Data Protection Policy

Date of last update: 25 May 2018

In this policy (hereinafter ‘the Policy’), VHS (hereinafter ‘the Company’) sets out how the Company handles and protects the personal data it collects about its customers and users of its online shopping site (hereinafter ‘the Site’) and informs them of the same.

The Policy may be modified or updated by the Company, namely to conform to any legislative, regulatory, judicial or technological developments. The date of the latest update will be indicated at the top of the new Policy. As changes are binding upon the user, all users are advised to regularly consult the Policy and use of cookies statements to remain aware of any changes.

1. Who is responsible for processing your personal data?

The data controller is the Company VHS, with a capital of €20,000, registered with the Lille Métropole RCS (Registry of Commerce and Companies) under number 492 691 431, and with its head office at rue des Frères Lumière, 59160 Lomme.

The e-mail address for correspondence in respect of personal data protection is as follows [email protected].

2. Why do we collect your data?

Your personal data is necessary and therefore collected for the following purposes:

Order processing

Your personal data and information about you are required for processing orders and for business relations. This information is essential for enabling us to respond to your requests in respect of orders, payment, delivery, complaint or product warranty management, and for contacting you when necessary.

Order payment

Payment security means that your orders can be processed quickly and securely. When you make a payment, you are automatically directed to our banking partner’s server. Transactions are processed in secure mode guaranteeing the protection of the information provided. The TLS encryption protocol ensures that your card details (payment card number, expiry date and security code) encrypted on your computer, do not, under any circumstances, transit over the network or even within the Company. That is why you are asked to provide your card details for each new transaction.
Our banking partner may not authorise a transaction, without our being able to intervene.

Sending e-newsletters and email marketing communications

When you create your account, you have an option to sign up to our newsletter and receive regular information about special offers, private sales and new collections on offer on the Site. For this purpose, we therefore require that as the owner of the email address supplied, you confirm that you accept to receive our newsletter.
You may at any time withdraw your consent and unsubscribe by clicking on the link provided at the bottom of each newsletter.
As an exception to the foregoing and in accordance with Article L 34-5 of the French Postal and Electronic Communications Code, we may send you marketing communications by email, even where you have not given your prior consent, on the condition that you are an existing VHS customer, that you did not indicate you did not wish to receive marketing communications when you created your account, and that the information we send you concerns products or services similar to those with which we have already provided you. You may unsubscribe at any time by clicking on the link to unsubscribe provided in each email.

Email alerts

If you make purchases on VHS, if you place items in your basket on the Site, if you save products in your ‘Wish List’ or if you recommend a product to a friend, you will receive alerts and product suggestions by email. You will receive these emails even if you have not subscribed to our newsletter. As such, we wish to send you personalised information about the products in our range likely to be of interest based on your recent purchases or an interest you have shown in certain products. If you no longer wish to receive product suggestions or, generally, advertising messages, you may object at any time by simply sending written notification (by email or post) using the addresses indicated in Paragraph 1 of the Policy. A link to unsubscribe is also provided in every email.

Your comments, reviews and questions about our products

This service allows customers who are registered with us to leave a review on the Site for a product they have purchased or to ask a question about a product offered on the Site and share their experience. Published opinions and questions are publicly available and may be consulted on the Site at any time. Customers who use these features authorise the Company to publish and pass on their reviews or questions about products on the Site. Reviews shall not be defamatory, abusive, offensive, vulgar, nor slanderous in respect of third parties, and natural or legal persons. They shall not be racist, incite discrimination nor prejudice the integrity/reputation of others. Furthermore, they shall not be violent nor pornographic, and more generally, non-compliant with current legislation.
As such, the Company reserves the right to delete any review that does not comply with the above requirements.

Your shares on social networks and links to third-party sites

The Site may contain links to various sites and social networking platforms run on third-party servers by individuals or organisations over which we have no control (by way of example the Company cites Facebook, Pinterest and similar). As such, the Company may not, under any circumstances, be held responsible for how your data is stored or used on such third-party servers. To understand how your data will be used, we recommend you read the data protection policy of every individual third-party website you access via the Site.

3. What data do we collect and when do we collect it?

We collect data from everyone who uses the Site, whether simply as a visitor or as a connected customer with an account when they browse, consult or place an order on our Site.

We collect data directly when:

  • you create a customer account
  • you sign up to our newsletters or alerts offered on the Site
  • you place an order
  • you place items in your basket to purchase at a later stage
  • you write a comment or leave an opinion or question on the Site
  • you contact our ‘customer-service’ department
  • you browse the Site
  • you create a ‘Wish List’ and add items
  • you fill out a form
  • you click on a button with a link to a social network (such as Facebook, Pinterest and similar).

It is possible to visit the Site without providing any personal information. However, you will not be able to enjoy most of the services offered by the Site.

To place an order, you need to create a customer account. To do so, you must supply the following information: sex, surname, first name, email, password, date of birth, and accept our data protection policy.
You must then indicate your billing and delivery address. To process your order, we need your correct name, address and payment card details. To confirm receipt and dispatch of your order, and more generally to communicate with you, we need your email address and your telephone number. Your email address is also used to identify you (via your login) when you log in to your customer account.

Like most other commercial websites, we also collect your data indirectly and automatically through ‘cookies’.

Cookies enable us to collect and process namely the following: your IP address, your connection data, your browsing data, your preferences and interests, email delivery and message ‘read’ confirmation, information about your connection terminal (computer, tablet, telephone) and your Internet connection (example: type and version of your browser and operating system), date and time of your visits, products you viewed or searched for.

Other data may also be collected by our subcontractors, as in the case of updated information received from our carriers and other third-party delivery companies concerning deliveries and addresses, used for updating our databases, optimising processing when you next order, and being able to contact you more easily.

4. How long do we keep it?

The Company keeps your data only for the period necessary for the purposes set out in Paragraph 2 and in accordance with legislation and regulations. The length of time we store your data differs depending on the data in question; the nature and purpose for which it is collected being likely to affect how long it is kept. Similarly, certain legal obligations impose a specific retention period.

When you sign up to our newsletter, we keep your email address until you unsubscribe.

With regard to your user account, your billing data and all documents related to orders are kept for a period of ten (10) years from the end of the tax year in which you placed your order.

We keep the rest of your data for a period of five (5) years from your last contact with us. This period begins from the time of either your last order, your last connection to your customer account, your last call to customer services, your last email to customer services, your last click on a hyperlink to an email sent by VHS, the last time you placed items in your basket without making a purchase, or from receipt of a positive reply to an email asking if you wish to continue receiving marketing communications at the end of the five (5) year period.

Upon your request, your user account for the Site will be deactivated, and all personal data used to identify you will be anonymised, and as such we will no longer, permanently and irreversibly, be able to identify or contact you. Only your billing data will remain accessible for a period of ten (10) years.

Beyond the retention periods mentioned above, your data will be anonymised and retained exclusively for statistical purposes.

5. Who do we share your information with and how is it protected?

The Company does not sell the personal data of those who use its services and the Site.

Only the Company receives your personal information. This data, whether as an individual piece of information or as a whole, is never shared with third parties, except for police authorities as part of judicial requisitions in connection with fraud prevention, and subcontractors used by the Company to deliver the services it provides.

The Company namely uses subcontractors for the following services:

  • secure payment on the Site
  • order delivery
  • data storage and hosting of the Site
  • technical maintenance and Site development operations
  • promotional newsletter circulation and follow-up
  • personalisation of marketing and advertising campaigns
  • customer review collection.

All subcontractors, service providers and other third parties mentioned above are bound by contractual obligations to ensure your personal information remains confidential and is protected and processed only for the purposes requested by the Company.

Your data is stored on secure servers protected by firewalls and antivirus software.
We have introduced technical and organisational measures designed to ensure the security and confidentiality of your data against accidental loss or unauthorised access, as well as against use, modification and disclosure. Given the particularities of the Internet, we are, however, unable to guarantee optimal security for information exchanged on this network.

While we endeavour to protect your data, we cannot guarantee the absolute security of information sent to the Site. You therefore agree that you when you submit your data, you do so at your own risk. We cannot be held responsible for non-compliance with confidentiality settings or security measures on the Site.

As such, you agree that the security of your information is also your responsibility. For example, you are responsible for ensuring the password used to access your user account is kept secret. It should not, under any circumstances, be given to third parties. Similarly, we recommend you remain vigilant when you disclose information in public areas on the Site, as these may be viewed by anyone who uses the Site.

6. Transfer of data outside the EU

You are advised that for the needs and purposes set out in these terms, the Company may pass on your personal information to companies located in countries outside the European Union that do not ensure an adequate level of personal data protection. Before transferring information outside the European Union, the Company will introduce any procedure required for obtaining the necessary guarantees for the security of such transfers.

The transfer of information outside the European Union may be carried out notably as part of the following activities:

  • Customer relations activities
  • Transfer of data to social networks
  • IT services.

7. What are your rights regarding your personal data and how can you exercise them?

You have the following rights in respect of your personal information, which you can exercise by contacting us in writing, in any form, using the contact details indicated in Paragraph 1 of the Policy.

  • Right to access and receive your data
    You may access your personal information.
    However, given our obligation to protect your personal data during processing and to ensure it remains confidential, you are advised that any request to access or receive your data will be only be handled subject to receipt of proof of identity; namely a scanned copy of your valid identity document (for email requests) or a signed photocopy of your valid identity document (for postal requests).
    The Company informs you that, if necessary, it is entitled to oppose requests that are clearly unreasonable (due to their number or their repetitive or systematic nature).
  • Right to rectification of your data
    This right entitles you to request that information held about you be corrected, updated, blocked or deleted if found to be inaccurate, incorrect, incomplete or out of date.
  • Right to object
    This right may only be exercised in one of the following two situations:
  • where the exercise of this right is based on legitimate grounds, or
  • when the exercise of this right is intended to prevent data collected being used for marketing purposes.
  • Disposition of personal data after death
    You may at present lay down general guidelines or specific instructions concerning the disposition of your personal data after your death. If applicable, the heirs of a deceased person may request that the death of a relative be taken into consideration, that the necessary updates be made, or both.
  • Response time
    The Company is committed to responding to your request for access, rectification, opposition or any other request for additional information within a reasonable time limit that shall not exceed one (1) month following receipt of your request.

8. Cookies policy

When you first log on to the Site, you are notified by a banner at the bottom of your screen that your browsing data is likely to be saved in files known as ‘cookies’.
Our policy on the use of cookies gives you a better understanding of the provisions we put in place in respect of browsing on the Site. It namely gives you information about all cookies used on the Site and their purpose, indicating the procedure to follow for managing cookie settings.

  • General information about cookies used on the Site
    As editor of the Site, we place a cookie on the hard drive of your terminal (computer, tablet, mobile and similar) to ensure smooth, optimal user experience on our Site.
    ‘Cookies’ are small text files, limited in size, that allow us to recognise your computer, tablet or mobile for the purpose of personalising the services we offer.
    Information gathered using cookies cannot in any way be used to identify you personally. It is used exclusively for our own needs to improve Site interactivity and performance, and to send you content that is relevant to you and your interests. None of this information is shared with third parties, except where the Company has obtained your prior consent or where it is legally required to disclose such information by order of a court or any other administrative or judicial body authorised to have access.
  • Setting your cookie preferences
    You can accept or refuse cookies at any time.
    When you first connect to our Site, a consent banner containing a short note about cookies and similar technologies appears at the bottom of your screen. This banner reminds you that by continuing to browse the Site (by loading a new page or by clicking on various elements of the Site for example), you consent to cookies being placed on your terminal. You are also considered to have agreed to the use of cookies when you click on the icon ‘Accept’ to the right of the banner that appears at the bottom of your screen.
    If you click to accept, this banner will appear once a year for consent renewal. If you do not click to accept, it will appear on each of your visits.
    Depending on the type of cookie in question, your consent for the placing and use of cookies on your terminal may be required.

a. Cookies for which consent is not required
In accordance with the recommendations of the Commission Nationale de l’Informatique et des Libertés (CNIL), the placing of certain cookies does not require prior consent as they are essential for the proper functioning of the Site or for the exclusive purpose of facilitating communication by email. These include session ID and authentication cookies. These cookies are subject without restriction to the present policy insofar as they are placed and managed by the Company.

b.Cookies for which your prior consent is required
This requirement concerns cookies placed by third parties, which are referred to as ‘persistent’ cookies as they remain on your terminal until you erase them or until they expire.
As these cookies are issued by third parties, they are placed and used according to the individual privacy policy of the third party in question, for which links are provided below. This type of cookie includes audience measurement cookies, advertising cookies, and social network cookies (namely Facebook). Audience measurement cookies compile statistics on the frequency and way in which users connect with various elements of the Site (such as content/pages visited). This data is used to improve user experience of the Site.
Several measurement tools are used on the Site:
Google Adwords for which the privacy policy is available here:
AdWords Help – Data collection and use
AdWords Help – Personalized advertising
AdWords Help – Clear cache & cookies
Google Analytics for which the privacy policy is available here:
Google Analytics: Safeguarding your data

Social network sharing cookies are issued and managed by the editor of the social network in question. Subject to your consent, these cookies enable you to easily share part of the content published on the Site, notably via a share application ‘button’ depending on the given social network. Five types of social network sharing cookies are found on the Site:
Facebook, for which the privacy policy is available here:
Twitter, for which the privacy policy is available here:
YouTube, for which the privacy policy is available here:
Instagram, for which the privacy policy is available here:
Pinterest, for which the privacy policy is available here:

  • Various tools are available for managing cookie settings
    Most Internet browsers are configured to allow cookies by default. Your browser probably allows you to change these standard settings to block all cookies automatically or to accept or block specific cookies depending on the issuer.
    We would draw your attention to the fact that refusing to allow cookies to be placed on your terminal is likely to affect your user experience along with access to certain services or features of the Site. Where applicable, the Company declines all responsibility for consequences associated with impaired browsing conditions resulting from your decision not to allow or to delete or block cookies that are necessary for the functioning of the Site.

Your browser also allows you to delete existing cookies on your terminal and even to receive an alert when new cookies are about to be placed on your terminal. These settings do not affect your browsing but mean you lose all the benefits provided by the cookie.
Please familiarise yourself with the numerous tools listed below that are available for managing cookies placed on your terminal.

Each browser has its own cookie management settings. Links to the help sections of various browser menus where you can find out how to change your cookies preferences are as follow:
Chrome : Clear, enable and manage cookies in Chrome
Firefox : Enable and disable cookies
Internet Explorer : Delete and manage cookies
Opera : Cookies
Safari : Safari for macOS, manage cookies, and website data

It is also possible to manage how cookies are placed on your smartphone under the operating system rules.
On iOS : Safari for iOS, delete history, cache, and cookies
On Android : Clear, enable and manage cookies in Chrome
For all other queries or requests for additional information concerning this cookie policy, please contact us using the addresses indicated in Paragraph 1 of the Policy.