Privacy Policy
Last updated: 01/05/2026
1. Purpose
This Privacy Policy explains how EVIGNETTE collects, uses, stores and protects the personal data of users of the evignette.app website and of customers who order an assistance service for the purchase of motorway vignettes, e-vignettes, road usage rights or equivalent products.
EVIGNETTE processes personal data in a manner that is proportionate to the purposes described below. The information requested is mainly necessary to process an order, provide customer follow-up, prevent input errors, establish proof of processing and comply with applicable legal obligations.
2. Controller
The controller is:
| Information | Details |
|---|---|
| Company name | Pending publication |
| Legal form | Pending publication |
| Registered office address | Pending publication |
| Registration number | Pending publication |
| Privacy contact | privacy@evignette.co |
3. Data Collected
EVIGNETTE may collect the personal data necessary for the use of the website, the order, payment, operational processing and customer support.
| Data category | Examples |
|---|---|
| Identity and contact details | Last name, first name, email address, telephone number if provided. |
| Order | Selected country, chosen product, duration, start date, vignette price, service fees, total price, order status. |
| Vehicle | Registration plate number, country of registration, vehicle category, technical information required depending on the country. |
| Payment | Payment confirmation, transaction identifier, payment status. EVIGNETTE does not store full bank card details. |
| Support | Messages, correction requests, complaints, documents or supporting evidence voluntarily provided. |
| Browsing | IP address, browser technical information, pages viewed, cookie preferences, analytics data where consent is required and obtained. |
4. Purposes and Legal Bases
The data is used for specific purposes. The legal basis depends on the relevant purpose and applicable law.
| Purpose | Main legal basis |
|---|---|
| Creation and processing of the order | Performance of the contract or pre-contractual measures. |
| Purchase or request to purchase the product from a national platform | Performance of the contract. |
| Payment and fraud prevention | Performance of the contract, legal obligation or legitimate interest, depending on the case. |
| Customer support and complaint management | Performance of the contract and legitimate interest. |
| Invoicing and accounting obligations | Legal obligation. |
| Retention of proof of order and processing | Legitimate interest and legal obligation, depending on the case. |
| Website improvement and audience measurement | Consent where required; legitimate interest for strictly necessary or exempt measurements. |
5. Data Recipients
Personal data is accessible only to the persons and service providers who need it for the purposes described in this Privacy Policy.
| Recipient | Role |
|---|---|
| EVIGNETTE team | Order processing, support, quality control and invoicing. |
| Payment service provider | Collection, confirmation and security of payment. |
| Invoicing tool, including Zoho Books if enabled | Issuing, sending, tracking and adjusting invoices or receipts. |
| Hosting provider and technical service providers | Hosting, security, maintenance and operation of the website. |
| Email or support services | Sending confirmations, supporting documents, transactional messages and support replies. |
| Authorities, operators or national platforms | Processing or issuing the requested product where the order requires the transmission of information. |
| Advisers and competent authorities | Management of a dispute, legal request or regulatory obligation. |
6. Transmission to National Platforms
To execute the order, EVIGNETTE may transmit certain information to an authority, operator or national platform responsible for the requested product. The information transmitted depends on the country and the selected product, but may include the registration plate number, country of registration, vehicle category, start date and validity period.
These platforms may act according to their own rules, terms and privacy policies. Where necessary, the customer may be invited to consult the information applicable to the relevant country.
7. Retention Periods
EVIGNETTE retains data for the period necessary for the purposes for which it is processed, then deletes, archives or anonymises it where appropriate.
| Data | Indicative retention period |
|---|---|
| Order data | Period necessary for processing, support and proof of the transaction, then archiving in accordance with applicable obligations. |
| Invoicing data | Applicable statutory accounting period. This data may be retained where the law requires its retention, even if other account or order data is deleted or anonymised. |
| Support data | Period necessary to process the request, then limited archiving in the event of a possible dispute. |
| Payment data | Period necessary to confirm the transaction and meet evidentiary obligations; full bank card details are not stored by EVIGNETTE. |
| Cookies and trackers | Period indicated in the banner or preference management module where they are used. |
The exact retention periods may be adjusted depending on applicable legal obligations, the relevant country, a dispute, a request from an authority or the need to retain evidence.
8. Transfers Outside the European Union, EEA, Switzerland or the United Kingdom
Certain technical service providers may process data in countries located outside the European Union, the European Economic Area, Switzerland or the United Kingdom. Where such transfers exist, EVIGNETTE ensures that they are based on a mechanism recognised by applicable law, such as an adequacy decision, appropriate contractual clauses or any other available safeguard.
9. Security
EVIGNETTE implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include, in particular, access restrictions, secure tools, internal processing procedures and protective measures adapted to the sensitivity of the data.
10. Rights of Individuals
Depending on applicable law, the customer may have rights over their personal data, including a right of access, rectification, erasure, objection, restriction, portability and withdrawal of consent where the processing is based on consent.
The customer may request the deletion of their personal data. Where the request is admissible and no legal, accounting, tax, contractual or litigation-related obligation requires the data to be retained, EVIGNETTE deletes or anonymises the relevant data so that it no longer directly identifies the customer.
Where certain data must be retained in order to comply with a legal obligation, issue an invoice, retain proof of transaction, process a complaint, prevent fraud or defend a right, EVIGNETTE may limit erasure to what is legally possible. In such cases, the retained data is limited to the necessary purposes, archived or restricted where appropriate, and deleted or anonymised upon expiry of the applicable periods.
| Type of request | Processing by EVIGNETTE |
|---|---|
| Full deletion possible | Deletion or anonymisation of data where retention is no longer necessary. |
| Legally required retention | Limited retention of essential data, for example for invoicing, accounting, proof of payment or dispute management. |
| Data transmitted to third parties | Where applicable and reasonably possible, EVIGNETTE forwards or facilitates the request to the relevant service providers according to their role and their own obligations. |
To exercise their rights, the customer may contact EVIGNETTE at the following address: contact@evignette.co. EVIGNETTE may request reasonable additional information in order to confirm the identity of the requester and process the request.
The customer may also lodge a complaint with the competent supervisory authority in their country of residence or in the country of establishment of EVIGNETTE.
11. Cookies and Similar Technologies
EVIGNETTE uses or may use cookies and similar technologies to operate the website, secure browsing, enable order placement, measure audience, improve the service and, if enabled, measure the effectiveness of advertising campaigns.
Cookies strictly necessary for the operation of the website, the basket, checkout, security or the storage of preferences do not always require the user's consent. Non-essential cookies, including non-exempt audience measurement cookies, advertising cookies, retargeting cookies or marketing attribution cookies, are used only where the required consent has been obtained.
| Type of cookies | Purpose | Consent |
|---|---|---|
| Strictly necessary cookies | Operation of the website, security, session, checkout, essential preferences. | Not required where they are essential to the requested service. |
| Audience measurement cookies | Understanding website usage and improving the experience. | Required unless an applicable exemption applies. |
| Advertising or attribution cookies | Measuring or optimising campaigns, attributing conversions, personalising certain communications. | Required where they are not strictly necessary. |
| Third-party cookies | Features provided by external service providers. | Depending on their purpose and applicable law. |
The user may accept, refuse or modify their preferences where the cookie management module is offered. Refusing non-essential cookies does not prevent the user from placing an order, but certain measurement, personalisation or improvement features may be limited.
12. Users Located in the United Kingdom
Where EVIGNETTE processes the data of users located in the United Kingdom, the applicable principles of data protection and electronic privacy are taken into account. The users concerned may exercise their rights with EVIGNETTE under the same practical conditions as other users, by writing to contact@evignette.co.
13. Updates to the Privacy Policy
EVIGNETTE may amend this Privacy Policy to reflect changes to the service, the countries covered, the service providers used or the applicable rules. The version published on the website is the version in force at the time of consultation.