Privacy Policy
This Privacy Policy explains what personal data 205o Area collects when you visit or order from our webshop, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Data Controller
TWELVE CORP
Bureau 326, 59 Rue de Ponthieu, 75008 Paris, France
VAT/Tax ID no.: FR09978517472
Phone: +33 6 03 90 79 89
Email: Vibestationeu@gmail.com
For any privacy question or request, contact us at Vibestationeu@gmail.com.
Information We Collect From You
Order and contact details you provide at checkout: first and last name, email address, phone number, shipping address (street, city, postal code, country) and, when different, your billing address.
Order information: the products you purchase, quantities, prices, currency, order number, order date, chosen delivery method and order status.
Payment information: the payment method you select (card, Apple Pay or Google Pay). Card details are entered on and processed by our payment provider — we never see or store your full card number, expiry date or security code. We only receive a payment confirmation, the payment method type and the last digits of the card.
Communications: the content of emails or messages you send us, including complaints, return requests and support enquiries.
Age confirmation: the fact that you confirmed being 18 years or older, stored locally in your browser.
Technical data: IP address, browser type and version, device type, operating system, language, referring page and pages viewed. This is generated automatically when you visit the site and is used for security, fraud prevention and to keep the store working correctly.
Cookies and local storage: strictly necessary cookies and browser storage used to keep your shopping cart and your age confirmation between page views.
We do not knowingly collect data from anyone under 18, and we do not collect special categories of personal data (such as health data).
Why We Use Your Data and Our Legal Basis
To process, ship and deliver your order, and to handle returns, refunds and warranty claims — legal basis: performance of a contract with you.
To send you transactional messages such as order confirmations, shipping notifications and tracking links — legal basis: performance of a contract.
To answer your questions and provide customer support — legal basis: performance of a contract or our legitimate interest in assisting customers.
To prevent fraud, abuse and to secure our webshop — legal basis: our legitimate interest in protecting the store and our customers.
To comply with accounting, tax and consumer-law obligations — legal basis: compliance with a legal obligation.
To send marketing emails, only if you have explicitly opted in — legal basis: your consent, which you can withdraw at any time.
Who We Share Your Data With
Shipping carriers (DHL, UPS, Colissimo) receive your name, address, phone number and email so your parcel can be delivered and tracked.
Our payment provider receives the payment and billing information needed to authorise and settle your transaction.
Our hosting, email and IT service providers process data on our behalf under written data-processing agreements.
Public authorities, where we are legally required to disclose information.
We never sell, rent or trade your personal data, and we do not share it for third-party advertising.
International Transfers
Your data is primarily processed inside the European Economic Area. Where a service provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
How Long We Keep Your Data
Order, invoice and accounting records: kept for the statutory retention period of up to 10 years, as required by tax and accounting law.
Customer support correspondence: kept for up to 3 years after the last contact.
Marketing consent records and newsletter data: kept until you withdraw your consent, and then deleted.
Technical logs: kept for a maximum of 12 months.
Cart and age-confirmation data stored in your browser: kept until you clear your browser storage.
Your Rights
Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time without affecting processing carried out before withdrawal.
To exercise any of these rights, email Vibestationeu@gmail.com. We will respond within one month. Please note that we may need to keep certain order records to comply with legal obligations even after an erasure request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority — in France, the CNIL (www.cnil.fr).
Security
All traffic to and from our webshop is encrypted with TLS. Access to personal data is limited to staff and processors who need it to fulfil your order, and payment data is handled exclusively by our PCI-DSS compliant payment provider.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our services or legal requirements. The current version is always available on this page.