Privacy Policy
1. Who is the data controller?
We are responsible for processing your personal data:
- VINTAGE APPANAGE
2. What data do we collect?
Personal data is data that allows an individual to be identified directly or by cross-referencing with other data.
We collect data that falls into the following categories:
- Identification data (including your surname, first name, email and postal address, telephone number);
- Data relating to your orders;
- Connection data (e.g. IP address, logs);
- Any information you wish to send to us as part of your contact request;
- Internet data (e.g. IP address, pages visited, date and time of connection, browser used, operating system);
- Location data;
- Data from recordings of telephone calls between you and our customer service (for example: the content of the calls, their dates)
- Data relating to your bank cards.
Mandatory data is indicated when you provide us with your data. It is marked with an asterisk and is necessary for creating your account and ordering on the Site.
3. On what legal bases, for what purposes and for how long do we keep your personal data?
Purposes | Legal bases | Retention periods |
---|---|---|
Provide the services available on our Site and/or through your Account | Execution of the contract that you have concluded with Apanage Vintage by accepting our T&Cs following the creation of your Account | When you have created an account: your data is kept for the entire duration of your account. If your account is inactive for 2 years, your personal data will be deleted if you do not respond to our reactivation email. In addition, your data may be archived for evidentiary purposes for a period of 5 years. |
Execute your order, carry out operations relating to the management of our customers concerning contracts, orders, deliveries, invoices, and monitoring of the contractual relationship with our customers | Execution of the contract you have concluded with Apanage Vintage by accepting our General Terms and Conditions when placing your order | Personal data is kept for the entire duration of the contractual relationship. Your data may also be archived for evidentiary purposes for a period of 5 years. Regarding your bank card data, they are kept by our payment service provider STRIPE until delivery of your order, plus your withdrawal period. Data relating to the visual cryptogram or CVV2, written on your bank card, is never stored. |
Improve our services | Our legitimate interest in improving our services | Recording of telephone calls: 6 months from their collection Telephone call content analysis documents: 1 year from collection |
Create a file of customers and prospects | Our legitimate interest in developing and promoting our business | For customers: data is retained for the entire duration of the contractual relationship. For prospects: data is kept for a period of 3 years from your last contact, for prospecting purposes. |
Send newsletters, solicitations and promotional messages | For customers: our legitimate interest in retaining and informing our customers of our latest news For prospects: your consent |
The data is kept for 3 years from our last contact |
Responding to your requests for information | Our legitimate interest in responding to your requests | The data is kept for the time necessary to process your request for information and deleted once the request for information has been processed. |
Comply with legal obligations applicable to our activity | Comply with our legal and regulatory obligations | Invoices are archived for a period of 10 years. Data relating to your transactions (except banking data) are kept for 5 years |
Organize competitions and promotional operations | Our legitimate interest in retaining our customers and offering them gifts | The data is kept for the entire duration of the games or promotional operations and may be archived for 5 years for evidentiary purposes. |
Develop navigation statistics, site audience, and the type of purchases made | Your consent | The data is kept for 1 year. |
Deliver personalized advertising | Your consent | The data is kept for 1 year. |
Manage requests to exercise rights | Our legitimate interest in responding to your requests and keeping track of them | If we ask you for proof of identity: we only keep it for the time necessary for verification. Once the verification is complete, the proof is deleted. If you exercise your right to object to receiving prospecting: we keep this information for 3 years. The information allowing the management of your requests to exercise rights under the GDPR will be kept for 2 years from the request. |
4. Who are the recipients of your data?
The following will have access to your personal data:
- (i) Our company’s staff;
- (ii) Our subcontractors: hosting provider, payment service provider, CRM tool, newsletter sending provider, delivery provider;
- (iii) Where applicable: public and private bodies, exclusively to meet our legal obligations.
5. Is your data likely to be transferred outside the European Union?
Your data is retained and stored for the entire duration of the processing on the servers of the company OVH, located in the European Union.
6. Personal Data Protection Officer
Contact email: hello@apanage-vintage.com
7. Modifications
We may modify this policy at any time, in particular to comply with any regulatory, jurisprudential, editorial or technical developments. These modifications will apply on the date the modified version comes into force. You are therefore invited to regularly consult the latest version of this policy. However, we will keep you informed of any significant changes to this privacy policy.