Skip to main content

Personal data policy

🔄 Last updated: October 12, 2026

Introduction

This policy describes the personal data processed when you use the agmvision.com website, the purposes and legal bases of this processing, the recipients, retention periods, cookies used, and your rights, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the French Data Protection Act.

Data controller

The data controller is SARL ANDREAU, operating under the AGM Vision brand, registered with the Périgueux Trade and Companies Register under number 482 459 948, with its registered office at 13 avenue Eugène Le Roy, 24160 Excideuil.

No data protection officer has been appointed. For any questions about your data, your contact person can be reached using the details at the bottom of the page.

Data collected

Your personal data is collected when you use the following site features:

  • Customer account: title, last name, first name, country, email address, password; for a business account, company name, intra-Community VAT number and SIRET
  • Login via Google or PayPal: last name, first name and email address provided by that provider, and your account identifier with them
  • Order: delivery and billing addresses, company if applicable, phone or mobile (pickup point delivery, installment payments), IP address and browser, original ad campaign parameters if you accepted marketing cookies
  • Optional post-order survey: channel through which you heard about us and free-form comment
  • Contact and customer service: first name, last name, email, phone, related vehicle and product, company type for professionals, message, attachments, related order or return, as well as emails you send us in reply
  • Return request: pickup address, related products, reason and comment
  • Product reviews: name from your order, rating, comment, related vehicle, optional photos or videos
  • Newsletter: email address and language chosen to receive it; if you have an account, your title, last name, first name, country, account type, and the number, dates and amount of your orders are linked to your subscription, as well as, unless you object, the product ranges you purchased, your most recently viewed products, your most recent purchase, and the vehicle for your orders
  • Product availability alert: email address
  • Vehicle search by license plate or VIN: entered plate or VIN, characteristics of the identified vehicle, IP address and browser
  • Unrecognized vehicle: email address if you ask to be notified when it is added, along with the entered plate or VIN
  • Cart sent by email (visitor without an account): email address, request date and associated cart

Some data is collected automatically when you browse: the country inferred from your IP address to preselect the delivery country, the history of viewed products and searched vehicles if you are logged in (viewable and erasable from your customer area), usage statistics for vehicle pages (page viewed, light type, IP address, browser), and technical logs required for site security.

Fields marked as required in our forms are necessary to process your request; the others are optional.

Purposes, legal bases and durations

Each processing activity is based on one of the grounds provided by the GDPR: performance of the contract between us, a legal obligation, your consent, or our legitimate interest in operating and improving our service.

Processing Legal basis Retention period
Managing your account, orders, payments, deliveries, returns and warranties Performance of the contract Duration of the business relationship, then 3 years after your last order or login
Retention of invoices and accounting records Legal obligation 10 years
Handling your contact and customer service requests Performance of the contract and legitimate interest 3 years after the last exchange
Sending the newsletter and commercial offers by email Consent, withdrawable at any time Until you unsubscribe, and at most 3 years after your last contact
Email reminder for an unconfirmed cart (logged-in customers, and visitors who asked to receive their cart by email; cart of at least €20 inactive for one hour, one reminder only) Legitimate interest; you can object at any time by writing to us or, for a cart without an account, from each reminder 48 hours after the last action on the cart; a visitor without an account’s address is deleted with their cart, within 8 days of the last action; if you object, a hash of the address (not the address itself) is kept for 3 years so we do not contact you again
Requesting a review after purchase via Avis Vérifiés Legitimate interest; you can object by writing to us One-time send, 2 days after the order
Identifying your vehicle by plate or VIN and improving our compatibility database Performance of your request and legitimate interest 12 months
Browsing history linked to your account (viewed products, searched vehicles) Legitimate interest; can be deleted from your customer area 12 months
Vehicle page usage statistics Legitimate interest 13 months
Post-order survey (internal marketing statistics) Consent, optional response Duration of your account
Audience measurement and advertising (Google Analytics, Google Ads, Meta) Consent via the cookie banner See cookie table
Spam filtering, translation, and assistance in drafting customer service replies using an artificial intelligence tool Legitimate interest; each response is reviewed by a member of our team Time needed to process
Site security, technical error detection, and server logs Legitimate interest 90 days (error reports), 14 days (server logs), 12 months (log of changes to your data)
Backups Legitimate interest Up to 90 days
Newsletter personalization: products viewed and not purchased, last purchase and products suited to the vehicle(s) in your orders, sent to Brevo to compose your emails Legitimate interest; you can object at any time from your customer account During your subscription; only products viewed in the last 90 days are taken into account, and this data is deleted from Brevo if you object or unsubscribe from your account

No decision producing legal effects concerning you is made in a fully automated manner.

Recipients and processors

Your data can be accessed by our authorized teams and by the following providers, each only for the service described:

Service Provider Role and data concerned Country
Hosting and backups OVHcloud Website and database hosting, encrypted backups France
Delivery and security Cloudflare, Inc. Content delivery network, firewall and bot protection: processes IP addresses and requests of all visitors United States
Technical maintenance and error monitoring Agence Aurion Website development and maintenance; monitoring technical errors with Sentry, a tool hosted by the agency in the European Union, whose reports may contain your IP address and account ID; access to data on our instructions, as a data processor France
Card payment Lyra Network (Systempay) Payment processing: identity, contact details, email, phone and order amount. Your card numbers are never shared with us France
Other payment methods PayPal (Europe) S.à r.l. et Cie, S.C.A.; Payplug SAS and Oney Bank PayPal or installment payment: identity, contact details, email, mobile phone and order details Luxembourg / France
Shipping Chronopost SAS; La Poste – Colissimo Labeling, delivery, notifications and parcel tracking: name, address, phone, email France
Vehicle identification SAS Auto Ways Network (Autoways) Identifying your vehicle from the license plate or VIN France
Emails and newsletter Brevo (Sendinblue SAS) Sending our service emails and newsletter; managing the subscriber list France
Email reception Postmark (ActiveCampaign, LLC) Routing emails you send to our customer service United States
Customer reviews Skeepers SAS (Avis Vérifiés) Requesting reviews after purchase (last name, first name, email, order reference and amount) and displaying certified reviews on the site France
Business accounts INSEE (Sirene directory) SIRET number verification France
Login via a third-party account Google LLC; PayPal Sharing your identity and email when you choose this login method United States / Luxembourg
Search and maps Algolia, Inc.; Google Maps Platform Product search engine (no account data is indexed there); pickup point and partner reseller map, with your location shared only if you allow geolocation United States
Fallback geolocation GeoJS Approximate country detection from IP address when our infrastructure did not provide it Not specified by the provider
Audience measurement and advertising Google LLC (Analytics, Tag Manager, Ads, Google Merchant widget, YouTube); Meta Platforms Ireland Ltd Traffic statistics, conversion measurement, remarketing, and embedded videos. After your consent, some conversions are also sent from our servers to Meta with your click identifiers and, if you are logged in, your last name, first name and email United States / Ireland
Consent management Cybot A/S (Cookiebot by Usercentrics) Collecting and storing your cookie choices Denmark
Artificial intelligence OpenAI, L.L.C. Spam filtering, translation and assistance with drafting customer service replies, standardization of vehicle names United States

Your data is never sold or rented. Our processors access it only on our instructions and for the services described above.

Transfers outside the European Union

Some of these service providers are based in the United States (Google, Meta, Cloudflare, Algolia, OpenAI, Postmark). These transfers are covered by their certification under the EU–US Data Privacy Framework or, failing that, by the standard contractual clauses adopted by the European Commission.

Cookie management

Our site uses cookies to ensure it works properly, improve your user experience, compile visit statistics, and offer you tailored deals. In accordance with the General Data Protection Regulation (GDPR) and CNIL recommendations, we use Cookiebot to collect and manage your consent.

With Cookiebot, you can accept or refuse the following cookie categories:

Strictly necessary cookies : essential for the site to work (authentication, cart, favorites). Without them, the site cannot function properly. They do not require your consent.
Functional cookies : remember your choices and preferences (country, selected vehicle, search history, display mode) for a personalized experience.
Audience measurement cookies : collect information on how you use the site (pages visited, time spent) to improve how it works.
Targeting or advertising cookies : measure the effectiveness of our advertising campaigns (Google Ads, Meta) and show you relevant ads on other sites.

The consent banner is displayed on your first visit. Strictly necessary cookies are set without your consent; functional cookies are only set when you use the related feature (choosing a country or a vehicle, closing a message); audience measurement and advertising cookies, as well as transfers for advertising purposes, require your consent, except for the analytics cookie (exempt internal audience measurement, detailed in the table below). You can change your choices at any time via the “Configure cookies” button, or clear them with the “Reset my consent” button so the banner is shown again.

Detailed cookie list

The table below lists the cookies and browser storage used during your visit to agmvision.com, grouped by category.

Strictly necessary cookies

Cookie name Purpose Duration
agmauth.* Authentication (login method, session token) and remembering the page to reopen after you log in 1 year
order_token Identifies your current shopping cart 30 days
favorite_token Identifies your favorites list 30 days
CookieConsent Stores your cookie consent choice (Cookiebot) 1 year
i18n_redirected Remembers the selected language to avoid automatic redirection on each visit 1 year
admin_logged_in_user Indicates a session opened by a member of our team on behalf of a customer (internal use) 30 days
__cf_bm / cf_clearance Distinguishes between visitors and bots by our security provider Cloudflare, set only in case of a check 30 min to 1 year

Functional cookies (preferences)

Cookie name Purpose Duration
user_country Remembers the detected or selected delivery country 1 year
selected_vehicle Remembers the last vehicle selected for LED compatibility search 1 year
vehicle_search_history Stores the history of your last 10 vehicle searches (local storage) 30 days
vehicle_navigation_context Stores the viewed vehicle so you can return to it from a product page (session storage) Session
search_history Stores your last 5 product searches for quick access 30 days
agm-product-display-mode Remembers your product card display mode (local storage) Until cleared
agm-product-cart-context / agm-product-cart-vehicle Stores the selected light type and vehicle for your last 30 products opened from a vehicle page, to show them on the item added to your cart (local and session storage) 7 days
dismiss_message Remembers that you dismissed the information banner displayed on the site 1 year
dismiss_message_compte_client Remembers that you dismissed the information message in your customer area 30 days
hide_home_infos Remembers that you dismissed the information block on the home page 1 year
hide_clock_change Remembers dismissing the clock change announcement until the next clock change 30 days
agm_staff Excludes our team’s browsers from search statistics (local storage) Until cleared
agm-checkout-exit-intent-shown Prevents the help window that opens when you leave checkout from being shown multiple times (session storage) Session

Audience measurement cookies

Cookie name Purpose Duration
analytics Source, channel, campaign, content, keyword and referring site of your first visit and your last visit, stored until your order to know which channel customers use to find us (internal audience measurement, without advertising identifier, exempt from consent); advertising click IDs (gclid, fbclid and equivalents) are added only after your consent to marketing cookies 30 days
_ga / _ga_* Google Analytics identifier for traffic statistics 2 years
agm-instagram-stories-opened-at Date you last opened our Instagram Stories, stored in your browser’s local storage and attached to your cart to measure whether Stories lead to orders 7 days

Marketing / advertising cookies

Cookie name Purpose Duration
agm_attribution_pending Advertising click IDs (gclid, fbclid and equivalents) from your visit, kept in your browser’s session storage as long as you have not consented to marketing cookies; sent to our servers only after your consent, deleted when you withdraw it or when you close the browser Session
_fbp Meta (Facebook) browser identifier for measuring advertising campaigns 3 months
_fbc Meta (Facebook) identifier for the original ad click, used for conversion tracking 3 months
_gcl_au Google Ads: links an ad click to a conversion on the site 3 months
_gcl_aw / _gcl_gs Google Ads: identifier of the original ad click 3 months
IDE / test_cookie Google (doubleclick.net): campaign measurement and remarketing 13 months
NID Google: preferences and advertising related to integrated Google services (maps, reviews widget) 6 months
YSC / VISITOR_INFO1_LIVE / __Secure-* YouTube: plays videos embedded on product pages 6 months

The entries vehicle_search_history, vehicle_navigation_context, agm-product-display-mode, agm_staff, agm-checkout-exit-intent-shown, agm_attribution_pending and agm_attribution_state are not cookies but data stored by your browser (local or session storage); they disappear when you clear site data. They are not sent to our servers, except agm_attribution_state (temporary copy of the analytics cookie, same purpose) and agm_attribution_pending, sent only after you consent to marketing cookies.

Google, Meta and YouTube cookies are set by these companies after your consent; their durations are provided for information and may be changed by their publishers.

Retention periods

The durations specific to each processing activity are shown in the table “Purposes, legal bases and durations”. At the end of these periods, your data is deleted or anonymized. Deleted data may remain for up to 90 days in our encrypted backups before being permanently erased. Cookies have the durations indicated above; you can delete them at any time in your browser settings.

Your rights over your data

In accordance with the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the following rights over your personal data:

  • Right of access to your data
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object, in particular to marketing, cart reminders and newsletter personalization
  • Right to withdraw your consent at any time (newsletter, cookies), without affecting processing already carried out
  • Right to set instructions on what happens to your data after your death

To exercise these rights, write to us using the contact details below and specify your request; proof of identity may be requested in case of reasonable doubt. We respond within one month. Deleting your account takes the form of anonymization: your identity data is replaced with random values, and your orders and invoices are kept separately for the legal period.

From your customer area, you can also update your information, manage your newsletter subscription (“Newsletter preferences”), and clear your browsing history (“History”). Each newsletter contains an unsubscribe link.

If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, www.cnil.fr).

Contact information

SARL ANDREAU – AGM Vision

13 avenue Eugène Le Roy
24160 Excideuil