Privacy policy.

Data controller

François GAYON, sole trader — Cosmick Tech, 1955 route de Cambernard, 31470 Sainte-Foy-de-Peyrolières, France. For questions or to exercise your rights: s62labcontact@gmail.com — +33 9 50 02 24 92.

Data processed by VANOS LAB

When the licence certificate is activated and periodically renewed, the software automatically sends the server the licence key, a cryptographic fingerprint of the PC, the application version and the connection IP address. The licence key is retained only as a fingerprint. The PC fingerprint is calculated locally from the Windows identifier and system-volume serial number; these two raw hardware identifiers are not transmitted.

For the “1 VIN” plan, the VIN read from the vehicle is sent to the server when it is linked to the licence. The server retains only its last seven characters and cryptographic fingerprints. For the “Unlimited VINs” plan, the last seven characters of each VIN used and the usage dates are synchronised to administer the licence. The order email address, selected plan, amount and transaction references, licence-delivery status and language are also processed.

Diagnostic logs are sent to support only at the user’s request. A result image is uploaded to the server and made available through a public link only when the user voluntarily uses the sharing feature.

For internal audience measurement, the website retains a pseudonymised fingerprint derived from the IP address and browser for each day and page, together with the approximate country. This data is not used for advertising or commercial profiling.

Shop data

S62 SHOP also processes the customer’s name, delivery and contact details, ordered products and variants, amounts, Stripe payment references and status, carrier and pickup-point choices, parcels and tracking numbers, the version and acceptance date of the Terms of Sale, email notifications and withdrawal notices. This data is used to fulfil the order, arrange delivery, provide after-sales service and comply with legal obligations. The accepted Terms and their content are retained with the order; electronic contracts worth at least €120 are archived for ten years as required by law.

Purposes and legal bases

Orders and licences

Create the order, receive payment confirmation, supply, activate and administer the licence — performance of a contract.

Accounting

Retain transaction records and comply with tax and accounting duties — legal obligation.

Security

Prevent fraud, abuse and unlawful licence sharing — legitimate interest in securing the service.

Support

Answer requests and analyse voluntarily submitted logs — performance of a contract and legitimate interest in providing support.

Internal analytics

Measure aggregate site usage without advertising trackers — legitimate interest in administering and improving the service.

Recipients

Data is accessible to the S62LAB operator to the extent required. PayPal receives the information needed to process payments and acts under its own privacy policy. For the shop, Stripe processes payments, Sendcloud and the carrier receive the data needed for delivery, and Gmail is used for order and licence notifications. Data may also be accessible to technical service providers strictly required for hosting and email delivery, within the scope of their contracted duties.

S62LAB neither receives nor retains complete card numbers or card security codes.

Retention periods

Order data and accounting records are retained for the applicable statutory period. The PC fingerprint, VIN-linking data, short-VIN history for the “Unlimited VINs” plan, application version and IP-address history are retained for the licence’s period of use and then archived for the period required to handle a potential dispute. Support logs are automatically deleted after 30 days. Images that the user chooses to share remain available until the user requests deletion or the service ends. Audience data is retained for a period proportionate to its purpose.

International transfers

Use of PayPal, Stripe, Gmail and delivery providers may involve processing outside the European Economic Area. PayPal describes the relevant processing locations and safeguards in its own privacy documentation. Other data is hosted under the arrangements of S62LAB’s technical provider; its identity and location must still be confirmed in the legal notice.

Cookies and local storage

The website uses no advertising cookies or third-party audience-measurement cookies. The language preference may be stored locally in the browser. PayPal components and any associated trackers are loaded only after the user explicitly asks to display PayPal checkout. PayPal then uses its own trackers in accordance with its privacy statement.

Your rights

You may request access to, correction or erasure of your data, restriction of processing, object to processing based on legitimate interests and, where the conditions are met, request data portability. Exercise these rights at s62labcontact@gmail.com. Proof of identity may be requested only where there is reasonable doubt about your identity.

You may also lodge a complaint with the French data protection authority, the CNIL: cnil.fr.

Security

Technical and organisational measures are implemented to limit access to data and protect keys, fingerprints, support logs and administrative access. No system can guarantee absolute security; any incident presenting a risk is handled in accordance with the applicable obligations.