Privacy Policy

Last updated: 01/05/2026

1. Purpose

This Privacy Policy explains how EVIGNETTE collects, uses, stores and protects the personal data of users of the evignette.app website and of customers who order an assistance service for the purchase of motorway vignettes, e-vignettes, road usage rights or equivalent products.

EVIGNETTE processes personal data in a manner that is proportionate to the purposes described below. The information requested is mainly necessary to process an order, provide customer follow-up, prevent input errors, establish proof of processing and comply with applicable legal obligations.

2. Controller

The controller is:

Information	Details
Company name	Pending publication
Legal form	Pending publication
Registered office address	Pending publication
Registration number	Pending publication
Privacy contact	privacy@evignette.co

3. Data Collected

EVIGNETTE may collect the personal data necessary for the use of the website, the order, payment, operational processing and customer support.

Data category	Examples
Identity and contact details	Last name, first name, email address, telephone number if provided.
Order	Selected country, chosen product, duration, start date, vignette price, service fees, total price, order status.
Vehicle	Registration plate number, country of registration, vehicle category, technical information required depending on the country.
Payment	Payment confirmation, transaction identifier, payment status. EVIGNETTE does not store full bank card details.
Support	Messages, correction requests, complaints, documents or supporting evidence voluntarily provided.
Browsing	IP address, browser technical information, pages viewed, cookie preferences, analytics data where consent is required and obtained.

4. Purposes and Legal Bases

The data is used for specific purposes. The legal basis depends on the relevant purpose and applicable law.

Purpose	Main legal basis
Creation and processing of the order	Performance of the contract or pre-contractual measures.
Purchase or request to purchase the product from a national platform	Performance of the contract.
Payment and fraud prevention	Performance of the contract, legal obligation or legitimate interest, depending on the case.
Customer support and complaint management	Performance of the contract and legitimate interest.
Invoicing and accounting obligations	Legal obligation.
Retention of proof of order and processing	Legitimate interest and legal obligation, depending on the case.
Website improvement and audience measurement	Consent where required; legitimate interest for strictly necessary or exempt measurements.

5. Data Recipients

Personal data is accessible only to the persons and service providers who need it for the purposes described in this Privacy Policy.

Recipient	Role
EVIGNETTE team	Order processing, support, quality control and invoicing.
Payment service provider	Collection, confirmation and security of payment.
Invoicing tool, including Zoho Books if enabled	Issuing, sending, tracking and adjusting invoices or receipts.
Hosting provider and technical service providers	Hosting, security, maintenance and operation of the website.
Email or support services	Sending confirmations, supporting documents, transactional messages and support replies.
Authorities, operators or national platforms	Processing or issuing the requested product where the order requires the transmission of information.
Advisers and competent authorities	Management of a dispute, legal request or regulatory obligation.

6. Transmission to National Platforms

To execute the order, EVIGNETTE may transmit certain information to an authority, operator or national platform responsible for the requested product. The information transmitted depends on the country and the selected product, but may include the registration plate number, country of registration, vehicle category, start date and validity period.

These platforms may act according to their own rules, terms and privacy policies. Where necessary, the customer may be invited to consult the information applicable to the relevant country.

7. Retention Periods

EVIGNETTE retains data for the period necessary for the purposes for which it is processed, then deletes, archives or anonymises it where appropriate.

Data	Indicative retention period
Order data	Period necessary for processing, support and proof of the transaction, then archiving in accordance with applicable obligations.
Invoicing data	Applicable statutory accounting period. This data may be retained where the law requires its retention, even if other account or order data is deleted or anonymised.
Support data	Period necessary to process the request, then limited archiving in the event of a possible dispute.
Payment data	Period necessary to confirm the transaction and meet evidentiary obligations; full bank card details are not stored by EVIGNETTE.
Cookies and trackers	Period indicated in the banner or preference management module where they are used.

The exact retention periods may be adjusted depending on applicable legal obligations, the relevant country, a dispute, a request from an authority or the need to retain evidence.

8. Transfers Outside the European Union, EEA, Switzerland or the United Kingdom

Certain technical service providers may process data in countries located outside the European Union, the European Economic Area, Switzerland or the United Kingdom. Where such transfers exist, EVIGNETTE ensures that they are based on a mechanism recognised by applicable law, such as an adequacy decision, appropriate contractual clauses or any other available safeguard.

9. Security

EVIGNETTE implements technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include, in particular, access restrictions, secure tools, internal processing procedures and protective measures adapted to the sensitivity of the data.

10. Rights of Individuals

Depending on applicable law, the customer may have rights over their personal data, including a right of access, rectification, erasure, objection, restriction, portability and withdrawal of consent where the processing is based on consent.

The customer may request the deletion of their personal data. Where the request is admissible and no legal, accounting, tax, contractual or litigation-related obligation requires the data to be retained, EVIGNETTE deletes or anonymises the relevant data so that it no longer directly identifies the customer.

Where certain data must be retained in order to comply with a legal obligation, issue an invoice, retain proof of transaction, process a complaint, prevent fraud or defend a right, EVIGNETTE may limit erasure to what is legally possible. In such cases, the retained data is limited to the necessary purposes, archived or restricted where appropriate, and deleted or anonymised upon expiry of the applicable periods.

Type of request	Processing by EVIGNETTE
Full deletion possible	Deletion or anonymisation of data where retention is no longer necessary.
Legally required retention	Limited retention of essential data, for example for invoicing, accounting, proof of payment or dispute management.
Data transmitted to third parties	Where applicable and reasonably possible, EVIGNETTE forwards or facilitates the request to the relevant service providers according to their role and their own obligations.

To exercise their rights, the customer may contact EVIGNETTE at the following address: contact@evignette.co. EVIGNETTE may request reasonable additional information in order to confirm the identity of the requester and process the request.

The customer may also lodge a complaint with the competent supervisory authority in their country of residence or in the country of establishment of EVIGNETTE.

11. Cookies and Similar Technologies

EVIGNETTE uses or may use cookies and similar technologies to operate the website, secure browsing, enable order placement, measure audience, improve the service and, if enabled, measure the effectiveness of advertising campaigns.

Cookies strictly necessary for the operation of the website, the basket, checkout, security or the storage of preferences do not always require the user's consent. Non-essential cookies, including non-exempt audience measurement cookies, advertising cookies, retargeting cookies or marketing attribution cookies, are used only where the required consent has been obtained.

Type of cookies	Purpose	Consent
Strictly necessary cookies	Operation of the website, security, session, checkout, essential preferences.	Not required where they are essential to the requested service.
Audience measurement cookies	Understanding website usage and improving the experience.	Required unless an applicable exemption applies.
Advertising or attribution cookies	Measuring or optimising campaigns, attributing conversions, personalising certain communications.	Required where they are not strictly necessary.
Third-party cookies	Features provided by external service providers.	Depending on their purpose and applicable law.

The user may accept, refuse or modify their preferences where the cookie management module is offered. Refusing non-essential cookies does not prevent the user from placing an order, but certain measurement, personalisation or improvement features may be limited.

12. Users Located in the United Kingdom

Where EVIGNETTE processes the data of users located in the United Kingdom, the applicable principles of data protection and electronic privacy are taken into account. The users concerned may exercise their rights with EVIGNETTE under the same practical conditions as other users, by writing to contact@evignette.co.

13. Updates to the Privacy Policy

EVIGNETTE may amend this Privacy Policy to reflect changes to the service, the countries covered, the service providers used or the applicable rules. The version published on the website is the version in force at the time of consultation.