Privacy policy

VOLA
37, avenue de Saint Martin
74190 PASSY - France
Email : vola@vola.fr

VOLA is responsible for the processing of personal data collected via the website and in the context of its online sales activity.

To date, no Data Protection Officer (DPO) has been appointed.
If you have any questions regarding the protection of personal data, please contact VOLA at the following address: vola@vola.fr.

1. Scope of application

This policy applies to all processing of personal data carried out in the context of:

• Browsing the VOLA website,
• Creating a customer account,
• Placing and tracking orders,
• Exchanges with customer service,
• Marketing and prospecting operations.

2. Personal data collected

As part of its e-commerce activities, VOLA may collect and process the following categories of data:

Identification data

• Last name, first name
• Customer account identifier

Contact data

• postal address
• Email address
• Telephone number

Transaction data

• Products ordered
• Purchase history
• Order value
• Delivery and billing information
• Returns, after-sales service and exchanges linked to orders

Payment details

• Data required for secure payment
• Transaction identifiers
  ⚠️ VOLA does not store any banking data. Payments are processed exclusively by PCI-DSS certified service providers.

Browsing data

• IP address
• Connection logs
• Cookies and tracers
• Browsing data and pages consulted

Data from exchanges

• Messages sent via contact forms
• Correspondence with customer service
• Any information voluntarily communicated

3. Purposes of processing

Data is collected for the following purposes:

E-commerce management

Creation and management of customer accounts
Order processing
Delivery of products
Management of returns and after-sales service

Customer relations

• Customer support
• Responses to queries
• Complaints follow-up

Accounting and legal management

• Invoicing
• Accounting and tax obligations
• Dispute management

Marketing and communication (with consent )

• Sending newsletters
• Promotional offers
• Personalisation of communications

Site improvement

• Performance analysis
• Traffic statistics
• Improving the user experience
• Site security

Fraud prevention :

• Detection of suspicious activity
• Transaction security

4. Legal basis for processing

The processing operations are based on :

• Contract performance: order management and commercial relations
• Legal obligations: accounting, tax, legal guarantees
• Consent: commercial prospecting, non-essential cookies
• Legitimate interests: site security, service improvement, fraud prevention

5. Recipients of data

Personal data may only be transmitted to the following recipients:

• Authorized VOLA internal departments
• Technical service providers (hosting, maintenance, development)
• Secure payment providers
• Carriers and logistics partners
• Marketing and CRM service providers
• Management tools (customer support, emailing, analytics, accounting)

All subcontractors act in accordance with the RGPD and on the instructions of VOLA.

6. Transfers outside the European Union

Some data may be transferred outside the European Union (e.g. SaaS tools, emailing, analytics).

In this case, VOLA ensures that:

• The country benefits from an adequacy decision from the European Commission, or
• Appropriate safeguards are in place (standard contractual clauses, binding corporate rules, etc.).

7. Data retention period

Data is kept for strictly necessary periods:

• Active customers: duration of the commercial relationship + legal archiving
• Invoicing: 10 years (legal obligation)
• Prospects / marketing: 3 years after last contact or until withdrawal of consent
• Cookies: 13 months maximum
• Security logs: duration strictly necessary for site security At the end of these periods, the data is irreversibly deleted or rendered anonymous.

8. Individual rights

In accordance with the RGPD and the Data Protection Act, you have the following rights:

• Right of access
• Right of rectification
• Right to erasure (right to be forgotten)
• Right to limit processing
• Right to object
• Right to portability
• Right to withdraw your consent at any time

You may exercise these rights by contacting

VOLA - Service e-commerce
37, avenue de Saint Martin
74190 PASSY - France
Email : vola@vola.fr

You will receive a reply within a maximum of one (1) month.

9. Data security

VOLA implements reinforced technical and organizational measures:

• Secure and monitored hosting
• Encryption of data and communications (SSL/TLS)
• Access control and authentication
• Regular backups
• Access logging
• Awareness-raising for internal teams
• Protection against intrusions and attacks (firewall, monitoring)

These measures are designed to guarantee the confidentiality, integrity and availability of data.

10. Cookies and trackers

The site uses cookies for :

Essential cookies

• Site operation
• Shopping cart
• Customer authentication

Analytical cookies

• Audience measurement
• Site performance analysis

Marketing cookies (if enabled)

• Personalisation of offers
• Targeted advertising
• A consent banner allows you to:
• Accept or refuse non-essential cookies
• Change preferences at any time

Maximum retention period: 13 months

11. Complaints

If you feel that your rights have not been respected, you can lodge a complaint with :

CNIL
https://www.cnil.fr

12. Updating of the policy

This policy may be amended at any time to take account of legal, technical or organisational developments.
The date of the last update is indicated on the site.