Data controller
The data controller is Vita-Soin, a micro-enterprise whose details are given in the legal notice. Contact for any question about data protection: contact@vitasoin.fr.
Data collected
- When you order: name, email, delivery address, phone (optional)
- When you contact us: name, email, message
- When you visit: hashed (anonymised) IP address, pages visited (for audience measurement)
Purposes
- Processing and delivering your orders
- Answering your contact requests
- Measuring site audience (aggregated statistics)
- Meeting our legal obligations (invoicing, accounting)
Legal basis
Performance of the contract for order data; legitimate interest for anonymised audience measurement; explicit consent for marketing communications and measurement or advertising cookies.
Retention periods
- Order data: 10 years (accounting obligation)
- Contact messages: 3 years
- Audience statistics: 13 months
Your rights
Under the GDPR, you have the right of access, rectification, erasure, portability, objection and restriction of processing of your data. To exercise these rights, write to us at contact@vitasoin.fr. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
Cookies
Cookies that are strictly necessary for the site to work are set without consent; your language and currency choices are stored in such functional cookies. Any audience measurement or advertising cookies are only activated after your explicit consent through the cookie banner, which you can refuse with no impact on your browsing.
Processors
- Stripe: payment processing (Ireland / California)
- Brevo: transactional emails (France)
- Railway: hosting (California)
All our processors are bound by contractual data protection commitments compliant with the GDPR.