Privacy Policy
We invite you to carefully read VistaFlow's current privacy policy. We remain at your disposal to answer any questions. You can contact us at contact@vistaflow.ai or by mail at our registered office address. This Privacy Policy has been established in application of the European Regulation 2016/679 of April 27, 2016 (“GDPR”).
This policy is part of our General Terms and Conditions. Effective date: January 1, 2024.
I. Nature of Data Collected VistaFlow collects and processes data that Professionals and Users (together "Users") voluntarily provide to access the Services (the “Data”). The purposes of this processing are:
-
To allow Professionals (and Users) to create an account to access the Services.
-
To enable Users to use and improve the Services.
-
To send commercial offers exclusively to Professionals.
To open an account, Professionals must provide at least:
-
First and last name
-
Email address
-
Mailing address
VistaFlow also collects Data related to the business relationship: subscription plans, billing and payment, support requests, and reported incidents. VistaFlow commits to minimizing the amount of information collected.
II. Use of Data VistaFlow uses Data in cases provided by current regulations:
-
Execution of the service contract.
-
Compliance with legal obligations.
-
Legitimate interest: VistaFlow never uses Data for commercial purposes without respecting the will of Users, who can unsubscribe from commercial communications at any time.
-
Consent to the use of Data.
III. Data Retention & Security
3.1 Security VistaFlow makes every effort to prevent loss, misuse, intrusion, unauthorized disclosure, alteration, or destruction of Data:
-
Data is stored on servers hosted in France (AWS or Microsoft Azure).
-
All information sent to VistaFlow is encrypted via 256-bit TLS protocol.
-
Employees are bound by strict confidentiality obligations.
-
Access is restricted via a strict access control policy.
3.2 Duration Data is kept for a period necessary for the execution of Services, specifically for the duration of the contract plus 12 months. Prospecting data is kept for 3 years from the last contact.
IV. Access to Data
4.1 Internal Access: Customer service, support, administration, accounting, technical, and marketing/sales departments may have access based on individual authorizations.
4.2 Data Transmission: VistaFlow may sub-contract hosting and technical maintenance. In accordance with Article 28 of the GDPR, access by sub-contractors is governed by a signed contract.
V. Data Transfer VistaFlow stores Data in Metropolitan France. In exceptional cases where data is transferred to sub-contractors in other countries, VistaFlow ensures appropriate safeguards are in place.
VI. User Rights In accordance with the GDPR, Users have the following rights:
-
Right of access
-
Right to rectification (modification)
-
Right to object
-
Right to erasure (right to be forgotten)
-
Right to portability
-
Right to restriction of processing
To exercise these rights, please write to: 41 rue Jacquemars Giélée, 59800 Lille, France or by email at contact@vistaflow.ai.