Privacy policy

VAPEVO undertakes to protect the data entrusted to it by clients in the exercise of its activity, in particular, the processing of personal data (any data concerning an identified or identifiable natural person) is carried out in accordance with current legislation (EU Regulation 2016/679 and Data Protection Act) and their security is guaranteed by an internal system structured to prevent loss, destruction, and damage.

VAPEVO, aware that the activity carried out towards professional clients (companies, corporations, sole proprietorships, and legal entities, in any case different from natural persons) may involve, even in a purely ancillary way, the processing of data of natural persons acting on behalf of client companies. For this reason, VAPEVO considers it necessary to inform its interlocutor about the methods of processing personal and professional data and the legal provisions applicable to the processing of personal data in general.

This information is intended to illustrate for which purposes - among others - personal data may be used; how they are managed; the data controllers and the subjects to whom the data may be transmitted for the execution of activities on behalf of VAPEVO (for example to external consultants to the organization), the rights of the interested parties.

 

ARTICLE. 1 DATA CONTROLLER AND PROCESSOR CONTACT INFORMATION

The personal data transmitted will be processed by the data controller and processor, VAPEVO, with registered office at 42-44 rue Gay Lussac 94430 Chennevières-sur-Marne, represented legally by Mr. ZHANG Ruoyu.

 

ARTICLE. 2 RECIPIENTS OF PERSONAL DATA TRANSMISSION

For the purposes referred to in point 1 of article 3 – that is, to comply with legal obligations or to implement pre-contractual and/or contractual obligations assumed by VAPEVO – personal data provided by clients may be communicated to certain categories of recipients who may act on the data as data controllers. Among these recipients:

  1. Delivery companies, postal services, couriers, intermediary companies in delivery activities, mail carriers (and all parties involved, in various capacities, in the product shipping chain)
  2. Debt collection companies
  3. (Professionals (accountants, external consultants, lawyers, etc.)
  4. Public bodies
  5. Audit and/or supervisory bodies,
  6. Insurance companies (vii) Consulting firms
  7. Companies within the same group as VAPEVO

For the purposes referred to in point 2 of article 3 – mainly commercial and promotional activities – personal data may be transmitted to companies affiliated with VAPEVO or to third-party companies. This transmission can only take place after obtaining the appropriate consent from the client. VAPEVO uses marketing and commercial analytics service providers (Google Analytics and others) to verify the use of these systems; see the cookie management page.

 

ARTICLE. 3 PURPOSE OF PROCESSING

VAPEVO will use the personal data provided for the following purposes:

Objectives related to managing the contractual relationship, providing services, and supplying goods, including:

  1. management and execution of contractual reporting and commercial relations
  2. execution of accounting and tax obligations
  3. fulfillment of legal obligations (for example: anti-terrorism controls);
  4. anti-money laundering controls
  5. tax and accounting audits
  6. dispute management
  7. the provision, support, updating, and information concerning the services offered and goods supplied, as well as the available features
  8. the activation of online services (for example: access to the site https://www.vapevo.com )
  9. the shipment of agreed goods
  10. after-sales activities (such as, for example, return and warranty activities on purchased products)
  11. communication with the client
  12. the presentation of targeted advertisements
  13. individual product suggestions by email and/or push service
  14. newsletter
Purposes related to the commercial promotion of VAPEVO, including:
  1. commercial activities ...
  2. promotional activities by email of activities carried out by VAPEVO, by sending newsletters, etc.

 

ARTICLE 4 LEGAL AND REGULATORY OBLIGATIONS

The processing of personal data by VAPEVO is lawful and based on the following legal grounds:

- CONTRACT – processing necessary for pre-contractual relations or contract execution (for example, acquiring personal data intended for the preparation and execution of the commercial contract, ordered goods, etc.)

- LEGAL – processing necessary for the implementation of legal obligations to which VAPEVO is subject (e.g., accounting, administration, anti-terrorism, etc.)

- LEGITIMATE INTEREST – processing necessary to pursue a legitimate interest (for example, combating money laundering, fraud prevention, protecting the strategic interests of companies and their business relationships);

- CONSENT – processing carried out following explicit, conscious, and informed consent provided by the data subject (in this case, the VAPEVO client has given their consent for the purposes referred to in point 2 of article 3).

The provision of transmitted personal data is mandatory for the pursuit of the purposes set out in point 1 of article 3. Without this data, VAPEVO will not be able to perform the services and the sales contract.

The provision of personal data for the purposes referred to in point 2 of art. 3 is optional and as such, the client must give their consent by signing the form attached to this declaration. The entity and adequacy of the personal data provided will be evaluated from time to time, in order to avoid processing personal data that is not essential to the pursued objectives (in compliance with the principle of personal data minimization).

 

ARTICLE. 5 PROCESSING OF PERSONAL DATA COMMUNICATIONS

VAPEVO's objective is the protection of its Clients' personal data and for this reason VAPEVO applies the principles of accuracy, lawfulness, and transparency.

The Client is informed that the personal data transmitted will be processed using tools and procedures suitable to guarantee maximum security and confidentiality, through archives and paper and digital, IT and telematic media.

Communications containing personal data between VAPEVO and Clients will be conducted through traditional methods (for example, regular mail, telephone calls with operators) and/or automated (for example, telephone calls without operators) and/or similar (for example, fax, emails, certified mail, SMS).

In all cases, the Client may at any time exercise their right to object to the processing, which, unless explicitly and contrary indicated by the Client, will refer to traditional and automated communications.

 

ARTICLE. 6 DURATION OF PERSONAL DATA RETENTION

Personal information transmitted to VAPEVO is retained, at the time of acquisition/update, only for the duration corresponding to the processing purposes indicated in the previous articles and will be deleted upon the Client's request.

 

ARTICLE. 7 RIGHTS OF THE DATA SUBJECT

The Client may at any time exercise – by sending a request via the contact form – the following rights:

  1. Right of access to provided personal data (under Art. 15 of Reg. 2016/679 EU). The Client has the right to obtain confirmation of the processing of personal data concerning them, in order to obtain, upon explicit request, information on: • The purposes of the processing • The categories of personal data processed • The recipients to whom the personal data will be transmitted • Duration of personal data retention
  2. Right to rectification of provided personal data (under Art. 16 of Reg. 2016/679 EU) The Client has the right to obtain the rectification and/or updating of incorrect, incomplete, or outdated personal data concerning them and to request integration within a reasonable time. The Client may also set general and specific directives regarding the fate of personal data after their own death. Where applicable, the heirs of the deceased Client may demand consideration of the death and/or proceed with the necessary updates.
  3. Right to erasure of provided personal data (in accordance with article 17 Reg. 2016/679 EU) The Client has the right to obtain the deletion of personal data concerning them when the personal data collected is no longer necessary for the purposes for which it was collected and/or processed, as well as in other cases provided by law.
  4. Right to restriction of processing (in accordance with art. 18 Reg. 2016/679 EU) The Client has the right to obtain restriction of processing in cases provided by law.
  5. Right to data portability (in accordance with art. 20 Reg. 2016/679 EU) The Client has the right to receive all personal data concerning them in a structured and readable format.

VAPEVO will ensure the effective exercise of the aforementioned rights and the complete satisfaction of the Client's requests. The Client, when conditions are met, has the right to file a complaint, in accordance with the legislation (article 77 Reg. 2016/679 EU) with the national supervisory authority (CNIL – National Commission on Informatics and Liberty - https://www.cnil.fr/fr/plaintes).

 

ARTICLE 8 ADDITIONAL INFORMATION

The Client may revoke consent to the processing of certain data without it being possible:

  1. undermine the legality of the processing based on the consent given before the revocation
  2. harm the further processing of the same personal data on other legal bases (for example, contractual obligations or legal obligations to which VAPEVO is subject).

VAPEVO specifies that any partial or total omission of the provision of personal data will result in the partial or total inability to achieve the objectives indicated in this statement.

The personal data collected will not be transmitted to subjects not expressly identified and/or used and/or processed for purposes and/or treatments different and/or additional to those described in this information, except for new specific information provided in accordance with the provisions of the law.

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA

The information collected on this form is recorded in a computerized file by VAPEVO, located at 42-44 rue Gay Lussac 94430 Chennevières-sur-Marne. It is kept for the entire duration of the commercial relationship and is intended to be used by VAPEVO.

In accordance with European Regulation 2016/679 of April 27, 2016, you can exercise your right of access to your data and have it corrected by logging into your client area or via the contact form.