Privacy Policy

1. Data Controller

The controller of personal data collected on vin.mecalife.com is MecaLIFE Group, the website publisher (see the legal notices).

2. Data Collected

• Order Data: VIN number or license plate entered, email address, billing data transmitted during payment on pay.mecalife.com.
• Browsing Data: pages visited, language preference, technical data (browser type, IP address).

No banking data is stored by the site: payments are processed by a secure payment provider.

3. Purposes and Legal Bases

• Provision of the ordered MecaVIN report (performance of contract);
• Invoicing and accounting obligations (legal obligation);
• Response to customer service requests (legitimate interest);
• Audience measurement and site improvement (legitimate interest or consent, depending on the tools used).

4. Retention Periods

• Order data and reports: duration necessary for the service, then legal archiving (up to 10 years for accounting documents);
• Browsing data: 13 months maximum;
• Customer service exchanges: 3 years after the last contact.

5. Data Recipients

The data is intended for the internal services of MecaLIFE Group and its technical subcontractors (hosting, email sending, payment provider), who act on instruction and are subject to confidentiality obligations. It is neither sold nor rented to third parties.

6. Cookies

The site uses cookies strictly necessary for its operation (e.g., remembering the chosen language) and may use audience measurement cookies. You can configure your browser to refuse non-essential cookies.

7. Your Rights (GDPR)

In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Informatique et Libertés), you have the following rights regarding your data: access, rectification, erasure, restriction, objection, and portability.

To exercise these rights, contact us via the form available on mecalife.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

8. Security

MecaLIFE Group implements appropriate technical and organizational measures (encryption of communications, access control, secure hosting) to protect your data against loss, unauthorized access, or disclosure.