Ir al contenido

Legal Notices & Privacy Policy

This is a translation from French of the "Mentions Légales" of this website (Site), available at www.vapoforce.com/fr/legal. It is provided for convenience: in case of dispute, the French version shall prevail. 


1. Site Information

  • Owner of the Site (Data Controller): VapoForce SAS, 11 rue de l'académie, 67000 Strasbourg, France, registered under number 984 063 354 at RCS Strasbourg.
  • Publication Director: The Director of VapoForce SAS.
  • Website Host: Odoo SA, 40 Chaussée de Namur, 1367 Grand-Rosière, Belgium. Tel. +32 81 81 37 00, email: info@odoo.com.
  • Privacy Contact: To contact us regarding privacy matters or to exercise your data protection rights, please use the contact form or write to us at the address above.


2. Introduction to Privacy Policy

VapoForce SAS ("we," "us," "our") is committed to protecting your privacy and handling your personal data transparently and securely in compliance with the General Data Protection Regulation (GDPR) and applicable French law. This section outlines our practices regarding the collection, use, and protection of personal data obtained through your use of this website ([www.vapoforce.com]).

Our website is built on the Odoo platform and hosted on Odoo.com. We prioritize your user experience and privacy by minimizing the collection of unnecessary personal data and limiting the use of tracking technologies, particularly for general website browsing.


3. Personal Data Collection, Use, and Legal Basis

We collect information to provide and improve our services. This includes:

  • a) Data Collected Automatically (Essential Technical Data):
    • What: When you browse our Site, our servers (hosted by Odoo SA) automatically log technical information necessary for operation and security. This may include your IP address (potentially processed for security without direct user identification), browser type/version, operating system, referring URLs, pages visited, access times/dates, and error logs.
    • Why: Essential for website functionality, security (e.g., preventing attacks), stability, and generating basic, aggregated, anonymous usage statistics to improve the site.
    • Legal Basis (GDPR): Our Legitimate Interest (Art. 6(1)(f)) to operate a secure, functional, and optimized website.
  • b) Data You Provide Voluntarily:
    • What: Personal data you actively submit, such as when using our contact form (name, email, message), creating an account, placing an order (name, contact details, billing/shipping address, order details – payment data is handled by our processor), or subscribing to communications.
    • Why: To respond to inquiries, manage accounts, process orders, send requested communications (with consent), and provide services. You are informed at the point of collection if providing information is mandatory.
    • Legal Basis (GDPR): Depending on the context:
      • Performance of a Contract (Art. 6(1)(b)) for account management and order fulfillment.
      • Your Consent (Art. 6(1)(a)) for newsletters or specific marketing opt-ins.
      • Our Legitimate Interest (Art. 6(1)(f)) to respond to contact form submissions.


4. Cookies and Tracking Technologies

  • a) Our Approach: We aim to minimize reliance on non-essential tracking cookies for general website browsing. We primarily use cookies that are strictly necessary for the site's functionality and security. Consequently, you will generally not see a cookie consent banner for basic browsing activities on this Site.
  • b) Essential Cookies: 
    • Odoo uses necessary cookies for core functions like user sessions (login status), language preferences, timezone settings, and temporary shopping cart contents. These are essential for the site to work.
    • Legal Basis (GDPR): Our Legitimate Interest (Art. 6(1)(f)) to provide a functional and secure user experience. These cookies do not require prior consent under GDPR.
  • c) Analytics: 
    • To understand website traffic and improve user experience, we utilize Plausible Analytics, a privacy-focused analytics service. Plausible Analytics generates aggregated and anonymous statistics (like page views, visit duration, referral sources, country of origin) without using tracking cookies or collecting identifiable personal data for this purpose.
    • Legal Basis (GDPR): Our Legitimate Interest (Art. 6(1)(f)) to analyze and improve our website performance based on anonymized data.
  • d) Further Information: For a list of the specific essential cookies used by the Odoo platform, you may refer to general Odoo documentation or contact us using the contact form.


5. Data Sharing and Third Parties

We do not sell your personal data. We only share personal data with trusted third-party service providers (Data Processors) when necessary to operate our Site and provide services, under strict contractual data protection obligations. These include:

  • Odoo SA: For website hosting on Odoo.com and potentially core platform functionalities.
  • Payment Processors: e.g., Stripe, PayPal to securely handle transactions.
  • Shipping Providers to fulfill orders.
  • Analytics Provider: Plausible Analytics (for aggregated, anonymous data).
  • Email Service Providers: Odoo for transactional emails and consented newsletters.
  • Legal Obligations: We may disclose data if legally required or requested by valid public authorities.


6. Data Security

We implement appropriate technical and organizational measures (e.g., encryption, access controls) to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is entirely secure.


7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, including legal, accounting, or reporting requirements. Technical logs are kept for short periods for security. Account and order data are retained for the duration of the customer relationship and as legally mandated. Consent-based data (like newsletter subscriptions) is kept until consent is withdrawn.


8. International Data Transfers

Your personal data may be processed on servers located inside or outside the European Economic Area (EEA). As our Site is hosted by Odoo SA on the Odoo.com platform, data transfers outside the EEA related to hosting are managed by Odoo SA under appropriate safeguards, primarily relying on the Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives GDPR-equivalent protection. We rely on these established safeguards provided by our host.


9. Your Data Protection Rights (under GDPR)

You have the following rights regarding your personal data:

  • Access: Request a copy of your data.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure ("Right to be Forgotten"): Request deletion of your data, under certain conditions.
  • Restriction of Processing: Request limitation of how we use your data, under certain conditions.
  • Object to Processing: Object to processing based on legitimate interests, under certain conditions.
  • Data Portability: Request transfer of your data to you or another controller, under certain conditions.
  • Withdraw Consent: Withdraw your consent at any time for processing based on consent.
  • Lodge a Complaint: File a complaint with the relevant data protection authority (in France, the CNIL).

To exercise any of these rights, please contact us using the contact form. We may require verification of your identity before processing your request.


10. Terms of Use

Use of the Site implies full acceptance of the Terms of Use described below. These Terms of Use may be modified or supplemented at any time; Users of the Site are therefore invited to consult them regularly. The Site is updated regularly.


11. Provided Services

The Owner of this Site strives to provide information on the site that is as accurate as possible. However, the Owner cannot be held responsible for any omissions, inaccuracies, and deficiencies, whether originating from the Owner or third-party partners. All information on the Site is indicative and subject to change. If you notice an error or malfunction, please report it via the contact form, describing the issue precisely (e.g., device, page, OS, browser). The Owner is not responsible for the use of this information or any resulting direct/indirect damage.


12. Intellectual Property and Counterfeits

VapoForce is the owner of the intellectual property rights or holds usage rights on all elements accessible on the site (texts, images, graphics, logos, icons, sounds, software). Any reproduction, representation, modification, publication, adaptation of all or part of the site's elements, by any means, is prohibited without prior written permission from VapoForce SAS. Unauthorized use constitutes infringement punishable under articles L.335-2 et seq. of the French Code of Intellectual Property and may lead to civil/criminal liability.


13. Limitations of Liability

The user agrees to access the site using recent, virus-free equipment and an updated browser. The Owner cannot be held liable for direct or indirect damage to the user's equipment resulting from non-compliant equipment use or bugs/incompatibility. The Owner is not liable for indirect damages (e.g., loss of market/opportunity) from Site use. Interactive spaces (e.g., contact area) may be available. The Owner reserves the right to remove content contravening applicable French law (especially data protection) without notice and may hold users civilly/criminally liable for defamatory, racist, offensive, or pornographic messages, regardless of the medium.


14. Hypertext Links

The Site may contain links to other sites, authorized by the Owner. However, the Owner cannot verify the content of linked sites and assumes no responsibility for them. Links from this site to other internet resources do not engage the Owner's responsibility. Downloaded content is at the user's own risk; the Owner is not liable for damage to the user's computer or data loss from downloads.


15. Applicable Law and Jurisdiction

These conditions are governed by French law. Any dispute arising from their interpretation or execution falls under the exclusive jurisdiction of the courts of Strasbourg, France. French is the reference language. However, the processing of personal data for users within the EEA is governed by Regulation (EU) 2016/679 (GDPR).


16. Main Laws Concerned

  • Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR).
  • French Law No. 78-17 of January 6, 1978, relating to computing, files and freedoms, as amended to comply with GDPR.
  • French Law No. 2004-575 of June 21, 2004, for confidence in the digital economy.


17. Glossary

  • Site: This website, vapoforce.com
  • Owner of the Site / Data Controller: Legal entity responsible for the information and personal data processing on this Site (VapoForce SAS).
  • Webmaster: Person in charge of technical maintenance and technical updates of the Site.
  • Publication Director: Person in charge of updating content (text, visuals, multimedia, etc.) on the Site.
  • Website Host: Entity providing storage space for the website (Odoo SA).
  • User: Internet user connecting, visiting and/or using the Site.
  • Personal Data: Information relating to an identified or identifiable natural person (as defined by GDPR).

​