonable timeframe, your request must be clear, precise, and justified. VVNT reserves the right not to respond to any request that does not meet these criteria. 

 

You also have the right to contact and lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (https://www.cnil.fr) and the right to seek judicial remedy before the competent courts.