Privacy policy

1. Data controller

MONSIEUR ANDREAS VONFELD, sole proprietor (trade name: Vonfeld Digital), Chemin des Vignes Blanches, 83670 Tavernes, France. Contact: contact form.

2. Data processed and purposes

• Customer account: name, email address, password (stored in irreversibly encrypted form), language. Purpose: letting you send and follow your requests. Legal basis: performance of the contract.
• Delivery details: phone number and postal address. Purpose: preparing your quote, delivering your order and contacting you about it. Legal basis: performance of the contract.
• Quote requests: keyboard configuration, uploaded design if any, message, status and price. Purpose: reviewing your request, preparing the quote and making your order. Legal basis: performance of the contract or pre-contractual steps.
• Orders and invoices: data required for accounting. Legal basis: legal obligation.
• Contact form: name, email address, subject and message. Purpose: replying to you. Legal basis: legitimate interest in answering requests received. Retention: three years after the last exchange.
• Security: IP address and technical logs, limits on sign-in attempts. Legal basis: legitimate interest in protecting the website.

3. Cookies and local storage

The website only uses technical cookies needed for it to work: a session cookie, a security cookie against forged requests and a cookie remembering your language (one year). They do not require consent.

The configurator saves your design in progress in your browser’s local storage: this data stays on your device until you send a quote request.

The website uses no audience measurement tool and no advertising tracker.

4. Recipients

• the publisher, who alone accesses your account and requests from the administration area;
• OVH SAS (2 rue Kellermann, 59100 Roubaix, France), host of the website and email service;
• Bunny Fonts (BunnyWay d.o.o., Slovenia), which provides the website’s fonts and therefore receives visitors’ IP addresses;
• Cloudflare (Cloudflare, Inc., United States), whose Turnstile anti-bot service protects the sign-up, quote request and contact forms: it receives the IP address and technical information about the browser, based on our legitimate interest in protecting the website against abuse; Cloudflare is certified under the EU–US Data Privacy Framework;
• our manufacturing partners and carriers, who only receive what your order requires: the configuration and, for delivery, your name, address and phone number;
• the payment provider, when an accepted quote is paid.

5. Transfers outside the European Union

Our manufacturing partners and some carriers may be located outside the European Union. Only the information strictly needed to make and deliver your order is sent to them, this transfer being necessary for the performance of the contract (Article 49(1)(b) GDPR).

6. Retention periods

• customer account: while active, then deleted after three years of inactivity;
• quote requests not accepted: three years after the last exchange;
• orders and invoices: ten years, in line with accounting obligations;
• password reset links: sixty minutes.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can update your details directly from your account and exercise your other rights through the contact form. You will receive a reply within one month.

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country.

8. Security

The website is served over HTTPS only, passwords are irreversibly encrypted, uploaded designs are stored outside the public area of the website and access to data is restricted to the publisher.