1. Data controller
Val de Vennes Bois (VVB)
SIRET 844 043 646 00034 — RCS Besançon
7 Chemin des Planches Sèches, 25390 Orchamps-Vennes, France
contact@etuvage.fr
2. Information and purposes
We use your first and last name, optional company name and SIRET, activity, country, department, email address and phone number to review your access request. This processing is based on your consent (Article 6(1)(a) GDPR); we record its date and the version of the privacy policy accepted. You can withdraw it by contacting us.
For approved clients, profile information and a password hash allow access to the relevant prices and management of the commercial relationship (Article 6(1)(b) GDPR). Recovery requests are reviewed by an administrator and never overwrite an existing profile automatically.
Login attempts, downloads, IP addresses, browser information and timestamps help protect the portal and monitor use of the documents, on the basis of our legitimate interests (Article 6(1)(f) GDPR). No advertising profiling or solely automated approval decision is used.
Quote and callback requests collect the contact details, optional company name and SIRET, project description, preferred callback time and any selected tariff reference. They are used by our team to respond to the request, based on the consent recorded when it is sent. They do not create or modify a client account.
3. Retention
- Quote and callback requests: six months from submission.
- Unapproved access requests: six months from the request date.
- Active client profiles: for the duration of the commercial relationship. Disabled portal profiles: three years after their last update.
- Activity and email delivery logs: a rolling twelve months.
- Emails awaiting delivery: encrypted and removed on successful delivery or after seven days.
- Abuse prevention counters: keyed hashes and timestamps, removed after one day of inactivity.
- Restricted backups: seven days. If restored, retention rules and deletions must be applied again before reopening the portal.
Scheduled maintenance removes records past these limits. This policy concerns the pricing portal; it does not replace any separate statutory retention obligations for invoices or contracts.
4. Recipients and technical services
Access is limited to authorised Val de Vennes Bois staff and the technical hosting and email provider, Infomaniak Network SA in Switzerland, for operation of the service. Data is neither sold nor used for third-party advertising.
The administration message editor loads the Trix library from unpkg.com; this request exposes the administrator’s IP address to that service. If automatic translation is enabled, the text submitted for translation is sent to Google. These features are not loaded on public or client pages.
5. Cookies
The etuvage_session cookie maintains authentication, the selected language and form security during your visit. It is necessary for the service and does not serve advertising or third-party analytics. It is a session cookie, with no persistent expiry date.
6. Your rights
You may request access, rectification, erasure, restriction or portability of your data, object to processing based on legitimate interests, or withdraw your consent, subject to the applicable conditions. Write to contact@etuvage.fr.
We respond in principle within one month; the GDPR allows an extension for complex requests, which we will explain to you. You can also contact the French data protection authority: CNIL.
7. Security and updates
The portal uses HTTPS, password hashing, protected administration sessions and access controls. This policy may change as the service evolves. Material changes will be communicated through the portal.
Last updated: 10 September 2026 · Version 2026-09-10.02