Personal data policy
🔄 Last updated: October 12, 2026
Introduction
This policy describes the personal data processed when you use the agmvision.com website, the purposes and legal bases of this processing, the recipients, retention periods, cookies used, and your rights, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act.
Data controller
The data controller is SARL ANDREAU, operating under the AGM Vision brand, registered with the Périgueux Trade and Companies Register under number 482 459 948, with its registered office at 13 avenue Eugène Le Roy, 24160 Excideuil.
No data protection officer has been appointed. For any questions about your data, your contact person can be reached using the details at the bottom of the page.
Data collected
Your personal data is collected when you use the following site features:
- Customer account: title, last name, first name, country, email address, password; for a business account, company name, intra-Community VAT number and SIRET
- Login via Google or PayPal: last name, first name and email address provided by that provider, and your account identifier with them
- Order: delivery and billing addresses, company if applicable, phone or mobile (pickup point delivery, installment payments), IP address and browser, original ad campaign parameters if you accepted marketing cookies
- Optional post-order survey: channel through which you heard about us and free-form comment
- Contact and customer service: first name, last name, email, phone, related vehicle and product, company type for professionals, message, attachments, related order or return, as well as emails you send us in reply
- Return request: pickup address, related products, reason and comment
- Product reviews: name from your order, rating, comment, related vehicle, optional photos or videos
- Newsletter: email address and language chosen to receive it; if you have an account, your title, last name, first name, country, account type, and the number, dates and amount of your orders are linked to your subscription, as well as, unless you object, the product ranges you purchased, your most recently viewed products, your most recent purchase, and the vehicle for your orders
- Product availability alert: email address
- Vehicle search by license plate or VIN: entered plate or VIN, characteristics of the identified vehicle, IP address and browser
- Unrecognized vehicle: email address if you ask to be notified when it is added, along with the entered plate or VIN
- Cart sent by email (visitor without an account): email address, request date and associated cart
Some data is collected automatically when you browse: the country inferred from your IP address to preselect the delivery country, the history of viewed products and searched vehicles if you are logged in (viewable and erasable from your customer area), usage statistics for vehicle pages (page viewed, light type, IP address, browser), and technical logs required for site security.
Fields marked as required in our forms are necessary to process your request; the others are optional.
Purposes, legal bases and durations
Each processing activity is based on one of the grounds provided by the GDPR: performance of the contract between us, a legal obligation, your consent, or our legitimate interest in operating and improving our service.
| Processing | Legal basis | Retention period |
|---|---|---|
| Managing your account, orders, payments, deliveries, returns and warranties | Performance of the contract | Duration of the business relationship, then 3 years after your last order or login |
| Retention of invoices and accounting records | Legal obligation | 10 years |
| Handling your contact and customer service requests | Performance of the contract and legitimate interest | 3 years after the last exchange |
| Sending the newsletter and commercial offers by email | Consent, withdrawable at any time | Until you unsubscribe, and at most 3 years after your last contact |
| Email reminder for an unconfirmed cart (logged-in customers, and visitors who asked to receive their cart by email; cart of at least €20 inactive for one hour, one reminder only) | Legitimate interest; you can object at any time by writing to us or, for a cart without an account, from each reminder | 48 hours after the last action on the cart; a visitor without an account’s address is deleted with their cart, within 8 days of the last action; if you object, a hash of the address (not the address itself) is kept for 3 years so we do not contact you again |
| Requesting a review after purchase via Avis Vérifiés | Legitimate interest; you can object by writing to us | One-time send, 2 days after the order |
| Identifying your vehicle by plate or VIN and improving our compatibility database | Performance of your request and legitimate interest | 12 months |
| Browsing history linked to your account (viewed products, searched vehicles) | Legitimate interest; can be deleted from your customer area | 12 months |
| Vehicle page usage statistics | Legitimate interest | 13 months |
| Post-order survey (internal marketing statistics) | Consent, optional response | Duration of your account |
| Audience measurement and advertising (Google Analytics, Google Ads, Meta) | Consent via the cookie banner | See cookie table |
| Spam filtering, translation, and assistance in drafting customer service replies using an artificial intelligence tool | Legitimate interest; each response is reviewed by a member of our team | Time needed to process |
| Site security, technical error detection, and server logs | Legitimate interest | 90 days (error reports), 14 days (server logs), 12 months (log of changes to your data) |
| Backups | Legitimate interest | Up to 90 days |
| Newsletter personalization: products viewed and not purchased, last purchase and products suited to the vehicle(s) in your orders, sent to Brevo to compose your emails | Legitimate interest; you can object at any time from your customer account | During your subscription; only products viewed in the last 90 days are taken into account, and this data is deleted from Brevo if you object or unsubscribe from your account |
No decision producing legal effects concerning you is made in a fully automated manner.
Recipients and processors
Your data can be accessed by our authorized teams and by the following providers, each only for the service described:
| Service | Provider | Role and data concerned | Country |
|---|---|---|---|
| Hosting and backups | OVHcloud | Website and database hosting, encrypted backups | France |
| Delivery and security | Cloudflare, Inc. | Content delivery network, firewall and bot protection: processes IP addresses and requests of all visitors | United States |
| Technical maintenance and error monitoring | Agence Aurion | Website development and maintenance; monitoring technical errors with Sentry, a tool hosted by the agency in the European Union, whose reports may contain your IP address and account ID; access to data on our instructions, as a data processor | France |
| Card payment | Lyra Network (Systempay) | Payment processing: identity, contact details, email, phone and order amount. Your card numbers are never shared with us | France |
| Other payment methods | PayPal (Europe) S.à r.l. et Cie, S.C.A.; Payplug SAS and Oney Bank | PayPal or installment payment: identity, contact details, email, mobile phone and order details | Luxembourg / France |
| Shipping | Chronopost SAS; La Poste – Colissimo | Labeling, delivery, notifications and parcel tracking: name, address, phone, email | France |
| Vehicle identification | SAS Auto Ways Network (Autoways) | Identifying your vehicle from the license plate or VIN | France |
| Emails and newsletter | Brevo (Sendinblue SAS) | Sending our service emails and newsletter; managing the subscriber list | France |
| Email reception | Postmark (ActiveCampaign, LLC) | Routing emails you send to our customer service | United States |
| Customer reviews | Skeepers SAS (Avis Vérifiés) | Requesting reviews after purchase (last name, first name, email, order reference and amount) and displaying certified reviews on the site | France |
| Business accounts | INSEE (Sirene directory) | SIRET number verification | France |
| Login via a third-party account | Google LLC; PayPal | Sharing your identity and email when you choose this login method | United States / Luxembourg |
| Search and maps | Algolia, Inc.; Google Maps Platform | Product search engine (no account data is indexed there); pickup point and partner reseller map, with your location shared only if you allow geolocation | United States |
| Fallback geolocation | GeoJS | Approximate country detection from IP address when our infrastructure did not provide it | Not specified by the provider |
| Audience measurement and advertising | Google LLC (Analytics, Tag Manager, Ads, Google Merchant widget, YouTube); Meta Platforms Ireland Ltd | Traffic statistics, conversion measurement, remarketing, and embedded videos. After your consent, some conversions are also sent from our servers to Meta with your click identifiers and, if you are logged in, your last name, first name and email | United States / Ireland |
| Consent management | Cybot A/S (Cookiebot by Usercentrics) | Collecting and storing your cookie choices | Denmark |
| Artificial intelligence | OpenAI, L.L.C. | Spam filtering, translation and assistance with drafting customer service replies, standardization of vehicle names | United States |
Your data is never sold or rented. Our processors access it only on our instructions and for the services described above.
Transfers outside the European Union
Some of these service providers are based in the United States (Google, Meta, Cloudflare, Algolia, OpenAI, Postmark). These transfers are covered by their certification under the EU–US Data Privacy Framework or, failing that, by the standard contractual clauses adopted by the European Commission.
Cookie management
Our site uses cookies to ensure it works properly, improve your user experience, compile visit statistics, and offer you tailored deals. In accordance with the General Data Protection Regulation (GDPR) and CNIL recommendations, we use Cookiebot to collect and manage your consent.
With Cookiebot, you can accept or refuse the following cookie categories:
Strictly necessary cookies
: essential for the site to work (authentication, cart, favorites). Without them, the site cannot function properly. They do not require your consent.
Functional cookies
: remember your choices and preferences (country, selected vehicle, search history, display mode) for a personalized experience.
Audience measurement cookies
: collect information on how you use the site (pages visited, time spent) to improve how it works.
Targeting or advertising cookies
: measure the effectiveness of our advertising campaigns (Google Ads, Meta) and show you relevant ads on other sites.
The consent banner is displayed on your first visit. Strictly necessary cookies are set without your consent; functional cookies are only set when you use the related feature (choosing a country or a vehicle, closing a message); audience measurement and advertising cookies, as well as transfers for advertising purposes, require your consent, except for the analytics cookie (exempt internal audience measurement, detailed in the table below). You can change your choices at any time via the “Configure cookies” button, or clear them with the “Reset my consent” button so the banner is shown again.
Detailed cookie list
The table below lists the cookies and browser storage used during your visit to agmvision.com, grouped by category.
Strictly necessary cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| agmauth.* | Authentication (login method, session token) and remembering the page to reopen after you log in | 1 year |
| order_token | Identifies your current shopping cart | 30 days |
| favorite_token | Identifies your favorites list | 30 days |
| CookieConsent | Stores your cookie consent choice (Cookiebot) | 1 year |
| i18n_redirected | Remembers the selected language to avoid automatic redirection on each visit | 1 year |
| admin_logged_in_user | Indicates a session opened by a member of our team on behalf of a customer (internal use) | 30 days |
| __cf_bm / cf_clearance | Distinguishes between visitors and bots by our security provider Cloudflare, set only in case of a check | 30 min to 1 year |
Functional cookies (preferences)
| Cookie name | Purpose | Duration |
|---|---|---|
| user_country | Remembers the detected or selected delivery country | 1 year |
| selected_vehicle | Remembers the last vehicle selected for LED compatibility search | 1 year |
| vehicle_search_history | Stores the history of your last 10 vehicle searches (local storage) | 30 days |
| vehicle_navigation_context | Stores the viewed vehicle so you can return to it from a product page (session storage) | Session |
| search_history | Stores your last 5 product searches for quick access | 30 days |
| agm-product-display-mode | Remembers your product card display mode (local storage) | Until cleared |
| agm-product-cart-context / agm-product-cart-vehicle | Stores the selected light type and vehicle for your last 30 products opened from a vehicle page, to show them on the item added to your cart (local and session storage) | 7 days |
| dismiss_message | Remembers that you dismissed the information banner displayed on the site | 1 year |
| dismiss_message_compte_client | Remembers that you dismissed the information message in your customer area | 30 days |
| hide_home_infos | Remembers that you dismissed the information block on the home page | 1 year |
| hide_clock_change | Remembers dismissing the clock change announcement until the next clock change | 30 days |
| agm_staff | Excludes our team’s browsers from search statistics (local storage) | Until cleared |
| agm-checkout-exit-intent-shown | Prevents the help window that opens when you leave checkout from being shown multiple times (session storage) | Session |
Audience measurement cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| analytics | Source, channel, campaign, content, keyword and referring site of your first visit and your last visit, stored until your order to know which channel customers use to find us (internal audience measurement, without advertising identifier, exempt from consent); advertising click IDs (gclid, fbclid and equivalents) are added only after your consent to marketing cookies | 30 days |
| _ga / _ga_* | Google Analytics identifier for traffic statistics | 2 years |
| agm-instagram-stories-opened-at | Date you last opened our Instagram Stories, stored in your browser’s local storage and attached to your cart to measure whether Stories lead to orders | 7 days |
Marketing / advertising cookies
| Cookie name | Purpose | Duration |
|---|---|---|
| agm_attribution_pending | Advertising click IDs (gclid, fbclid and equivalents) from your visit, kept in your browser’s session storage as long as you have not consented to marketing cookies; sent to our servers only after your consent, deleted when you withdraw it or when you close the browser | Session |
| _fbp | Meta (Facebook) browser identifier for measuring advertising campaigns | 3 months |
| _fbc | Meta (Facebook) identifier for the original ad click, used for conversion tracking | 3 months |
| _gcl_au | Google Ads: links an ad click to a conversion on the site | 3 months |
| _gcl_aw / _gcl_gs | Google Ads: identifier of the original ad click | 3 months |
| IDE / test_cookie | Google (doubleclick.net): campaign measurement and remarketing | 13 months |
| NID | Google: preferences and advertising related to integrated Google services (maps, reviews widget) | 6 months |
| YSC / VISITOR_INFO1_LIVE / __Secure-* | YouTube: plays videos embedded on product pages | 6 months |
The entries vehicle_search_history, vehicle_navigation_context, agm-product-display-mode, agm_staff, agm-checkout-exit-intent-shown, agm_attribution_pending and agm_attribution_state are not cookies but data stored by your browser (local or session storage); they disappear when you clear site data. They are not sent to our servers, except agm_attribution_state (temporary copy of the analytics cookie, same purpose) and agm_attribution_pending, sent only after you consent to marketing cookies.
Google, Meta and YouTube cookies are set by these companies after your consent; their durations are provided for information and may be changed by their publishers.
Retention periods
The durations specific to each processing activity are shown in the table “Purposes, legal bases and durations”. At the end of these periods, your data is deleted or anonymized. Deleted data may remain for up to 90 days in our encrypted backups before being permanently erased. Cookies have the durations indicated above; you can delete them at any time in your browser settings.
Your rights over your data
In accordance with the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the following rights over your personal data:
- Right of access to your data
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object, in particular to marketing, cart reminders and newsletter personalization
- Right to withdraw your consent at any time (newsletter, cookies), without affecting processing already carried out
- Right to set instructions on what happens to your data after your death
To exercise these rights, write to us using the contact details below and specify your request; proof of identity may be requested in case of reasonable doubt. We respond within one month. Deleting your account takes the form of anonymization: your identity data is replaced with random values, and your orders and invoices are kept separately for the legal period.
From your customer area, you can also update your information, manage your newsletter subscription (“Newsletter preferences”), and clear your browsing history (“History”). Each newsletter contains an unsubscribe link.
If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, www.cnil.fr).
Contact information
SARL ANDREAU – AGM Vision
24160 Excideuil