To improve your experience on Vesoria Studio, we use cookies for analytics, personalization, and secure transactions.
Last updated: 14 September 2026
At Vesoria Studio, privacy is part of how we design and operate our services. This Privacy Policy explains, in clear terms, what personal data we process, why we process it, where it may come from, who may receive it, how long we keep it, and the rights available to you.
This Policy applies when you visit our website, contact us, request a proposal, become a client, use a Vesoria-operated client space or software service, subscribe to communications, interact with our support, or otherwise engage with Vesoria Studio.
For the processing activities described in this Policy where Vesoria Studio determines why and how personal data is processed, the data controller is:
Vesoria Studio EI
SIRET: 797 758 968 00011
9 rue des Cépages, Bâtiment A
33170 Gradignan, France
Email:
contact@vesoriastudio.com
Website:
vesoriastudio.com
In some client projects or software services, Vesoria Studio may process personal data solely on a client's documented instructions. In those cases, the client determines the purposes of the processing and acts as the data controller, while Vesoria Studio acts as a processor within the meaning of the GDPR. The respective obligations are then governed by the applicable agreement and, where required, a data processing agreement.
The personal data we process depends on your relationship with Vesoria Studio. It may include:
We seek to limit the information we process to what is relevant and reasonably necessary for the purpose concerned.
We do not intentionally request special categories of personal data, such as information relating to health, political opinions, religious beliefs, sexual orientation or biometric data, unless a specific service lawfully requires it. Please avoid providing such information unless it is genuinely necessary.
Personal data may be obtained:
| Purpose | Main legal basis |
|---|---|
| Responding to enquiries, understanding a project and preparing a proposal | Steps taken at your request before entering into a contract |
| Providing studio services, client spaces, software subscriptions, support and other requested services | Performance of a contract |
| Creating and administering user accounts and subscriptions | Performance of a contract and legitimate interests in operating the service |
| Issuing invoices, maintaining accounting records and meeting tax or regulatory requirements | Legal obligations |
| Preventing fraud, abuse, unauthorised access and security incidents | Legitimate interests in protecting Vesoria Studio, its users, clients and systems |
| Maintaining, diagnosing and improving the reliability and performance of our services | Legitimate interests, where the processing does not require consent; consent where applicable to non-essential tracking technologies |
| Professional B2B prospecting concerning services relevant to a person's professional role | Legitimate interests, subject to applicable rules and the right to object |
| Consumer marketing or other communications for which prior consent is legally required | Consent, unless a specific legal exception applies |
| Non-essential advertising, personalisation or tracking technologies | Consent |
| Establishing, exercising or defending legal claims | Legitimate interests and, where applicable, legal obligations |
Certain Vesoria Studio services may identify, organise or analyse business information obtained from publicly accessible professional sources.
This may include a professional's name, role, company affiliation, publicly available professional contact details, company website, business profile, public company information, source references and signals concerning the organisation's professional activity.
Such information is used for professional business development, qualification, research or prospecting purposes. Vesoria Studio does not intentionally use private-life information for these purposes.
Where Vesoria Studio determines the purposes and means of this processing, it relies on its legitimate interests in developing and operating professional services, identifying relevant business opportunities and enabling proportionate B2B prospecting, subject to an assessment of the rights and reasonable expectations of the persons concerned.
Where personal data has not been obtained directly from the person concerned, Vesoria Studio provides the information required by applicable data protection law within the applicable timeframe, including, where required, no later than the first communication with that person, the first disclosure of the data, or one month after obtaining it, unless a lawful exception applies.
When a client or user uses a Vesoria software service to conduct its own prospecting, that client or user remains responsible for ensuring that its communications have an appropriate legal basis, are relevant to the recipient's professional role where required, contain the necessary information and provide an effective way to object to further communications.
Some Vesoria-operated software services may use automated systems or artificial intelligence to organise publicly available business information, identify business signals, produce summaries, rank opportunities or suggest approaches.
These outputs are assistance tools. They are not intended to make decisions about individuals that produce legal effects or similarly significant effects within the meaning of Article 22 of the GDPR.
Automated outputs may be incomplete or incorrect and should be reviewed by the user before they are relied upon or used in external communications.
Some information is necessary to respond to a request, create or secure an account, prepare a proposal, conclude or perform a contract, issue an invoice or provide a requested service.
Where such information is required and is not provided, we may be unable to complete the relevant request or provide the relevant service.
Information that is not necessary for these purposes is optional unless otherwise stated at the point of collection.
Personal data is accessible only where reasonably necessary for the purposes described in this Policy.
Recipients may include:
Where a service provider processes personal data on our behalf as a processor, we require appropriate contractual, confidentiality and security commitments in accordance with applicable data protection law.
We do not give third parties unrestricted access to personal data merely because they provide a service to us.
Some service providers used in connection with our website or services may process personal data in countries outside France or the European Economic Area.
Where a transfer of personal data outside the European Economic Area requires additional safeguards under the GDPR, the transfer is made using an applicable legal mechanism, such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses, or another valid safeguard recognised by applicable law.
You may contact us if you would like further information about the safeguards applicable to a particular transfer.
We do not keep personal data indefinitely. Retention periods depend on why the data is processed and on applicable legal obligations.
| Category | Typical retention rule |
|---|---|
| Contact requests and prospective project enquiries | Up to 3 years from collection or from the last meaningful contact initiated by the prospect, unless a contractual relationship begins or another legal basis requires a different period |
| Personal data used by Vesoria Studio for B2B prospecting | Up to 3 years from collection or from the last contact initiated by the prospect, subject to applicable opposition and deletion rights |
| Client and contractual records | For the duration of the contractual relationship and, where necessary, up to 5 years afterwards for evidence, disputes and the establishment, exercise or defence of legal claims, unless another statutory period applies |
| Accounting records, invoices and supporting accounting documents | 10 years where required by French accounting law |
| Marketing subscription information | Until consent is withdrawn, the subscription is cancelled or the information is no longer required for the relevant lawful marketing purpose |
| Information necessary to record an objection to commercial prospecting | Kept only as necessary to ensure that the objection continues to be respected; the French supervisory authority recommends retaining the information necessary for this purpose for at least 3 years |
| Account and service data | For the period necessary to provide the account or service, followed only by any limited retention necessary for security, legal obligations, dispute management or scheduled backup deletion |
| Security and technical logs | Only for as long as reasonably necessary to secure the service, investigate incidents, prevent abuse and establish relevant technical evidence |
| Cookie consent or refusal preference | The preference is generally respected for approximately 6 months before consent is requested again, unless a change in the service or applicable requirements justifies asking sooner |
Data may be retained for a longer period where required by law, necessary for an ongoing dispute or investigation, or required for the establishment, exercise or defence of legal claims.
Once the applicable retention period expires, personal data is deleted, securely archived where legally required, or irreversibly anonymised.
Our website may use cookies and similar technologies for technical operation, security, preference management and, where authorised, audience measurement or marketing.
Some technologies are necessary to provide a service expressly requested by the user, maintain security, remember privacy choices, manage sessions or support a payment process. Where the law permits, these technologies may be used without prior consent.
Advertising, cross-site tracking, non-essential personalisation and other technologies requiring consent are not intended to be activated until you have made a valid choice.
The website currently includes Meta Pixel technology for advertising and audience measurement purposes. Where this technology requires consent, it must remain inactive unless and until the visitor has consented to its use.
If you refuse non-essential cookies, refusing them does not prevent access to the main content of the website.
You may withdraw or change a consent choice at any time through the cookie preference mechanism made available on the website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
When new non-essential tracking technologies are introduced, the information presented to visitors and the relevant cookie controls should be updated accordingly before those technologies are activated.
Where you purchase a service, software subscription or other paid offering, payment may be processed through Stripe.
Vesoria Studio receives the information necessary to identify and administer the transaction, such as payment status, amount, transaction reference, subscription status and billing information where applicable.
Full payment card details are entered into and processed through the payment provider's environment and are not stored by Vesoria Studio.
Stripe may process information for payment execution, fraud prevention, security and compliance with its own legal obligations in accordance with its applicable documentation.
Administrative and service-related communications, such as account, security, contractual, project, billing or support messages, may be sent where necessary to provide a requested service or manage our relationship with you.
For commercial communications directed to professionals, Vesoria Studio may rely on legitimate interests where the communication is relevant to the recipient's professional role and applicable law permits such processing. Recipients are informed appropriately and can object simply and free of charge.
Where applicable law requires prior consent for marketing communications, including in particular certain communications directed to individuals acting outside a professional context, such communications are sent only where the necessary consent or another applicable legal exception exists.
You may object to direct marketing at any time. Once you do so, your personal data will no longer be processed for that direct marketing purpose.
Vesoria Studio applies technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access and other forms of misuse.
Depending on the system and risk involved, these measures may include encrypted connections, access controls, authentication measures, restricted permissions, logging, backups, infrastructure security, data minimisation, separation of environments and contractual safeguards with service providers.
Access to personal data is limited according to operational need and the permissions applicable to the relevant service.
No internet-connected service can provide an absolute guarantee against every possible security incident. Our responsibility is therefore to apply and maintain measures appropriate to the nature of the data, the service and the risks involved.
Subject to the conditions provided by the GDPR and other applicable law, you may exercise the following rights:
You can exercise your rights by contacting: contact@vesoriastudio.com .
Please provide enough information for us to identify the processing concerned. We will only request additional information to verify your identity where there are reasonable doubts about the identity of the person making the request.
We respond without undue delay and, in principle, within one month of receiving a valid request. Where permitted by law, this period may be extended for a further two months if the request is particularly complex or numerous. If an extension is necessary, we will inform you within the initial one-month period.
You also have the right to lodge a complaint with the competent supervisory authority. In France, the supervisory authority is the Commission nationale de l'informatique et des libertés, commonly known as the CNIL.
Vesoria Studio's website and professional services are not directed at children. We do not knowingly seek to collect children's personal data through our professional services.
If you believe that personal data relating to a child has been provided to us inappropriately, please contact us so that we can review the situation and take appropriate action.
Our website or services may contain links to websites or services operated by third parties. Vesoria Studio does not control the independent processing activities of third-party services that users choose to visit outside our environment.
We encourage you to review the privacy information provided by the relevant third party before providing personal information to it.
We may update this Privacy Policy when our services, technologies, providers, processing activities or legal obligations change.
The date displayed at the top of this page identifies the latest version. Where a change materially affects how personal data is processed, we will provide additional information where required by law.
For questions about privacy, the use of personal data, or the exercise of your rights, please contact:
Vesoria Studio EI
9 rue des Cépages, Bâtiment A
33170 Gradignan, France
SIRET: 797 758 968 00011
contact@vesoriastudio.com