Privacy Policy (GDPR)

Last updated: 28/01/2026

1. Data Controller

The data controller responsible for processing personal data is:
VRI VAPE RAIL INTERNATIONAL
9 rue des Noisetiers, 01460 Montréal-la-Cluse, France
Email: vri@vaperail.com
Phone: +33 4 72 12 00 73

2. Personal data we collect

We only collect personal data that is necessary for the operation of the website and for handling your requests.

a) Data you provide to us

When you contact VRI VAPE RAIL INTERNATIONAL (by email, phone, or via a contact form), we may process the following data:

  • First name, last name,
  • Company,
  • Email address, phone number,
  • The content of your message and any information you choose to share,
  • Any attachments you may send.

b) Technical data (browsing)

When you browse the website, limited technical data may be processed:

  • IP address,
  • Browser type and operating system,
  • Technical logs required for website security and proper functioning.

3. Purposes of processing

Your personal data is processed to:

  • Respond to your requests and manage our communications,
  • Ensure the proper operation and security of the website (incident prevention, protection against attacks, technical administration),
  • Comply with legal obligations and manage potential disputes.

4. Legal bases

Processing is carried out on the basis of:

  • VRI VAPE RAIL INTERNATIONAL’s legitimate interests (responding to inquiries, ensuring website security, technical administration),
  • Pre-contractual measures taken at your request (e.g., information requests or quotation requests),
  • Compliance with legal obligations, where applicable.

5. Recipients of the data

Your personal data may be accessed only by:

  • Authorized staff within VRI VAPE RAIL INTERNATIONAL,
  • Strictly necessary technical service providers (hosting, maintenance), acting as data processors.

Web hosting

This website is hosted by:
OVH SAS
2 rue Kellermann – 59100 Roubaix – France
Phone: 1007 (France)

6. Transfers outside the European Union

We do not organize transfers of personal data outside the European Union as part of the website’s standard operation. If a transfer were to occur (e.g., a change of service provider), we would implement appropriate safeguards in accordance with applicable regulations.

7. Data retention periods

  • Contact requests / communications: up to 3 years after the last active contact.
  • Data related to a contractual relationship: kept for the time necessary to perform the contract, then archived in accordance with legal obligations (e.g., accounting documents for up to 10 years).
  • Security technical logs: kept for a limited period, generally 6 to 12 months.

8. Cookies

The website does not use audience measurement cookies or advertising cookies. Only strictly necessary cookies may be used to ensure the website works properly (e.g., session management, security, technical preferences). These cookies do not require consent. You can configure your browser to block cookies. However, some features of the website may not function correctly.

9. Security

VRI VAPE RAIL INTERNATIONAL implements reasonable technical and organizational measures to protect personal data (access controls, secure hosting, backups, etc.).

10. Your rights

Under the GDPR, you have the following rights:

  • Right of access, rectification, and erasure,
  • Right to restriction and to object,
  • Right to data portability (in certain cases).

How to exercise your rights

You can contact VRI VAPE RAIL INTERNATIONAL:

  • By email: vri@vaperail.com
  • Or by mail: VRI VAPE RAIL INTERNATIONAL – 9 rue des Noisetiers, 01460 Montréal-la-Cluse, France.

We may request proof of identity only where there is a reasonable doubt about the requester’s identity.

Complaint

You may also lodge a complaint with the CNIL (French Data Protection Authority).

11. Policy updates

This Privacy Policy may be updated from time to time. The “Last updated” date at the top of this page indicates the most recent revision.