The information needed for your enquiry, project and client workspace, its uses and your rights.
Updated: 1 October 2026VISION TOTALE controls the processing connected with its enquiries, quotations, invoices, client accounts and own communications. Data-protection contact: contact@visiontotale.fr; postal address: 7 impasse des Aiguilles des Pins, 85160 Saint-Jean-de-Monts, France.
Where we handle files, participant lists or imagery solely on a business client’s instructions, the contract defines each party’s role and, where necessary, GDPR processing obligations.
Depending on your use: identity and business or personal contact details, company, enquiry, project location and schedule, messages, approvals, invoices and payment references. Productions may contain your image, voice and information about depicted people or places.
The client workspace also handles authorised access, projects, tasks, files and related comments. Technical information such as IP addresses, browsers, sign-in events and errors supports operation and security.
Do not send sensitive data, identity documents or complete bank details in free-text messages unless specifically requested through an appropriate channel. Information essential to a response or service must be provided; other details are optional.
The legal ground depends on the use of the information; not every use relies on consent.
| Purpose | Legal ground |
|---|---|
| Reply to your enquiry, prepare a quotation and organise the project | Pre-contract steps you request, then performance of the contract |
| Deliver, review and approve files; manage client access | Contract performance; legitimate interest in coordinating business contacts |
| Invoicing and accounting | Legal obligations |
| Secure access, prevent misuse and defend a legal claim | Legitimate interest in protecting people, the service and company rights |
| Marketing communications | Consent where required; legitimate interest for relevant business prospecting with an easy opt-out |
| Use of portraits or testimonials in our own marketing | Appropriate permission and legal ground for that use, separate from placing an order |
We receive information from you, your representative or the production organiser. For business enquiries, contact details may come from your company’s website, a business directory or a referral; the source can be provided on request.
Access is limited to authorised team members and providers who need the information for their assignment. Shareable file links should be forwarded only to intended recipients. Personal data is not sold.
The website and production tools use hosting and delivery services (ChatGPT Sites/OpenAI and Cloudflare), database and client-access services (Supabase), and the email, payment and file-transfer tools used for your order. Relevant providers receive information needed for their role.
Some providers and their subprocessors operate outside the European Economic Area. Depending on the service and configuration, a transfer must be covered by an adequacy decision or appropriate safeguards, including standard contractual clauses. We do not describe all hosting as exclusively French or European. Contact us for the providers, destinations and safeguards applicable to your project.
Retention depends on the purpose. Information needed for a legal obligation or dispute is separated from routine use. The criteria below do not mean that all raw footage is retained for the accounting-record period.
| Category | Period or criterion |
|---|---|
| Enquiries without an order and prospecting | Up to 3 years from collection or the prospect’s last active contact, unless they object or a separate need applies |
| Project management and client account | During the relationship and as needed for delivery and follow-up; access withdrawn when no longer needed |
| Quotations, contracts and correspondence evidence | Limited archive for applicable limitation periods, generally 5 years; certain consumer electronic contracts of €120 or more: 10 years under the applicable rules |
| Invoices and accounting records | 10 years from the close of the relevant accounting year |
| Raw footage, photographs, masters and galleries | Delivery, access and archive periods set in the quotation or delivery information; any extension must be agreed |
| Image permissions and rights evidence | During authorised use, then as necessary for evidence and legal claims |
The client and Vision Totale arrange participant information and permissions suited to the project. Permission to film an event does not automatically authorise an attendee’s portrait in an advertisement. Identifiable promotional use has a separate basis.
We pay particular attention to children and to permission from their legal representatives where required. Tell us before filming about people who do not wish to be recorded. Later requests are assessed against applicable rights and technical possibilities.
The website offers conversational assistance when requested. Messages may be processed by an AI service to prepare a reply. Avoid confidential or sensitive information; an automated answer is not an accepted quotation. You can always email the team.
For assisted retouching or creation, external tools must be compatible with file rights, confidentiality and the agreed scope. A contractual decision with significant effects is not based solely on a chatbot response.
Depending on the processing, you have rights of access, correction, deletion, restriction, objection and portability. You may withdraw consent without affecting prior lawful processing and object to marketing. These rights do not remove statutory retention duties.
Email contact@visiontotale.fr with your request and the information concerned. We normally respond within one month; a reasoned extension of up to two further months is possible in the cases allowed by GDPR. Where there is reasonable doubt, proportionate identity verification may be necessary.
You may complain to the CNIL, including through www.cnil.fr/fr/plaintes. You can also contact us so that we can try to resolve the issue.
Access is limited by role and connections are encrypted in transit. No system is infallible: report a disclosed link or suspicious access promptly. The response and any notifications depend on the incident and applicable duties.