Data Controller
The website https://www.test-vision.com is edited by:
WEB EDITIONS II
Headquarters:
Email: [email protected]
The company acts as the data controller for personal data collected from users.
Purpose of this Policy
This Policy explains how Test Vision collects, uses, stores and protects the personal data of its users, in accordance with:
• Regulation (EU) 2016/679 (GDPR) for users located in the European Union;
• Law No. 78-17 amended (Data Protection Act) for France;
• Personal Data Protection Law (PDPL) applicable in the Malta.
Data Collected
Test Vision collects only the data necessary for the provision, management and billing of its services:
- Account data: Username, encrypted password, subscription history, invoices.
- Identification data: Name, first name, postal address, email address, phone number, country.
- Payment data: Card number and banking information processed only by the Stripe provider; Test Vision never has access to it.
- Technical data: IP address, device type, browser, logs, analytical and security cookies.
- Data related to service use: Uploaded documents, created templates, sender and recipient addresses, sending history, mail tracking.
Processing Purposes
Data is processed for the following purposes:
- Provision and execution of services (creation, printing, sending of mail).
- Customer account management and billing.
- Fraud prevention and payment security.
- Customer assistance and technical support.
- Site improvement and service performance.
- Compliance with legal obligations (billing, anti-money laundering, accounting records).
- Sending administrative or contractual information related to the service.
- Managing requests to exercise GDPR/PDPL rights.
Legal Basis for Processing
Depending on the situation:
- Contract execution (service use, order processing, billing).
- Consent (account creation, cookies, marketing).
- Legal obligation (record keeping, invoices).
- Legitimate interest (fraud prevention, service improvement).
Data Retention
Data is retained for the strictly necessary duration:
| Category | Maximum Duration |
|---|---|
| Account data | as long as account is active + 3 years after deletion |
| Billing data | 10 years (accounting obligations) |
| Sent mail data | subscription duration + 6 months |
| Technical data / logs | 12 months |
| Analytical cookies | maximum 13 months |
Customer documents and files are automatically deleted at the end of the subscription or account closure.
Hosting and International Transfers
Data is hosted on secure servers of OVHcloud (OVH SAS)., located in the European Union (Lithuania and Netherlands).
Backups and processing may be carried out in Malta as part of the technical management of the service.
International transfers comply with guarantees provided by GDPR (Standard Contractual Clauses of the European Commission).
Data Sharing
Test Vision does not sell or rent personal data.
Information may be communicated only to:
- Technical service providers (hosting, routing, printing, customer support).
- Payment providers (Stripe).
- Carriers and postal operators for executing shipments.
- Administrative or judicial authorities when the law requires it.
All subprocessors are bound by strict confidentiality and security obligations.
Security
Test Vision applies technical and organizational security measures compliant with international standards: SSL/TLS encryption, password hashing, firewall, logging, environment segregation, strict access control, internal security audits.
Cookies
The Site uses cookies:
- Technical: essential for service operation.
- Analytical (Google Analytics 4): to measure audience.
- Functional: to save language and preferences.
The Client can manage cookies via the consent banner or browser settings.
Refusing technical cookies may prevent access to the service.
User Rights (GDPR / PDPL)
The Client has the following rights:
- Right of access to their data.
- Right to rectification.
- Right to erasure ("right to be forgotten").
- Right to restrict processing.
- Right to object.
- Right to data portability (data export).
- Right to set post-mortem directives (EU only).
Any request can be addressed to: [email protected]
Response within a maximum of 30 days.
An identity document may be requested for verification.
Main Processors
- Stripe Payments Europe Ltd. – payment processing.
- OVHcloud (OVH SAS). – hosting.
- Google LLC – audience analysis (GA4).
- Postal Service – mail printing and sending.
- OpenAI / AI API – automated text generation (without storing personal data after processing).
Transfers Outside the EU
Data may be transferred to Malta for technical and support needs.
Test Vision guarantees an equivalent level of protection via Standard Contractual Clauses compliant with Article 46 of the GDPR and the Personal Data Protection Act applicable in Malta.
Contact and Complaints
For any questions or to exercise rights: [email protected]
Users located in the European Union may also file a complaint with their national data protection authority.
Policy Updates
Test Vision reserves the right to modify this policy at any time.
The applicable version is the one published on the website on the date of consultation.
Any substantial modification will be notified by email or through the customer account.
Stripe and fraud prevention
We use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.
How Google uses your data
When you accept advertising and measurement cookies, Google processes your personal data as an independent controller for its own purposes. Google explains those uses, and the choices you have, here: How Google uses data from sites or apps that use its services