Personal data policy
🔄 Last updated: August 26, 2026
Introduction
This policy describes the personal data processed when you use the agmvision.com website, the purposes and legal bases of this processing, the recipients, retention periods, cookies used, and your rights, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act.
Data controller
The data controller is SARL ANDREAU, operating under the AGM Vision brand, registered with the Périgueux Trade and Companies Register under number 482 459 948, with its registered office at 13 avenue Eugène Le Roy, 24160 Excideuil.
No data protection officer has been appointed. For any questions about your data, your contact person can be reached using the details at the bottom of the page.
Data collected
Your personal data is collected when you use the following site features:
- Customer account: title, last name, first name, country, email address, password; for a business account, company name, intra-Community VAT number and SIRET
- Login via Google or PayPal: last name, first name and email address provided by that provider, and your account identifier with them
- Order: delivery and billing addresses, company if applicable, phone or mobile (pickup point delivery, installment payments), IP address and browser, original ad campaign parameters if you accepted marketing cookies
- Optional post-order survey: channel through which you heard about us and free-form comment
- Contact and customer service: first name, last name, email, phone, related vehicle and product, company type for professionals, message, attachments, related order or return, as well as emails you send us in reply
- Return request: pickup address, related products, reason and comment
- Product reviews: name from your order, rating, comment, related vehicle, optional photos or videos
- Newsletter: email address; if you have an account, your last name, first name, country, language and loyalty data are linked to your subscription
- Product availability alert: email address
- Vehicle search by license plate or VIN: entered plate or VIN, characteristics of the identified vehicle, IP address and browser
- Unrecognized vehicle: email address if you ask to be notified when it is added, along with the entered plate or VIN
Some data is collected automatically when you browse: the country inferred from your IP address to preselect the delivery country, the history of viewed products and searched vehicles if you are logged in (viewable and erasable from your customer area), usage statistics for vehicle pages (page viewed, light type, IP address, browser), and technical logs required for site security.
Fields marked as required in our forms are necessary to process your request; the others are optional.
Purposes, legal bases and durations
Each processing activity is based on one of the grounds provided by the GDPR: performance of the contract between us, a legal obligation, your consent, or our legitimate interest in operating and improving our service.
| Processing | Legal basis | Retention period |
|---|---|---|
| Managing your account, orders, payments, deliveries, returns and warranties | Performance of the contract | Duration of the business relationship, then 3 years after your last order or login |
| Retention of invoices and accounting records | Legal obligation | 10 years |
| Handling your contact and customer service requests | Performance of the contract and legitimate interest | 3 years after the last exchange |
| Sending the newsletter and commercial offers by email | Consent, withdrawable at any time | Until you unsubscribe, and at most 3 years after your last contact |
| Email reminder for an unvalidated cart (logged-in customers, cart of at least €20 inactive for one hour, one reminder only) | Legitimate interest; you can object by writing to us | 48 hours after the last cart action |
| Requesting a review after purchase via Avis Vérifiés | Legitimate interest; you can object by writing to us | One-time send, 2 days after the order |
| Identifying your vehicle by plate or VIN and improving our compatibility database | Performance of your request and legitimate interest | 12 months |
| Browsing history linked to your account (viewed products, searched vehicles) | Legitimate interest; can be deleted from your customer area | 12 months |
| Vehicle page usage statistics | Legitimate interest | 13 months |
| Post-order survey (internal marketing statistics) | Consent, optional response | Duration of your account |
| Audience measurement and advertising (Google Analytics, Google Ads, Meta) | Consent via the cookie banner | See cookie table |
| Spam filtering, translation, and assistance in drafting customer service replies using an artificial intelligence tool | Legitimate interest; each response is reviewed by a member of our team | Time needed to process |
| Site security, technical error detection, and server logs | Legitimate interest | 90 days (error reports), 14 days (server logs), 12 months (log of changes to your data) |
| Backups | Legitimate interest | Up to 90 days |
No decision producing legal effects concerning you is made in a fully automated manner.
Recipients and processors
Your data can be accessed by our authorized teams and by the following providers, each only for the service described:
| Service | Provider | Role and data concerned | Country |
|---|---|---|---|
| Hosting and backups | OVHcloud | Website and database hosting, encrypted backups | France |
| Delivery and security | Cloudflare, Inc. | Content delivery network, firewall and bot protection: processes IP addresses and requests of all visitors | United States |
| Technical maintenance | Agence Aurion | Website development and maintenance; access to data on our instructions, as a processor | France |
| Card payment | Lyra Network (Systempay) | Payment processing: identity, contact details, email, phone and order amount. Your card numbers are never shared with us | France |
| Other payment methods | PayPal (Europe) S.à r.l. et Cie, S.C.A.; Payplug SAS and Oney Bank | PayPal or installment payment: identity, contact details, email, mobile phone and order details | Luxembourg / France |
| Shipping | Chronopost SAS; La Poste – Colissimo | Labeling, delivery, notifications and parcel tracking: name, address, phone, email | France |
| Vehicle identification | SAS Auto Ways Network (Autoways) | Identifying your vehicle from the license plate or VIN | France |
| Emails and newsletter | Mailjet (Sinch) | Sending our service emails and newsletter; managing the subscriber list | France |
| Email reception | Postmark (ActiveCampaign, LLC) | Routing emails you send to our customer service | United States |
| Customer reviews | Skeepers SAS (Avis Vérifiés) | Requesting reviews after purchase (last name, first name, email, order reference and amount) and displaying certified reviews on the site | France |
| Business accounts | INSEE (Sirene directory) | SIRET number verification | France |
| Login via a third-party account | Google LLC; PayPal | Sharing your identity and email when you choose this login method | United States / Luxembourg |
| Search and maps | Algolia, Inc.; Google Maps Platform | Product search engine (no account data is indexed there); pickup point and partner reseller map, with your location shared only if you allow geolocation | United States |
| Fallback geolocation | GeoJS | Approximate country detection from IP address when our infrastructure did not provide it | Not specified by the provider |
| Audience measurement and advertising | Google LLC (Analytics, Tag Manager, Ads, Google Merchant widget, YouTube); Meta Platforms Ireland Ltd | Traffic statistics, conversion measurement, remarketing, and embedded videos. After your consent, some conversions are also sent from our servers to Meta with your click identifiers and, if you are logged in, your last name, first name and email | United States / Ireland |
| Consent management | Cybot A/S (Cookiebot by Usercentrics) | Collecting and storing your cookie choices | Denmark |
| Error monitoring and artificial intelligence | Sentry (Functional Software, Inc.); OpenAI, L.L.C. | Technical error reports that may contain your IP address and your account identifier; spam filtering, translation, and assistance in drafting customer service replies, vehicle name normalization | United States |
Your data is never sold or rented. Our processors access it only on our instructions and for the services described above.
Transfers outside the European Union
Some of these providers are based in the United States (Google, Meta, Cloudflare, Sentry, Algolia, OpenAI, Postmark). These transfers are covered by their certification under the EU–US Data Privacy Framework or, failing that, by the standard contractual clauses adopted by the European Commission.
Cookie management
Our site uses cookies to ensure it works properly, improve your user experience, compile visit statistics, and offer you tailored deals. In accordance with the General Data Protection Regulation (GDPR) and CNIL recommendations, we use Cookiebot to collect and manage your consent.
With Cookiebot, you can accept or refuse the following cookie categories:
Strictly necessary cookies
: essential for the site to work (authentication, cart, favorites). Without them, the site cannot function properly. They do not require your consent.
Functional cookies
: remember your choices and preferences (country, selected vehicle, search history, display mode) for a personalized experience.
Audience measurement cookies
: collect information on how you use the site (pages visited, time spent) to improve how it works.
Targeting or advertising cookies
: measure the effectiveness of our advertising campaigns (Google Ads, Meta) and show you relevant ads on other sites.
The consent banner is displayed on your first visit. Strictly necessary cookies are set without your consent; functional cookies are set only when you use the related feature (choosing a country or a vehicle, dismissing a message); audience measurement and advertising cookies, as well as transfers for advertising purposes, require your consent. You can change your choices at any time via the “Configure cookies” button, or clear them with the “Reset my consent” button so the banner is shown again.
Detailed cookie list
The table below lists the cookies and browser storage used during your visit to agmvision.com, grouped by category.
Strictly necessary cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| agmauth.* | Authentication (login method, session token) and remembering the page to reopen after you log in | 1 year |
| order_token | Identifies your current shopping cart | 30 days |
| favorite_token | Identifies your favorites list | 30 days |
| CookieConsent | Stores your cookie consent choice (Cookiebot) | 1 year |
| i18n_redirected | Remembers the selected language to avoid automatic redirection on each visit | 1 year |
| admin_logged_in_user | Indicates a session opened by a member of our team on behalf of a customer (internal use) | 30 days |
| __cf_bm / cf_clearance | Distinguishes between visitors and bots by our security provider Cloudflare, set only in case of a check | 30 min to 1 year |
Functional cookies (preferences)
| Cookie name | Purpose | Duration |
|---|---|---|
| user_country | Remembers the detected or selected delivery country | 1 year |
| selected_vehicle | Remembers the last vehicle selected for LED compatibility search | 1 year |
| vehicle_search_history | Stores the history of your last 10 vehicle searches (local storage) | 30 days |
| vehicle_navigation_context | Stores the viewed vehicle so you can return to it from a product page (session storage) | Session |
| search_history | Stores your last 5 product searches for quick access | 30 days |
| agm-product-display-mode | Remembers your product card display mode (local storage) | Until cleared |
| dismiss_message | Remembers that you dismissed the information banner displayed on the site | 1 year |
| dismiss_message_compte_client | Remembers that you dismissed the information message in your customer area | 30 days |
| hide_home_infos | Remembers that you dismissed the information block on the home page | 1 year |
| agm_staff | Excludes our team’s browsers from search statistics (local storage) | Until cleared |
Audience measurement cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| _ga / _ga_* | Google Analytics identifier for traffic statistics | 2 years |
Marketing / advertising cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| analytics | Original campaign parameters (gclid, fbclid, utm_source, utm_medium, utm_campaign, utm_content, utm_term, referrer site) kept until your order to measure attribution; set only after consent | 30 days |
| _fbp | Meta (Facebook) browser identifier for measuring advertising campaigns | 3 months |
| _fbc | Meta (Facebook) identifier for the original ad click, used for conversion tracking | 3 months |
| _gcl_au | Google Ads: links an ad click to a conversion on the site | 3 months |
| _gcl_aw / _gcl_gs | Google Ads: identifier of the original ad click | 3 months |
| IDE / test_cookie | Google (doubleclick.net): campaign measurement and remarketing | 13 months |
| NID | Google: preferences and advertising related to integrated Google services (maps, reviews widget) | 6 months |
| YSC / VISITOR_INFO1_LIVE / __Secure-* | YouTube: plays videos embedded on product pages | 6 months |
The entries vehicle_search_history, vehicle_navigation_context, agm-product-display-mode and agm_staff are not cookies but data stored by your browser (local storage); they are not sent to our servers and disappear when you clear site data.
Google, Meta and YouTube cookies are set by these companies after your consent; their durations are provided for information and may be changed by their publishers.
Retention periods
The durations specific to each processing activity are shown in the table “Purposes, legal bases and durations”. At the end of these periods, your data is deleted or anonymized. Deleted data may remain for up to 90 days in our encrypted backups before being permanently erased. Cookies have the durations indicated above; you can delete them at any time in your browser settings.
Your rights over your data
In accordance with the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the following rights over your personal data:
- Right of access to your data
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object, in particular to commercial prospecting and cart reminders
- Right to withdraw your consent at any time (newsletter, cookies), without affecting processing already carried out
- Right to set instructions on what happens to your data after your death
To exercise these rights, write to us using the contact details below and specify your request; proof of identity may be requested in case of reasonable doubt. We respond within one month. Deleting your account takes the form of anonymization: your identity data is replaced with random values, and your orders and invoices are kept separately for the legal period.
From your customer area, you can also update your information, manage your newsletter subscription (“Newsletter preferences”), and clear your browsing history (“History”). Each newsletter contains an unsubscribe link.
If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, www.cnil.fr).
Contact information
SARL ANDREAU – AGM Vision
24160 Excideuil