4x4 Vintage

Privacy and cookies

This is an English translation provided for convenience. Only the French version is legally binding.

FPH (EURL, 2 rue Percheronne, 28000 Chartres, France, contact@4x4vintage.fr) is the controller of the personal data collected on 4x4 Vintage (4x4vintage.fr). No data protection officer has been appointed; please write to us directly.

Data processed, why, and on what basis

  • Seller account: e-mail address, name, telephone number, optional profile photo, IP address; for professionals: company name, SIRET number, VAT number, address, website. To create your account, publish and manage your listings, invoice you and send you service e-mails (sign-in code, publication, messages received, expiry reminders, invoices). Basis: performance of the contract; for the identification of professional sellers: legal obligation (French Consumer Code).
  • Listings: texts, characteristics, photos, town. They are public. For private sellers, only the first name and the initial of the surname appear. For professionals, the company name, address, SIRET number, VAT number, website and, if you have chosen so, the telephone number are displayed (legal obligation to identify professional sellers).
  • Messages to sellers: name, e-mail address, optional telephone number, text, IP address. Forwarded to the seller by e-mail so that they can reply to you, and kept for handling disputes and preventing fraud. Basis: performance of your request (pre-contractual steps) and legitimate interest (security).
  • Reports and contact form: content of the message, e-mail address if you provide it, IP address. Basis: legitimate interest (security of the site) and the legal obligations of a hosting provider.
  • Payments: processed by Stripe, which collects your card details; we never see them. We keep the amount, the date and the invoice. Basis: performance of the contract and accounting obligation.
  • Verification of professionals: your SIRET number is checked against the official French company register (recherche-entreprises.api.gouv.fr) and your VAT number against the European Commission’s VIES service. Basis: legal obligation.
  • Audience measurement: IP address, page viewed, referring page, browser, recorded on our own servers, with no cookie and no third-party tool. Basis: legitimate interest (statistics and security).
  • Google Ads advertising: see Cookies. Basis: your consent, which you may withdraw at any time.

Automated checks and writing assistance

Every listing and every message is analysed automatically, including by an artificial intelligence service, to detect scams and prohibited content. This analysis may publish a listing directly. It never refuses or removes a listing on its own: any negative decision is taken by a person, after reading. You may challenge a decision, give your point of view and request a new review through the contact form. If you use quick posting, your photos and your text are sent to the same service to pre-fill the listing; you review and confirm everything before publication.

Recipients and processors

  • Hosting: Amazon Web Services EMEA SARL (Luxembourg), servers in Paris. E-mails: Amazon SES (same group).
  • Payment: Stripe Payments Europe Ltd (Ireland), controller for payment data, with transfers to Stripe Inc. (United States) governed by the EU–US Data Privacy Framework and the standard contractual clauses.
  • Sign-in with Google (if you choose it): Google Ireland Limited, which only passes us your verified e-mail address. Advertising: Google Ireland Limited (with your consent).
  • Automated analysis and writing assistance: Anthropic (United States). The texts, messages and photos analysed may be processed in the United States; this transfer is governed by the European Commission’s standard contractual clauses. This data is not used to train the models and is not retained for any length of time by the provider.
  • Sellers: if you write to a seller, they receive your name, your e-mail address, your telephone number if you have given it, and your message.
  • Authorities: upon a lawful request, or on our own initiative in the event of a serious offence.

Your data is never sold.

Retention periods

Account: as long as it is active, then deleted or anonymised three years after your last sign-in or at your request; the data needed for fraud prevention (e-mail address, IP) is kept for three years after closure. Sold or expired listings: kept and displayed without your contact details, to provide price information; removed at your request. Messages: one year. Reports and contacts: one year. Invoices and payments: ten years (accounting obligation). Sign-in codes: fifteen minutes. Audience measurement: thirteen months. Cookie choice: six months.

Cookies

Strictly necessary cookies (no consent required, Article 82 of the French Data Protection Act, loi Informatique et Libertés): your sign-in session, a security token for forms, the draft of the listing you are writing, and the record of your cookie choice (“ann_consent”, six months). Fonts and icons are served from our own servers.

Google Ads advertising cookie (only with your consent): we run ads on Google to promote the site. If you accept, Google (Google Ireland Limited) sets a “_gcl_aw” cookie (90 days) that lets it know that a listing was posted following a click on one of our adverts. We do no advertising targeting. If you decline, no Google script is loaded and Google receives nothing. No other third-party audience measurement tool is used.

Changing your mind. You may withdraw or give your consent at any time by clicking “Cookies” at the bottom of every page: the banner is shown again. Withdrawing your consent does not affect processing already carried out.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death (Article 85 of the French Data Protection Act, loi Informatique et Libertés). To delete your account or exercise a right, write to us through the contact form or at contact@4x4vintage.fr; we reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr, 3 place de Fontenoy, 75007 Paris).