Privacy notice

In short

• This site uses no cookies, trackers or analytics, and loads no fonts, scripts or images from other sites. The calculator runs in your browser: nothing is sent.
• We write to accounting and tax firms at their general address (info@, contact@…) published on their website, with at most one email and one follow-up if you don't reply.
• To stop receiving messages: reply "no" or write to y.asqarray@vitaproof.io. We stop at once.

Controller

VITAPROOF LLC
8206 Louisiana Blvd NE, Ste A #8389
Albuquerque, NM 87113
USA
New Mexico limited liability company, file no. 3148560. Contact for any question or request: y.asqarray@vitaproof.io. Manager: Youssef Asqarray.

We have not appointed a data protection officer; the manager handles your requests directly.

Website visitors

• Data: when your browser displays a page, our host processes technical data (IP address, date and time, page requested, browser type) in its server logs.
• Purposes: to serve the site and keep it secure and working. We do not use these logs to identify you or to measure audience.
• Legal basis: our legitimate interest in running a secure website (GDPR art. 6(1)(f)).
• Calculator: the figures you enter stay in your browser; they are not sent to us or stored.
• If you write to us: we process your name, email address and message to reply and, if you ask, to prepare a diagnostic or proposal (GDPR art. 6(1)(b) and (f)).
• External links: the sites we link to (sources, compared tools) apply their own policies. The witness status page (witness.vitaproof.io), run by VitaProof, is hosted on Google Cloud: if you open it, Google processes your IP address in technical logs.

B2B email prospecting

Who: partners, managers and directors of accounting and tax firms in Belgium and France, especially firms that work with Odoo.

Data: name, role, firm name, the firm's general email address, public information about the firm (size, offices, Odoo partner status, news or public statements), our correspondence and, where relevant, your objection.

Sources: the firm's public website; Odoo's public directory of accounting firms; public company registers and databases (for example the Belgian Crossroads Bank for Enterprises and websites that display its data); the professional press and published case studies; public LinkedIn pages. We do not buy lists and we use no tracking pixels or click tracking in our emails.

Purpose: to offer the firm a free 20-minute diagnostic and, if it wishes, our services.

Legal basis: our legitimate interest in making our services known to the businesses concerned (GDPR art. 6(1)(f)). For email, we write to the firm's general address, under the exception for impersonal electronic addresses of legal persons (Belgian law: Code of Economic Law art. XII.13 and Royal Decree of 4 April 2003, art. 1); in France, the message concerns the recipient's professional activity, in line with the CNIL's rules on B2B prospecting. We do not use a personal address without your agreement.

Balancing: our interest is to present a useful service to firms whose work it directly concerns. We limit the impact on your interests: public professional information only, no sensitive data, a general rather than a personal address, at most one email and one follow-up, manual sending with no profiling or tracking, an immediate stop on a simple "no", and limited retention (below). A firm that publishes its address and its Odoo partner status can reasonably expect a supplier to contact it about its professional activity.

Retention

• Prospects who don't reply: deleted no later than 12 months after our last message.
• Prospects we have corresponded with: up to 3 years after your last contact, unless we become each other's client (the contract and accounting obligations then apply).
• Opt-out list: the address or domain, the firm name and the date of the objection, kept for as long as we prospect and at least 3 years, solely so that we never write to you again.
• Visitors' emails: up to 3 years after the last exchange.
• Server logs: kept by the host for a limited period under its security rules.

Recipients and processors

Your data is processed only by the manager of VitaProof LLC. We do not sell it or share it with anyone for marketing. We use the following processors, acting on our instructions:

• Hostinger (Hostinger International Ltd, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus): website and email hosting.
• Google (Google Cloud): hosting of the witness status page.
• A research and drafting assistant tool, used to gather public information about firms and prepare our emails, and our office file-storage tools.

We may disclose data to an authority where the law requires it.

Transfers outside the European Union

VitaProof LLC is established in the United States. Prospect contact data may be accessed from outside the European Union, including from the United States and Morocco, with the safeguards described below. Your data is therefore processed outside the European Economic Area, in countries that the European Commission does not recognise as offering adequate protection in our case (VitaProof LLC is not certified under the EU-US Data Privacy Framework). The GDPR nevertheless applies directly to our processing because we address businesses in the EU (GDPR art. 3(2)).

To limit the risks: we process only public professional information and our correspondence; access is limited to the manager; accounts are protected by password and, where available, two-factor authentication. Hostinger covers its own transfers outside the EEA with the European Commission's standard contractual clauses (its data processing addendum, section 9.1). You can ask us for more information about these safeguards at the address above.

Your rights

• Objection: you can object at any time, without giving a reason and free of charge, to prospecting (GDPR art. 21(2) and (3)). Reply "no" to our email or write to y.asqarray@vitaproof.io: we stop at once and add your address to our opt-out list.
• Other rights: access, rectification, erasure, restriction and, where it applies, portability (GDPR art. 15 to 20).
• Response: within one month. We may ask for information to verify your identity.

Complaints

If you believe we are not respecting your rights, you can lodge a complaint with a supervisory authority, in particular:

• in Belgium: Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, Belgium, +32 2 274 48 00, contact@apd-gba.be, www.dataprotectionauthority.be;
• in France: Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, online complaint: www.cnil.fr/fr/plaintes;
• or the authority of the EU country where you live or work.

Feel free to write to us first: we will reply quickly.

Changes

We will update this notice if our processing changes (for example if we add a booking tool). The update date is shown at the top of the page.