Privacy policy

VAPEVO undertakes to protect the data entrusted to it by customers in the course of its activity, in particular, the processing of personal data (any data concerning an identified or identifiable natural person) is carried out in accordance with current legislation (EU Regulation 2016/679 and Data Protection Act) and their security is guaranteed by an internal system structured to prevent loss, destruction, and damage.

VAPEVO, aware that the activity carried out towards professional clients (companies, corporations, sole proprietorships, and legal entities, in any case different from natural persons) may involve, even in a purely incidental manner, the processing of data of natural persons acting on behalf of client companies. For this reason, VAPEVO considers it necessary to inform its counterpart of the methods of processing personal and professional data and the legal provisions applicable to the processing of personal data in general.

This information is intended to illustrate for which purposes – among others – personal data may be used; how they are managed; the data controllers and the subjects to whom the data may be transmitted for the execution of activities on behalf of VAPEVO (for example to external consultants to the organization), and the rights of the data subjects.

 

ARTICLE. 1 HOLDER AND DATA CONTROLLER OF PERSONAL CONTACT DATA

The personal data transmitted will be processed by the holder and data controller, VAPEVO, with registered office at 42-44 rue Gay Lussac 94430 Chennevières-sur-Marne, represented legally by Mr. ZHANG Ruoyu.

 

ARTICLE. 2 RECIPIENTS OF THE TRANSMISSION OF PERSONAL DATA

For the purposes referred to in point 1 of article 3 – that is, to comply with legal obligations or to implement the pre-contractual and/or contractual obligations assumed by VAPEVO – the personal data transmitted by customers may be communicated to certain categories of recipients who may act on the data as data controllers. Among these recipients:

  1. Delivery companies, postal service, couriers, intermediary companies in delivery activity, mail carriers (and all parties involved, in various capacities, in the product shipping chain)
  2. Debt collection companies
  3. (Professionals (accountants, external consultants, lawyers, etc.)
  4. Public bodies
  5. Audit and/or supervisory bodies,
  6. Insurance companies (vii) Consulting firms
  7. Companies in the same group as VAPEVO

For the purposes referred to in point 2 of article 3 – mainly commercial and promotional activities – personal data may be transmitted to companies related to VAPEVO or to third-party companies. This transmission can only take place after obtaining the appropriate consent from the customer. VAPEVO uses marketing and commercial analysis service providers (Google Analytics and others), to verify the use of these systems, see the cookie management page.

 

ARTICLE. 3 PURPOSE OF PROCESSING

VAPEVO will use the personal data provided for the following purposes:

Objectives related to the management of the contractual relationship, the provision of services and the supply of goods, including:

  1. management and execution of contractual reporting and business relations
  2. execution of accounting and tax obligations
  3. fulfillment of legal obligations (for example: anti-terrorism checks);
  4. anti-money laundering controls
  5. tax and accounting audits
  6. dispute management
  7. provision, support, updating and information regarding the services offered and goods provided, as well as available features
  8. activation of online services (for example: access to the site https://www.vapevo.com )
  9. shipment of agreed goods
  10. after-sales activities (such as, for example, return and warranty activities on purchased products)
  11. communication with the customer
  12. the presentation of targeted advertisements
  13. individual product suggestions by email and/or push service
  14. newsletter
Purposes related to the commercial promotion of VAPEVO, including:
  1. commercial activities ...
  2. promotional activities by email activities carried out by VAPEVO., by sending newsletters, etc.

 

ARTICLE. 4 LEGAL AND REGULATORY OBLIGATIONS

The processing of personal data by VAPEVO is lawful and is based on the following legal grounds:

- CONTRACT – processing necessary for pre-contractual relations or contract execution (for example, acquiring personal data intended for the preparation and execution of the commercial contract, ordered goods, etc.)

- LEGAL – processing necessary to fulfill the legal obligations to which VAPEVO is subject (e.g., accounting, administration, anti-terrorism, etc.)

- LEGITIMATE INTEREST – processing necessary to pursue a legitimate interest (for example, combating money laundering, fraud prevention, protecting the strategic interests of companies and their business relationships);

- CONSENT – processing carried out following explicit, conscious, and informed consent provided by the data subject (in this case, the VAPEVO client has given consent for the purposes referred to in point 2 of article 3).

The provision of personal data transmitted is mandatory for the pursuit of the purposes set out in point 1 of article 3. Without this data, VAPEVO will not be able to perform the services and the sales contract.

The provision of personal data for the purposes referred to in point 2 of art. 3 is optional and as such, the client must give their consent by signing the form attached to this declaration. The entity and adequacy of the personal data provided will be evaluated from time to time, in order to avoid processing personal data that is not essential to the pursued objectives (in compliance with the principle of personal data minimization).

 

ARTICLE. 5 PROCESSING OF PERSONAL DATA COMMUNICATIONS

VAPEVO's objective is the protection of its Clients' personal data and for this reason VAPEVO applies the principles of accuracy, lawfulness, and transparency.

The Client is informed that the personal data transmitted will be processed using appropriate tools and procedures to ensure maximum security and confidentiality, through archives and paper and digital, IT and telematic media.

Communications containing personal data between VAPEVO and Clients will be conducted by traditional means (for example, regular mail, telephone calls with operators) and/or automated means (for example, telephone calls without operators) and/or similar means (for example, fax, emails, certified mail, SMS).

In all cases, the Client may at any time exercise their right to object to processing, which, unless explicitly indicated otherwise by the Client, will refer to traditional and automated communications.

 

ARTICLE. 6 DURATION OF PERSONAL DATA RETENTION

Personal information transmitted to VAPEVO is retained, at the time of acquisition/update, only for the duration corresponding to the purposes of the processing indicated in the previous articles and will be deleted upon the Client's request.

 

ARTICLE. 7 RIGHTS OF THE DATA SUBJECT

The Client may at any time exercise – by sending a request via the contact form – the following rights:

  1. Right of access to provided personal data (under Article 15 of Reg. 2016/679 EU). The Client has the right to obtain confirmation of the processing of personal data concerning them, in order to obtain, upon explicit request, information on: • The purposes of the processing • The categories of personal data processed • The recipients to whom the personal data will be transmitted • Duration of personal data retention
  2. Right to rectification of provided personal data (under Article 16 of Reg. 2016/679 EU) The Client has the right to obtain the correction and/or updating of erroneous, incomplete, or outdated personal data concerning them and to request integration within a reasonable time. The Client may also set general and specific directives regarding the fate of personal data after their own death. Where applicable, the heirs of the deceased Client may demand that the death be taken into account and/or that necessary updates be made.
  3. Right to erasure of provided personal data (in accordance with Article 17 Reg. 2016/679 EU) The Client has the right to obtain the deletion of personal data concerning them if the collected personal data is no longer necessary for the purposes for which it was collected and/or processed, as well as in other cases provided by law.
  4. Right to restriction of processing (in accordance with art 18 Reg. 2016/679 EU) The Client has the right to obtain restriction of processing in the cases provided by law.
  5. Right to data portability (in accordance with art. 20 Reg. 2016/679 EU) The Client has the right to receive all personal data concerning them in a structured and readable format.

VAPEVO will ensure the effective exercise of the aforementioned rights and the full satisfaction of the Client's requests. The Client, when conditions are met, has the right to file a complaint, in accordance with the legislation (article 77 Reg. 2016/679 EU) with the national supervisory authority (CNIL – National Commission on Informatics and Liberty - https://www.cnil.fr/fr/plaintes).

 

ARTICLE. 8 ADDITIONAL INFORMATION

The Client may revoke consent to the processing of certain data without it being possible:

  1. undermine the legality of the processing based on the consent given before the revocation
  2. harm the further processing of the same personal data on other legal bases (for example, contractual obligations or legal obligations to which VAPEVO is subject).

VAPEVO specifies that any partial or total omission of the provision of personal data will result in the partial or total inability to achieve the objectives indicated in this statement.

The personal data collected will not be transmitted to subjects not expressly identified and/or used and/or processed for purposes and/or treatments different and/or additional to those described in this information, except for new specific information provided in accordance with the provisions of the law.

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA

The information collected on this form is recorded in a computerized file by VAPEVO, located at 3 boulevard Michael Faraday, 77700 Serris, France. They are kept for the entire duration of the business relationship and are intended to be used by VAPEVO.

In accordance with European Regulation 2016/679 of April 27, 2016, you may exercise your right to access your data and have it corrected by logging into your customer area or via the contact form.