Data controller
VIRTUAVIA SARL, 2 rue Marcel Benoit, 38000 Grenoble, France — contact@virtuavia.com — +33 4 58 00 15 74.
Data collected
- Contact form: name, e-mail, phone (optional), country, institution, order number and the content of your message.
- Order: identity, contact details, billing and delivery addresses, VAT number if any, order details. Card data is collected directly by Stripe and is never accessible to us.
- Cart: the content of your cart is stored only in your browser (local storage), without cookies and without being transmitted until you place an order.
- Technical data: IP address and browser, used only for security and to fight spam and fraud.
Purposes and legal bases
- Answering your messages and preparing quotes — pre-contractual measures;
- Processing, charging, shipping and tracking your orders — performance of the contract;
- Invoicing and accounting — legal obligation;
- Website security, fraud and spam prevention — legitimate interest.
We never send marketing without your consent and never sell your data.
Recipients
Your data is intended for authorised staff of VIRTUAVIA SARL and, where necessary, our service providers: website host (Infomaniak Network SA), Stripe Payments Europe Ltd (payment), La Poste / Colissimo and other carriers (delivery), e-mail providers and our accountant. Stripe may transfer some data outside the European Union with appropriate safeguards (standard contractual clauses, Data Privacy Framework).
Retention periods
- Messages and quote requests not followed by an order: 3 years from the last contact;
- Customer and order data: duration of the business relationship plus 5 years (limitation period);
- Invoices and accounting records: 10 years (legal obligation);
- Technical security logs: 12 months maximum.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set guidelines regarding what happens to your data after your death. To exercise these rights, write to contact@virtuavia.com. You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.
Cookies
Our website uses no advertising or audience measurement cookies and therefore does not need a consent banner. Only the following may apply:
- Payment: on the checkout page, Stripe sets cookies that are strictly necessary for payment security and fraud prevention;
- Videos: YouTube videos are loaded only after you click, in “privacy-enhanced mode” (youtube-nocookie.com). By starting a video, you accept YouTube’s terms.
Security
The website is served entirely over HTTPS. We implement appropriate technical and organisational measures to protect your data against unauthorised access.