Privacy & Data Protection

Our commitment: handle your data with transparency, security, and respect.

GDPR Updated: February 7, 2026

This policy explains how VADP-VINCENDEAU collects and processes your personal data through this website.

  • We do not sell your data.
  • We only collect what is necessary to answer your requests, secure the service, and comply with the law.
  • You remain in control: you can exercise your rights at any time (access, rectification, erasure, etc.).

Data controller

Data controller: VADP-VINCENDEAU (SADEV Group)
Representative: Damien Bodet — Director
E-mail: contact@vadp-vincendeau.com
Address: Cete, Portugal

If you have questions about privacy or wish to exercise your rights, please contact us using the e-mail address above.

Data we collect

  • Contact form: name, e-mail, phone (optional), subject (optional), message.
  • Technical metadata: IP address, user-agent, sending date/time, and diagnostic information (anti-spam / security).
  • Google Maps: displaying the map may load resources from Google.
  • Technical logs: security and error events to ensure the website operates properly.

We do not accept attachments via the website and links (URLs) are blocked in messages for security reasons.

Purposes & legal basis

  • Answering your requests (contact form) — legitimate interest and/or pre-contractual measures.
  • Security and fraud prevention (anti-spam, rate-limit, logs) — legitimate interest.
  • Legal compliance (legal obligations, requests from authorities) — legal obligation.
  • Handling GDPR requests — legal obligation.

Retention periods

  • Contact messages: up to 24 months after the last interaction.
  • Technical logs (IP, user-agent): up to 12 months maximum.
  • Strictly necessary cookies: minimal technical duration.

At the end of these periods, the data is deleted or anonymized.

Recipients

Your data is intended for our authorized internal teams.
We may use subcontractors for hosting and e-mail delivery:

  • Hosting: Hostinger (website hosting).
  • Messaging: your message is forwarded to our professional contact address.

We do not resell your data. Outside these cases, disclosure may only occur to comply with a legal obligation or a request from a competent authority.

Your GDPR rights

You have the following rights, within the limits provided by law:

  • Right of access, rectification, and erasure.
  • Right to restriction and objection to processing.
  • Right to data portability.
  • Right to define post-mortem directives (depending on applicable law).

To exercise your rights: contact@vadp-vincendeau.com.
We may request proof of identity in case of reasonable doubt.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with a supervisory authority:

Security

  • Anti-CSRF protection (nonce), honeypot, anti-bot measures and rate-limit on the form.
  • Systematic data sanitization and escaping.
  • Blocking links/URLs and file-hosting providers in public messages.
  • TLS encryption during browsing (HTTPS).
  • Access restricted to authorized persons only (least-privilege principle).

Despite our efforts, no service is entirely invulnerable. In the event of a serious incident, the measures required by GDPR will be applied.

Third-party services

Google Maps (map integration): when the map is displayed, Google may receive technical information (IP address, user-agent, etc.) and set cookies according to your settings.

We do not integrate other non-essential tracking scripts without your prior consent.

DPO contact

For any privacy question or to exercise your rights:

We reply as soon as possible and no later than one month (legal deadline, extendable in certain cases).

Additional information

We may update this policy to reflect legal or technical changes.
The date of the latest update is shown at the top of the page.
In case of a major change, we may inform you through an appropriate channel.

This page is for general information purposes and does not constitute legal advice.