Protection policy personal data
VS-FACTORY is committed to protecting your privacy and personal data
I. How do we process your personal data?
When using the Website, certain personal data concerning the user (“Data”) may be collected. VS-FACTORY ensures that it collects and processes only the Data strictly necessary for the purposes for which it is collected.
Personal data is any information allowing you to be identified as a natural person or to be recognized, directly or indirectly. These include, for example: name, first name, date of birth, postal address, e-mail address, IP address of a computer, browsing history, photo, videos, comment indicating your contact details, personal login and password, etc.
(1) Subscription to our newsletters
When you subscribe to our newsletters, VS-FACTORY collects your email address, your first name, your last name and may also collect the name of your company if you wish to communicate it.
These data are processed exclusively for sending the newsletter.
According to article 6.1 (a) of the GDPR, the legal basis of the process is your consent.
You can withdraw your consent at any time via the link provided in each newsletter or by sending us an email to the address indicated in the “contact” section of this policy.
Unless previously unsubscribed, the data is kept for three (3) years after the last contact with you and will then be deleted or archived.
At the end of this period, your collected data will be automatically deleted, except if you exercise your right to erasure before this period, or if a longer retention period is imposed on you under a legal provision or regulatory.
(2) Contact form
When you contact us via the Website, VS-FACTORY collects your email address and your name, and if you wish, your telephone number, your first name and/or the company name of your company.
These data are processed to allow VS-FACTORY to respond to your request.
The data is collected for the duration strictly necessary to respond to the request.
The legal basis for this process is the legitimate interest in responding to your request, according to Article 6.1 (f) of the GDPR.
At the end of this period, your collected data will be automatically deleted, unless you exercise your right to erasure before this period, or if a longer retention period is imposed on you under a legal provision or regulatory.
(3) Visit the website
If you visit our Site without subscribing to newsletters or submitting a contact form, VS-FACTORY collects the personal data that your browser transmits to our server (“server log files”) necessary for displaying the Site :
- Browser used;
- Operating system used;
- IP address;
- Date and time of access;
- Amount of data sent in bytes;
- Source from which you arrived at the page.
The data is stored and used exclusively for the purpose of ensuring access and functionality of our website.
The legal basis for this process is the legitimate interest in providing access to our website, in accordance with Article 6.1 (f) of the GDPR.
(4) Collection of additional data
VS-FACTORY reserves the right to use additional and/or complementary means of data collection. VS-FACTORY will specify, in accordance with the regulations, the precise purposes of the processing concerned on the data collection page.
II. Quelle est la finalité, la base juridique de la collecte de vos données et la durée de conservation ?
VS-FACTORY only keeps your Data for the duration necessary for the operations for which they were collected (as described in article I here -above) and in compliance with current legislation.
The following table summarizes how long we store your personal data:
Partner and supplier relationship management
Performance of the contract
Duration of the contract increased by the applicable limitation periods
Duration of newsletter subscription
Management of cookies and other website trackers
Management and tracking of contact requests
Legitimate interest VS-FACTORY
Time required to process the request
Exercising your rights regarding personal data
Legal and regulatory obligation
1 year or 6 years from the request to exercise the right, depending on the right exercised
III. Who are the recipients of your data?
Data may only be disclosed to competent and authorized recipients.
The data collected may be transmitted to our service providers, IT service providers and hosts in accordance with the provisions of this Policy. These service providers are external companies that may be called upon to help us carry out our activities.
Subcontractors and service providers as well as their staff are subject to an obligation of confidentiality and may only use the Data, on our behalf, for the specific missions entrusted to them, on the basis of our instructions, in accordance with the aforementioned purposes and in compliance with the provisions of the GDPR.
We do not pass on your data to unauthorized third parties.
In certain cases provided for by law, your data may be transmitted to third parties legally authorized to access it upon express request: judicial authorities, administrative authorities, etc. We may also communicate your data to third parties if such measure is necessary to protect and/or defend our rights and enforce these provisions.
IV. What are your rights regarding personal data?
You have rights to your Data. Thus, you have, at any time, the right to ask VS-FACTORY for access to your Data, the rectification or deletion of your Data, the right to limit the processing of your Data, the right to oppose the processing of your Data and the right to request portability of your Data. You also have the right to define instructions regarding the fate of your Data after your death.
If you wish to exercise these rights, you can send a written request to the following address: VS-FACTORY, 11 rue Castex 75004 – Paris – France. In case of doubt, proof of identity may be requested. We undertake to respond to requests to exercise user rights as quickly as possible and, in any case, within the legal deadlines.
If you have any questions about your personal data, you can contact us by sending an email to: firstname.lastname@example.org
In the absence of a satisfactory response from us, you can contact the competent supervisory authority in France, the “CNIL” (Commission Nationale de l’Informatique et des Libertés) located at 3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX 07 – FRANCE.
V. Our obligations
To process personal data carried out via the Website, VS-FACTORY is the Data Controller.
As data controller, VS-FACTORY undertakes to:
- Process your personal data fairly and lawfully for specified purposes;
- Process your personal data only for the purposes described in Article I of this Policy;
- Implement all appropriate technical and organizational measures necessary to ensure the security, confidentiality, integrity, availability and resilience of process systems and services;</ span>
- Limit access to your personal data to persons duly authorized for this purpose;
- Raise awareness and train employees on the processing of personal data;
- Notify the competent supervisory authority of any security breach presenting a serious risk to the rights and freedoms of users of our Website within 72 hours following the occurrence of a such flaw;
- Ensure that subcontractors within the meaning of the GDPR have implemented all the technical and organizational measures necessary to ensure security, confidentiality, integrity, availability and the resilience of processing systems and services.
VI. Security and subcontracting
Your Data is processed securely.
VS-FACTORY has implemented IT and technical security measures to limit any leak, loss, deterioration or theft of data and protect data against any computer attack and any virus.
VS-FACTORY ensures that subcontractors and external service providers implement appropriate security measures that comply with GDPR requirements.
VII. Data transfer
VS-FACTORY stores the personal data it collects in the European Union.
VS-FACTORY may use the services provided by specialized companies, acting as subcontractors and mentioned above. When these companies transfer data outside the European Union, VS-FACTORY ensures that these companies ensure a high level of protection in accordance with the requirements of the GDPR.
Cookies are files that most websites leave on your computer when you visit them. Stored on your computer’s hard drive, they contain a small amount of data with a unique anonymous identifier. On your computer, cookies are managed by your Internet browser and are necessary for the use of the Website.
Technical cookies placed on your terminal during your navigation on the website are exclusively necessary for the operation of the website. You cannot deactivate them.
Audience measurement cookies, social network cookies and advertising cookies which are not strictly necessary and are placed on your terminal if you have consented to this by clicking on “accept”. The processing of your data collected from these cookies is therefore based on your consent, which you can withdraw at any time.
Cookies have a maximum lifespan of thirteen (13) months. Some cookies will require your consent to be kept for more than six (6) months.
You can find more information about the cookies used in our cookies policy.
IX. Changes to personal data protection policy
VS-FACTORY reserves the right to modify this policy at any time.