EuroVignette - Your European vignette

Article 1 — Data controller

Controller: VIASIMPLY LTD — Office 18037, 182-184 High Street North, East Ham, London, England, E6 2JA, United Kingdom — Company No. 17108668 — contact@euro-vignette.com

Company	VIASIMPLY LTD
Registration number	17108668 — Companies House (United Kingdom)
Head office	Office 18037, 182-184 High Street North, East Ham, London, England, E6 2JA
GDPR contact	contact@euro-vignette.com
DPO	No designated DPO — any request regarding personal data should be addressed to contact@euro-vignette.com

Article 2 — Data collected

Depending on features used, we may process in particular:

Identification and account data: name, first name, email address, customer ID, password (hashed).
Order and payment data: transaction references, amounts, currency, payment method (we do not store full card numbers).
Vignette-related data: country, vehicle type, duration, validity dates, registration plate, order status.
Technical and browsing data: IP address, logs, device type, browser, pages viewed, timestamps.
Content you voluntarily upload to the digital vault (insurance documents, licence, etc.), under your sole responsibility as to relevance and lawfulness.
Exchanges with support or assistance (emails, tickets).

For users residing in the European Union, the provisions of the GDPR apply directly under Article 3 of the Regulation (extraterritorial application), regardless of whether the data controller is established in the United Kingdom.

Article 3 — Purposes and legal bases

Contract performance: account creation and management, subscription, e-vignette orders, billing, customer support.

Legal obligations: accounting and tax retention, responses to authorities when required by law.

Legitimate interests: securing the service, fraud prevention, site improvement, audience measurement subject to your rights and applicable rules.

Consent: where required (non-essential cookies, certain marketing communications if enabled).

3.1 — Data collected during subscription

When creating your account and subscribing to the EuroVignette service, we collect:

First and last name
Email address
Billing information (managed by our payment provider — VIASIMPLY LTD does not store credit card numbers)
Language and currency preferences

3.2 — Data collected when ordering e-vignettes

When ordering an e-vignette from your subscriber area, we collect:

Vehicle registration number
Vehicle type and category
Selected country and validity period
Order history

3.3 — Data stored in the digital vault

As part of the digital vault feature, you can upload the following documents:

Driver's license
Registration certificate (car title)
Insurance certificate
Any other road document you choose to store

Important: These documents are stored under your full responsibility. VIASIMPLY LTD does not use them for any purpose other than making them available in your secure personal space.

3.4 — Data collected via the AI chatbot

The EuroVignette service includes a conversational assistant (chatbot) powered by the OpenAI API (ChatGPT). When you interact with this assistant, the following data may be processed:

The content of your messages and questions
The information you voluntarily provide during the conversation

Warning: Never share sensitive data (credit card number, password, health data) via the chatbot. Exchanges are sent to OpenAI to generate responses and may be used in accordance with OpenAI's policy.

3.5 — Browsing data

When you browse the site, we automatically collect:

IP address (anonymized as much as possible)
Browser type and version
Pages visited and duration of visit
Traffic source (via Google Analytics 4)

3.6 — Matching data

When you contact our customer service, we retain:

The email address used
The content of the exchanges
The date and time of the messages

Article 4 — Recipients and processors

Data are accessible to authorised VIASIMPLY LTD staff and to processors strictly necessary to deliver the service: hosting provider (e.g. AWS), payment provider, cookie consent tool, email or support tools, possible managed service providers.

We do not sell your personal data to third parties for marketing purposes.

Processed data	Purpose	Legal basis	Duration	Recipients
Name, email, preferences	Account creation and management	Contract execution (art. 6.1.b GDPR)	Subscription duration + 3 years	EuroVignette
Billing data	Payment processing	Contract execution (art. 6.1.b)	10 years (legal obligation)	Payment provider
License plate, vehicle	Order of e-vignettes	Contract execution (art. 6.1.b)	Subscription duration + 3 years	Official authorities
Vault documents	Secure document storage	Contract execution (art. 6.1.b)	Subscription duration + 30 days	EuroVignette / AWS
Email	Vignette expiration alerts	Contract execution (art. 6.1.b)	Subscription duration	EuroVignette / Mailgun
Email	Service communications (news)	Legitimate interest (art. 6.1.f)	Subscription duration	EuroVignette / Mailgun
Browsing data	Audience analysis (GA4)	Consent (art. 6.1.a)	13 months	Google LLC
Chatbot messages	AI assistance	Contract execution (art. 6.1.b)	30 days	OpenAI
Billing data	Accounting obligations	Legal obligation (art. 6.1.c)	10 years	EuroVignette
Logs, IP address	Security and fraud prevention	Legitimate interest (art. 6.1.f)	13 months	EuroVignette / AWS
Correspondences	Customer service management	Legitimate interest (art. 6.1.f)	3 years	EuroVignette

Article 5 — Transfers outside the EU

Where data are hosted or processed outside the EEA/UK, we implement appropriate safeguards (EU Commission standard contractual clauses, supplementary measures where needed) in line with Articles 44 et seq. GDPR.

Data category	Retention period	Justification
Account data	Subscription duration + 3 years after closure	Contractual prescription
Billing data	10 years	Legal accounting obligation
Vault documents	Subscription duration + 30 days after termination	Contract execution
Browsing data / logs	Maximum 13 months	CNIL / ICO recommendation
Chatbot messages	30 days	Data minimization
Customer service correspondences	3 years	Contractual prescription
Cookie consents	12 months	Proof of consent

Article 6 — Retention periods

The periods below are indicative and may be adjusted to comply with a legal obligation or authority decision.

SCC = Standard Contractual Clauses | DPA = Data Processing Agreement | DPF = Data Privacy Framework | IDTA = International Data Transfer Agreement (UK)

Every subcontractor is bound to VIASIMPLY LTD by a data processing agreement (DPA) ensuring a level of protection equivalent to the requirements of the GDPR and UK GDPR.

Category	Indicative duration
Active account data	For the subscription period until account closure
Billing data	10 years (applicable accounting obligations)
Transaction evidence and disputes	Until ordinary limitation periods (often 5 years)
Technical logs	Up to 12 months unless a security incident requires longer retention
Marketing (if any)	3 years from last contact or until consent withdrawal
Digital vault	Until you delete content or after cancellation plus grace period stated in the General Terms of Sale

Article 7 — Your rights

Under GDPR and UK GDPR you have, within legal limits: access, rectification, erasure, restriction, objection (including to marketing), portability where applicable, and withdrawal of consent without affecting lawfulness of prior processing.

To exercise your rights: contact@euro-vignette.com. Proof of identity may be requested to prevent impersonation.

You may lodge a complaint with your national data protection authority (France: CNIL — www.cnil.fr; UK: ICO — www.ico.org.uk).

7.1 — For users in the European Union

Standard contractual clauses (SCC) adopted by the European Commission (implementing decision 2021/914)
Participation of the relevant providers in the EU-U.S. Data Privacy Framework (adequacy decision of July 10, 2023)

7.2 — For users in the United Kingdom

International Data Transfer Agreement (IDTA) approved by the ICO
UK Addendum to the SCC of the European Commission

7.3 — Transfer to the United Kingdom

As a UK company, VIASIMPLY LTD receives data from the EU. These transfers are covered by the European Commission's adequacy decision recognizing the adequate level of protection in the UK (decision of June 28, 2021).

Article 8 — Security

We implement appropriate technical and organisational measures (encryption in transit, access controls, backups, logging) to protect data against accidental or unlawful destruction, loss, alteration or unauthorised disclosure.

Data encryption in transit via HTTPS/TLS protocol
Encryption of sensitive data at rest
Hosting on AWS infrastructure with advanced security controls
Access to data restricted to authorized personnel, on a need-to-know basis
Continuous monitoring of system security
Incident and data breach management procedures

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be notified as soon as possible, in accordance with Articles 33 and 34 of the GDPR and equivalent provisions of the UK GDPR.

Article 9 — Children

EuroVignette services are intended for adults capable of contracting. We do not knowingly collect data about children without parental consent where required by law.

Right	Description	Response time
Right of access (art. 15 GDPR)	Obtain a copy of all data concerning you that we hold	1 month
Right to rectification (art. 16)	Correct inaccurate or incomplete data	1 month
Right to erasure (art. 17)	Request the deletion of your data in cases provided by law	1 month
Right to restriction (art. 18)	Temporarily suspend the processing of your data	1 month
Right to data portability (art. 20)	Receive your data in a structured, machine-readable format	1 month
Right to object (art. 21)	Object to processing based on legitimate interests or for marketing purposes	Immediate
Withdrawal of consent	Withdraw any previously given consent at any time	Immediate

9.1 — How to exercise your rights

To exercise any of these rights, please send your request to:

By email: contact@euro-vignette.com
By mail: VIASIMPLY LTD, Office 18037, 182-184 High Street North, East Ham, London, England, E6 2JA

We are committed to responding to any request within one month of receipt. This period may be extended by two additional months due to the complexity or number of requests, in which case we will inform you.

In order to verify your identity and protect your data, we may ask you to attach a copy of an identity document.

9.2 — Right to lodge a complaint

If you believe that the processing of your personal data constitutes a violation of the GDPR or UK GDPR, you have the right to lodge a complaint with the competent supervisory authority:

United Kingdom (ICO): Information Commissioner's Office — https://ico.org.uk — Tel: 0303 123 1113
France (CNIL): National Commission on Informatics and Liberty — https://www.cnil.fr — Tel: 01 53 73 22 22
Other EU countries: The user may also contact the data protection authority of their country of residence

Article 10 — Cookies

Use of cookies and similar technologies is detailed in our Cookie Policy, available on the site.

Cookies are only placed with your prior consent, except for cookies that are strictly necessary for the operation of the site. Consent management is provided via CookieHub, a certified Google Gold Tier CMP partner, compatible with Google Consent Mode v2 and IAB TCF v2.3.

Article 11 — Changes

We may amend this policy. Material changes will be notified through appropriate channels (email or site banner) when required by law.

If you are aware that a minor has provided us with personal data without the consent of their parents or legal guardians, please contact us at contact@euro-vignette.com so that we can take the necessary measures.

Article 12 — Contact

For any question about this policy: contact@euro-vignette.com — VIASIMPLY LTD, Office 18037, 182-184 High Street North, East Ham, London, England, E6 2JA, United Kingdom.

In the event of a substantial change, you will be informed by email at least 30 days before the changes take effect. The date of the last update at the top of the document is authoritative.

Article 13 — Contact

For any questions regarding this Privacy Policy or the processing of your personal data:

By email: contact@euro-vignette.com
By mail: VIASIMPLY LTD, Office 18037, 182-184 High Street North, East Ham, London, England, E6 2JA, United Kingdom
Contact form: https://euro-vignette.com/en/contact

PRIVACY POLICY