Data controller
VIRTUAVIA SARL, 2 rue Marcel Benoit, 38000 Grenoble, France — contact@virtuavia.com — +33 4 58 00 15 74.
Data collected
- Contact form: name, e-mail, phone, address, country, company, order number and the content of your message (only the name and e-mail are required).
- Order: identity, contact details, mobile phone number (needed for delivery against signature), billing and delivery addresses, VAT number if any, order details. Card data is collected directly by Stripe and is never accessible to us.
- Basket: the content of your basket is stored only in your browser (local storage), without cookies and without being transmitted until you place an order.
- Technical data: IP address and browser, used only for security and to fight spam and fraud.
- Visit statistics: pages viewed, referring site, language and device type, measured anonymously and without cookies (the IP address is not stored and a visitor is only recognised for one day). Kept for 13 months maximum.
Purposes and legal bases
- Answering your messages and preparing quotes — pre-contractual measures;
- Processing, charging, printing, dispatching and tracking your orders — performance of the contract;
- Invoicing and accounting — legal obligation;
- Website security, fraud and spam prevention — legitimate interest.
We never send marketing without your consent and never sell your data.
Recipients
Your data is intended for authorised staff of VIRTUAVIA SARL and, where necessary, our service providers: website host (Infomaniak Network SA), Stripe Payments Europe Ltd (payment, including PayPal), printer and carriers (Chronopost, DPD, DHL, TNT or a local partner) for production and delivery, e-mail providers and our accountant. Stripe may transfer some data outside the European Union with appropriate safeguards (standard contractual clauses, Data Privacy Framework).
Retention periods
- Messages and quote requests not followed by an order: 3 years from the last contact;
- Customer and order data: duration of the business relationship plus 5 years (limitation period);
- Invoices and accounting records: 10 years (legal obligation);
- Technical security logs: 12 months maximum.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set guidelines regarding what happens to your data after your death. To exercise these rights, write to contact@virtuavia.com. You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Cookies
Our website uses no advertising or audience measurement cookies and therefore does not need a consent banner. Only the following may apply:
- Payment: on the checkout page, Stripe sets cookies that are strictly necessary for payment security and fraud prevention;
- Language: if you change language with the selector, a cookie (“as_lang”) remembers your choice for 1 year so that the site is shown in that language on your next visits.
Security
The website is served entirely over HTTPS. We implement appropriate technical and organisational measures to protect your data against unauthorised access.