Privacy Policy
Last updated: 30 April 2026
In short
VanDOOR France collects personal data only to handle your business requests (contact, quote, resource downloads) and to improve the site. We do not use tracking cookies. Our analytics run on Plausible, hosted in Germany, with no cookie and no individual identifier. We never sell or rent your data.
This policy explains exactly what data we process, why, for how long, and how to object or request deletion.
1. Data controller
The data controller within the meaning of Article 4 of Regulation (EU) 2016/679 (GDPR) is:
- Company name: VanDOOR France, French subsidiary of the Actuall Group (Netherlands)
- Registered office: 7B rue Romain Rolland, 51430 Tinqueux, France
- Email: info@vandoor.fr
- Phone: +33 3 26 00 00 00
- SIRET: To be completed
- Legal representative: To be completed
2. Data we collect
We only collect data you actively share with us. No hidden collection, no advertising profiling.
Contact form
- First and last name
- Business email
- Phone (optional)
- Company and role
- Message content
Quote request
- Same fields as the contact form
- Project details (door model, quantity, timeline, application type)
- Country of delivery
Resource downloads (datasheets, guides)
- Business email
- Company and role
Technical data (Plausible Analytics)
- URL of the page visited
- Country (derived from the IP address, which is never stored)
- Device and browser type (category only, not the full User-Agent)
- Traffic source (referring page, no third-party cookie)
Plausible stores no cookies, no individual identifier, no IP address. Data is aggregated at the site level, not at the visitor level.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Reply to a contact or quote request | Pre-contractual measures at your request (art. 6.1.b) |
| Send a requested datasheet or guide | Pre-contractual measures at your request (art. 6.1.b) |
| Measure site audience (Plausible) | Legitimate interest — CNIL exemption for anonymised analytics (art. 6.1.f) |
| B2B prospecting to existing contacts about similar products | Legitimate interest, opt-out at every message (art. 6.1.f) |
| New marketing communications | Explicit consent (art. 6.1.a) |
In line with the CNIL position, our use of Plausible (cookieless, aggregate, EU-hosted) is exempt from prior consent because it qualifies as audience measurement strictly necessary for the service.
4. Retention periods
| Data type | Retention |
|---|---|
| Contact request with no follow-up | 3 years from last contact |
| Quote turned into an order | 10 years (accounting and legal warranty obligations) |
| Quote not turned into an order | 3 years from last contact |
| Resource download | 3 years from last contact |
| Plausible analytics data | Aggregate kept while the site is operated |
| Server logs (security) | 12 months |
After these periods, data is deleted or anonymised.
5. Processors and recipients
Your data is accessible only to VanDOOR France's commercial and technical teams, and to the following processors, framed by Data Processing Agreements (DPA) compliant with Article 28 GDPR:
| Processor | Role | Location | Safeguards |
|---|---|---|---|
| Render, Inc. | Site hosting | United States (San Francisco) | DPA + EU Standard Contractual Clauses (SCC) 2021/914 |
| Resend Inc. | Transactional emails (quotes, acknowledgements) | United States | DPA + EU Standard Contractual Clauses (SCC) 2021/914 |
| Plausible Insights OÜ | Aggregate, cookieless analytics | Germany (EU) | No transfer outside the EU |
We never sell, rent or share your data with any third party for advertising purposes.
6. Transfers outside the European Union
Render and Resend involve transfers to the United States. These transfers are framed by the Standard Contractual Clauses adopted by the European Commission (decision 2021/914) and complemented by technical safeguards (TLS encryption in transit, encryption at rest).
We monitor developments around the EU-US Data Privacy Framework (DPF) and will adjust our agreements if the legal landscape changes.
7. Your rights
GDPR grants you the following rights over your personal data:
- Access — obtain a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion (unless a legal obligation requires retention)
- Restriction — request the suspension of a contested processing
- Objection — refuse processing based on legitimate interest, including direct marketing
- Portability — receive your data in a structured format
- Consent withdrawal — at any time, for processing based on consent
- Post-mortem instructions — define what happens to your data after your death
To exercise these rights, write to info@vandoor.fr specifying the purpose of your request. We respond within one month (extendable to three for complex requests, per GDPR Article 12). Proof of identity may be requested in case of reasonable doubt.
8. Data protection point of contact
For any data protection question, please contact our privacy contact: info@vandoor.fr.
9. Lodging a complaint with the CNIL
If you believe your rights are not being respected, you may file a complaint with France's data protection authority:
- Address: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- Phone: +33 1 53 73 22 22
- Website: www.cnil.fr
You may also contact your local national data protection authority within the EU.
10. Security
The site is served over HTTPS (TLS 1.3). Form data is encrypted in transit and at rest. Access to data is restricted to a need-to-know basis and logged. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we notify the CNIL within 72 hours and inform you without undue delay, in line with Articles 33 and 34 GDPR.
11. Policy changes
This policy may evolve to reflect legal, technical or organisational changes. The last update date is shown below. In case of substantial change, we will notify you with a banner on the site or by email if we have your address.
Last updated: 30 April 2026