1. Data controller
Vestra Manufacturing SARL, Route Touristique, 4011 Hammam Sousse, Sousse, Tunisia. RNE identifier : 1751649Y. Contact : contact@vestratextile.com, +216 70 295 899.
2. Data we process
This website has no forms, no user accounts, no audience measurement tools and no advertising cookies.
We process personal data only in the following cases:
- When you contact us by email, telephone or WhatsApp : name, company, job title, business contact details, the content of our exchanges and any attached documents (for example a tech pack).
- When you visit the website : our hosting provider records technical logs (IP address, date and time, page requested, browser type), which are necessary for the security and proper functioning of the website.
3. Purposes and legal bases
- Responding to your enquiries and preparing quotations : steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)).
- Managing the business relationship and fulfilling orders : performance of a contract (GDPR Article 6(1)(b)).
- Ensuring the security of the website : legitimate interest (GDPR Article 6(1)(f)).
- Meeting our accounting and tax obligations : legal obligation.
4. Retention period
- Exchanges that do not lead to a business relationship : 3 years from the last contact.
- Client data : for the duration of the business relationship, then for the statutory retention periods applicable to accounting records.
- Technical logs : for as long as necessary for the security of the website, in line with our hosting provider's rules.
5. Recipients
Your data is processed by the Vestra Manufacturing team. It may be shared, for this purpose only, with our service providers: Railway Corporation (website hosting, United States), Google (business email through Google Workspace), WhatsApp (if you contact us through this channel), and our freight forwarders and carriers for the fulfilment of orders. We do not sell or rent any data.
6. Transfers outside the European Union
Vestra Manufacturing is established in Tunisia and some of its service providers are established in the United States. Tunisia is not covered by an adequacy decision of the European Commission. When you write to us, your data is transferred to us in order to respond to your enquiry and prepare a possible order (GDPR Article 49(1)(b)). Transfers to our service providers rely on the safeguards they offer, in particular the European Commission's standard contractual clauses.
7. Cookies
This website does not use any cookies or trackers. Fonts and video are hosted on our own server: no data is passed to any third party during your visit, apart from the hosting provider's technical logs.
8. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to contact@vestratextile.com. We respond within one month.
You may also lodge a complaint with the data protection authority in your country (for example the CNIL in France, the Autorité de protection des données in Belgium, the Autoriteit Persoonsgegevens in the Netherlands, the authority of your Land in Germany, the PFPDT (FDPIC) in Switzerland) or with the Instance nationale de protection des données personnelles (INPDP) in Tunisia.
These rules apply in accordance with Regulation (EU) 2016/679 (GDPR), the Swiss Federal Act on Data Protection and Tunisian Organic Law No. 2004‑63 of 27 July 2004.
9. Security
The website is served over HTTPS. Access to email inboxes and documents is limited to the people who need it.
10. Changes
This policy may be updated. The date of the last update is shown at the top of the page.