Our commitment: complete respect for your privacy

Vracado.com, as a Belgian company, scrupulously complies with the General Data Protection Regulation (GDPR) and is committed to protecting your privacy and your personal data.

1. Data controller

• Controller of the data processing: Mouhcine KHADIRI – Sole trader
• Address: Quai de Compiègne 57, Boîte RCH2, 4500 Huy, Belgique
• Email: info@vracado.com
• Telephone: +32 494 25 78 12

2. Data collected and purposes

2.1 Account and order data

Data collected:

• Surname and first name
• Email address
• Delivery and billing address
• Telephone number
• Order details and purchase history

Purposes:

• Managing orders and deliveries
• Invoicing and accounting
• Customer service and support
• Improving our services

Legal basis: Performance of the contract of sale

2.2 Browsing data (cookies)

Data collected:

• IP address
• Browser and device type
• Pages visited and time spent
• Browsing preferences

Purposes:

• Improving the user experience
• Statistical analysis of the site (Google Analytics)
• Technical operation of the site
• Security and fraud prevention

Legal basis: Consent and legitimate interest

2.3 Marketing data (optional)

Data collected:

• Email address (newsletter sign-up)
• Product preferences
• Interaction history

Purposes:

• Sending newsletters and promotional offers
• Personalizing recommendations
• News about our latest products

Legal basis: Consent (which you may withdraw at any time)

3. Cookies and similar technologies

3.1 Types of cookies used

Essential cookies:

Necessary for the site to work

• Shopping basket
• User session
• Language and currency preferences

Analytics cookies:

Improving the site (Google Analytics)

• Anonymized visit statistics
• Performance measurement
• Optimizing the user experience

Marketing cookies:

Personalization (with your consent)

• Product recommendations
• Personalized advertising
• Conversion tracking

3.2 Managing cookies

You can manage your cookie preferences:

• From our cookie banner
• In your browser settings
• By contacting us: info@vracado.com

4. Sharing data with third parties

4.1 Technical service providers

We share your data only with our trusted service providers:

Secure payment:

• Stripe (payment processing)
• PayPal (payment option)
• Klarna (deferred payment)

Delivery:

• Carrier partners (DPD, Bpost, UPS, etc.)
• Name, address and telephone number only, for delivery

Technical services:

• Web host (secure storage)
• Google Analytics (anonymized statistics)
• Customer service (technical support)

4.2 Contractual safeguards

All our service providers are bound by GDPR data processing agreements guaranteeing:

• Data protection to European standards
• No use of the data for their own purposes
• Deletion of the data at the end of the contract

4.3 We never sell data

We never sell your personal data to third parties.

5. International transfers

Some of our service providers may be located outside the European Union. In that case:

• Appropriate safeguards are in place (EU standard contractual clauses)
• Countries with an adequate level of protection as determined by the European Commission
• Protection mechanisms compliant with the GDPR

6. Retention periods

6.1 Active customer data

• Customer account: For as long as the account is active + 3 years after the last activity
• Orders: 10 years (accounting and tax obligations)
• Newsletter: Until you unsubscribe

6.2 Browsing data

• Cookies: 13 months maximum
• Server logs: 12 months
• Analytics data: 26 months (Google Analytics)

6.3 Automatic deletion

Data is deleted automatically once these periods expire, unless a legal obligation requires otherwise.

7. Your rights under the GDPR

7.1 Fundamental rights

You have the following rights:

• Right of access: To know what data we hold about you
• Right to rectification: To correct inaccurate data
• Right to erasure: To delete your data (subject to conditions)
• Right to portability: To obtain your data in a readable format
• Right to object: To object to processing (marketing in particular)
• Right to restriction: To limit the use of your data

7.2 Exercising your rights

To exercise your rights:

• Email: info@vracado.com
• Post: Quai de Compiègne 57, Boîte RCH2, 4500 Huy, Belgique
• Subject: “Exercising my GDPR rights”

Response time: 1 month maximum
Proof of identity: Identity document required for security

7.3 Right to lodge a complaint

You may lodge a complaint with the Belgian Data Protection Authority (DPA):

• Website: www.autoriteprotectiondonnees.be
• Email: contact@apd-gba.be
• Address: Rue de la Presse 35, 1000 Bruxelles

8. Data security

8.1 Technical measures

• SSL/TLS encryption for all transmissions
• Secure servers with restricted access
• Regular backups, encrypted
• Firewall and antivirus kept up to date

8.2 Organizational measures

• Restricted access to data (need-to-know principle)
• Staff training in GDPR rules
• Documented security procedures
• Regular security audits

8.3 Breach notification

In the event of a data breach:

• Notification to the DPA within 72 hours where applicable
• Notification of the individuals concerned where the risk is high
• Immediate corrective measures

9. Protection of minors

9.1 Minimum age

Our services are intended for people aged 16 and over.

9.2 Parental consent

For minors aged 16-18, parental consent is required for:

• Creating an account
• Subscribing to the newsletter
• Collection of marketing data

10. Changes to this policy

10.1 Updates

This policy may be amended in order to:

• Comply with changes in the law
• Improve our services
• Reflect new partners or technologies

10.2 Information

You will be informed of any significant change by:

• Email to all customers
• A notice on the website
• A dated version, permanently available

11. Contact and questions

11.1 Data protection officer

For any question relating to the protection of your data:

• Email: info@vracado.com
• Subject: “Data protection”
• Telephone: +32 494 25 78 12

11.2 Customer support

Our team is trained in the GDPR and available:

• Opening hours: Mon-Fri: 9am-6pm
• Languages: French, Dutch, English
• Response time: 24 hours maximum

12. Transparency and trust

12.1 Our commitment

Vracado.com undertakes to provide:

• Complete transparency about how your data is used
• Maximum security for your information
• Strict respect for your GDPR rights
• Continuous improvement of our practices

12.2 Ongoing compliance

We carry out on a regular basis:

• GDPR compliance audits
• Updates to our procedures
• Staff training
• Regulatory monitoring

Your trust is precious. We do everything we can to earn it and keep it.

Summary of your rights

• ✅ Access: Know what data we hold
• ✅ Rectification: Correct any errors
• ✅ Erasure: Delete your data
• ✅ Portability: Obtain your data
• ✅ Objection: Refuse certain processing
• ✅ Restriction: Limit the use made of it

Contact: info@vracado.com | +32 494 25 78 12