1. Introduction

This Privacy and Cookie Management Policy explains how LAVISTA collects, uses, protects, stores, and shares the personal data of its website visitors and customers.

Protecting your privacy is a priority for LAVISTA. We are committed to processing your personal data transparently, securely, and in accordance with applicable data protection laws.

By using our website, you agree to the practices described in this policy.

2. Data Controller

LAVISTA is responsible for processing personal data collected on its website.

The company's contact details are available in the Legal Notice section of the website.

3. Personal data collected

Depending on your use of the website, we may collect the following categories of data:

• first name and last name;
• email address;
• phone number;
• billing address;
• delivery address;
• order information;
• purchase history;
• browsing preferences;
• connection data (IP address, browser, device used, operating system);
• customer service information;
• marketing preferences when you choose to receive our communications.

We only collect data strictly necessary for the purposes described in this policy.

4. Purposes of processing

The collected data is used notably to:

• create and manage your customer account;
• process and ship your orders;
• track deliveries;
• respond to your customer service requests;
• manage refunds and returns;
• prevent fraud;
• improve the quality of the website and our services;
• measure website audience;
• comply with our legal and accounting obligations;
• send you commercial offers when you have consented.

5. Legal basis for processing

Depending on the situation, your data is processed based on:

• the performance of a contract (order, delivery, customer service);
• your consent (newsletter, non-essential cookies);
• our legitimate interest (website improvement, security, fraud prevention);
• compliance with our legal obligations.

6. Retention period

Personal data is kept only for the time necessary for the purposes for which it was collected.

Depending on their nature, some data may be kept longer to comply with our legal, accounting, or tax obligations.

After these periods, they are deleted or anonymized.

7. Data security

LAVISTA implements appropriate technical and organizational measures to protect personal data against:

• any unauthorized access;
• any accidental loss;
• any destruction;
• any alteration;
• any unauthorized disclosure.

Despite these measures, no computer system can guarantee absolute security.

8. Data sharing

Your personal data is never sold.

They may be communicated only when necessary to:

• our payment providers;
• our logistics partners;
• our hosts;
• our technical providers;
• our IT service providers;
• any administrative or judicial authority when required by law.

These partners are required to protect your data in accordance with applicable regulations.

9. International data transfer

In some cases, certain data may be processed or hosted outside your country of residence.

When necessary, LAVISTA implements appropriate safeguards to ensure a level of protection compliant with applicable regulations.

10. Your rights

In accordance with applicable regulations, you have the following rights, among others:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability where applicable;
• right to withdraw your consent at any time when processing is based on it.

You can exercise these rights by contacting LAVISTA via the contact details provided on the "Contact" page.

Proof of identity may be requested to protect your data.

11. Cookies

The LAVISTA website uses cookies and similar technologies to improve your browsing experience.

A cookie is a small file stored on your device when you visit.

12. Different types of cookies used

Strictly necessary cookies

These cookies are essential for the proper functioning of the website.

They notably allow:

• navigation;
• access to your account;
• cart management;
• secure payments;
• maintaining your session.

These cookies cannot be disabled.

Performance cookies

They allow us to measure website traffic and improve its operation.

Data is generally collected statistically.

Personalization cookies

They remember your preferences to improve your user experience, including:

• your language;
• your currency;
• certain display settings.

Advertising cookies

With your consent, these cookies allow us to offer you more relevant advertisements on our site or on partner sites.

They can also limit the number of times an advertisement is displayed and measure the effectiveness of marketing campaigns.

13. Cookie management

During your first visit, a banner allows you to:

• accept all cookies;
• refuse non-essential cookies;
• customize your preferences.

You can also change your choice at any time from your browser settings or via the consent manager available on the site.

Refusing certain cookies may affect certain functionalities.

14. Minors

The LAVISTA website is not intended for children under 16 without the authorization of a parent or legal guardian.

We do not knowingly collect personal data concerning minors without the required consent.

15. Links to third-party sites

Our site may contain links to websites operated by third parties.

LAVISTA is not responsible for their privacy policies or their data protection practices.

We invite you to consult their own policies before providing them with your information.

16. Modification of this policy

LAVISTA may modify this Privacy and Cookie Management Policy to reflect legal, regulatory, or technical changes.

The date of the last update appears at the top of this document.

17. Contact us

For any questions regarding this Privacy Policy or the use of your personal data, you can contact LAVISTA customer service via the contact details available on the "Contact" page of the website.

By using the LAVISTA website, you acknowledge that you have read this Privacy and Cookie Management Policy.