Legal
Privacy & Cookie Policy
Your privacy matters to us. This page explains what data we collect, why, and how you can exercise your rights.
1. Data Controller
Etherna Global OÜ
Lõõtsa 2a, Tallinn 11415, Estonia
DPO contact: ingrid@vhealthy.fr
Website: lavhealthy.com
2. Data collected
We only collect data necessary for the operation of our services:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address (newsletter) | Newsletter delivery | Consent | Until unsubscription |
| Contact form (name, email, message) | Responding to your request | Legitimate interest | 3 years |
| Navigation data (pages visited, duration) | Anonymous statistics | Legitimate interest | 13 months |
| Account data (lavhealthy.com platform) | Appointment management | Contract performance | Account duration + 3 years |
3. Cookies & trackers
A cookie is a small text file stored in your browser. Here are the cookies used on this site:
4. Data sharing and transfer
We never sell your personal data. It may be shared with the following sub-processors, solely for the purposes described above:
- Cloud hosting (AWS — EU servers) for infrastructure
- Transactional email service (Mailgun or equivalent)
- Anonymised analytics tool (no transfer outside the EU)
For any transfer outside the European Union, we ensure an equivalent level of protection via Standard Contractual Clauses (SCC) approved by the European Commission.
5. Your rights (GDPR)
Under Regulation (EU) 2016/679, you have the following rights:
Right of access
Obtain a copy of your personal data.
Right to rectification
Correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data ("right to be forgotten").
Right to object
Object to processing based on legitimate interest.
Right to portability
Retrieve your data in a structured, readable format.
Right to restriction
Restrict processing during a dispute.
To exercise your rights, contact us at ingrid@vhealthy.fr. We will respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with your local data protection authority (e.g. CNIL in France).
6. Data security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure:
- Encryption of data in transit (TLS 1.2+)
- Encryption of data at rest
- Data access limited to authorised personnel
- Access logging and monitoring
- Breach notification process within 72 hours (GDPR Art. 33)
7. Changes to this policy
We reserve the right to update this policy at any time. For material changes, we will notify you by email (if you are subscribed to the newsletter) or via a banner on the site.
The date of the last update is shown at the top of this page.
8. Contact
For any questions about this policy or your personal data:
Etherna Global OÜ
DPO: ingrid@vhealthy.fr
Phone: +33 6 74 25 92 34