This privacy policy explains how the website www.vantour.net collects, uses and protects the personal data of its visitors, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679).
1. Data Controller
The data controller is PDCWEB, a sole trader (individual entrepreneur) under the simplified regime registered in Portugal, represented by Xavier F., publisher of the website www.vantour.net.
For any question regarding your personal data, you can contact us at: [email protected].
2. Data We Collect
We only collect the data necessary for the purposes described below:
- Browsing data: IP address, browser type, pages visited, time spent, via cookies and audience measurement tools.
- Contact data: name and email address when you write to us via a form or by email.
- Newsletter: email address when you subscribe to our newsletter.
- Shop orders: name, billing and shipping address, email and order details. Payment data (bank card) is processed directly by our payment provider and is never stored on our servers.
- Comments: username, email and comment content if you post one.
3. Purposes and Legal Bases
- Responding to your requests and messages — legal basis: your consent or our legitimate interest.
- Sending you our newsletter — legal basis: your consent (withdrawable at any time).
- Processing and tracking your orders — legal basis: performance of the contract.
- Measuring audience and improving the site — legal basis: your consent (cookies).
- Ensuring site security and preventing fraud — legal basis: our legitimate interest.
4. Recipients and Processors
Your data is never sold. It may be processed by technical providers acting on our behalf, strictly within the purposes above:
- Hostinger — website hosting;
- Klaviyo — newsletter and email management;
- Stripe — shop payment processing;
- Google — audience measurement, maps and security (reCAPTCHA).
This site also contains affiliate links to partner shops. If you click these links, the relevant partner may set its own cookies, governed by its own privacy policy.
5. Transfers Outside the European Union
Some providers (notably Klaviyo, Stripe and Google) may host or process data outside the European Union. Such transfers are governed by appropriate safeguards (the European Commission’s standard contractual clauses or equivalent mechanisms) to ensure a level of protection compliant with the GDPR.
6. Retention Period
- Contact data: up to 3 years after the last exchange.
- Newsletter subscribers: until you withdraw your consent (unsubscribe).
- Orders: for the period required by legal and accounting obligations.
- Audience measurement cookies: 13 months maximum.
7. Your Rights
Under the GDPR, you have the following rights over your data: the right of access, rectification, erasure, restriction, portability, objection, and the right to withdraw your consent at any time.
To exercise these rights, write to us at [email protected]. You also have the right to lodge a complaint with the competent supervisory authority: the CNPD (Comissão Nacional de Proteção de Dados, Portugal) or the data protection authority of your country of residence (for example the CNIL in France).
8. Cookies
The site uses cookies necessary for its operation as well as, subject to your consent, audience measurement cookies and cookies set by third-party services (affiliate partners, social networks). You can at any time accept, refuse or configure cookies via the consent banner or your browser settings.
9. Security
We implement appropriate technical and organisational measures (secure HTTPS connection, restricted access) to protect your data against any unauthorised access, alteration or disclosure.
10. Contact
For any question about this policy or the processing of your personal data: [email protected].
11. Updates
This privacy policy may be amended at any time to reflect legal or technical developments. The version in force is the one published on this page.