Privacy policy

This English translation is provided for information purposes only. In the event of any discrepancy, the French version shall prevail.

PRIVACY POLICY

1. Preamble

This Privacy Policy describes how the website ved-distri.com, operated by the company VED-DISTRI SASU, collects, uses, stores and protects users' personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French law.

It applies to all processing carried out via the website, in particular when browsing, creating an account, placing orders online, subscribing to the newsletter and using the contact forms.

2. Identity of the data controller

Data controller: VED-DISTRI SASU
Postal address: 10 rue de la montée, 68590 Saint-Hippolyte, France – Telephone: +33 3 67 10 03 84.

3. Data collected

In the course of operating the website, the following categories of data may be collected:

  • Identification data: surname, first name, title, postal address, email address, telephone number.

  • Order and billing data: products ordered, amount, delivery and billing address, purchase history.

  • Connection and browsing data: IP address, login details, logs, pages viewed, preferences, cookies.

  • Customer service data: exchanges by email or via the contact form, complaints, support requests.

Payment data is processed by the secure payment service providers chosen by ved-distri.com and is not stored in clear text by the website.

4. Purposes and legal bases of processing

Data is processed for the following purposes:

  • Managing orders, deliveries and invoicing (performance of a contract).

  • Creating and managing the customer account (performance of a contract).

  • Managing customer service, returns and guarantees (legitimate interest and performance of a contract).

  • Sending information emails relating to order tracking (performance of a contract).

  • Sending commercial communications and newsletters, subject to your prior consent (consent).

  • Anonymous statistical analysis of website traffic and improvement of usability (legitimate interest).

  • Compliance with legal and accounting obligations (legal obligation).

5. Recipients of the data

Personal data is intended solely for:

  • The data controller and, where applicable, authorised persons within VED-Distri.com (order management, customer support, accounting).

  • Technical subcontractors and service providers acting on behalf of VED-Distri.com: hosting provider (SCALEWAY SAS), secure payment service providers, carriers, IT service providers.

These providers are contractually bound by an obligation of confidentiality and to comply with data protection regulations.

6. Transfers outside the European Union

In principle, data is hosted and processed within the European Union, in particular via the hosting provider SCALEWAY SAS.
If certain service providers are located outside the EU, VED-Distri.com undertakes to ensure that appropriate safeguards are in place (adequacy decision, standard contractual clauses or equivalent mechanisms) in accordance with the GDPR.

7. Retention periods

Personal data is kept for limited periods, proportionate to the purposes pursued:

  • Customer account and identification data: for the duration of the contractual relationship, followed by intermediate archiving for the applicable legal limitation period.

  • Order and billing data: for the time necessary to perform the contract, then kept for accounting purposes for the period required by law (generally 10 years for accounting records).

  • Data used for marketing purposes: until consent is withdrawn or for 3 years from your last contact with us.

  • Cookies and browsing data: limited lifespan depending on their nature, generally between 6 and 13 months, in line with the recommendations of the supervisory authorities.

8. Your rights

In accordance with the GDPR, every user has the following rights over their personal data:

  • Right of access: to obtain confirmation as to whether or not data concerning them is being processed and, where it is, to receive a copy.

  • Right to rectification: to request that inaccurate or incomplete data be updated or corrected.

  • Right to erasure: to request the deletion of their data in the cases provided for by law.

  • Right to restriction of processing: to request the temporary suspension of processing in certain circumstances.

  • Right to object: to object at any time to processing for marketing purposes or processing based on legitimate interest, subject to compelling legitimate grounds to the contrary.

  • Right to data portability: to receive the data provided in a structured, commonly used and machine-readable format, or to have it transmitted to another data controller where technically feasible.

  • Right to withdraw consent at any time, for processing based on consent, without retroactive effect.

These rights may be exercised by contacting VED-Distri.com using the contact details given above, stating your identity and the nature of your request.

9. Cookies and trackers

The website uses cookies and other trackers to:

  • Ensure the website functions properly (basket, session, authentication).

  • Measure audience and produce anonymous traffic statistics.

  • Make browsing easier and remember certain user preferences.

Cookies that are not strictly necessary (in particular for audience measurement or marketing purposes) are only placed with your consent, obtained via a banner or cookie management tool.
You can configure your preferences at any time using this tool, or set your browser to accept or refuse all or some cookies.

10. Data security

VED-Distri.com implements appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.
These measures include the use of an SSL certificate (HTTPS protocol) to secure exchanges, restricting access to authorised persons only, and back-up procedures.

11. Complaints to the supervisory authority

If you encounter any difficulty regarding the management of your personal data, VED-Distri.com invites you first to get in touch using the contact details provided in order to seek an amicable solution.
Users also have the right to lodge a complaint with the competent supervisory authority, in particular, in France, with the CNIL.

12. Updates to this policy

This Privacy Policy may change, in particular to take account of legislative, regulatory or technical changes affecting data processing.
The applicable version is the one published on the website on the date of your visit; in the event of a major change, you may be informed by a dedicated message on the website or by email.