Privacy policy
Details in square brackets are replaced with the actual data before publication.
Controller
The controller responsible for data processing on this website is: [Full name or company] [Street and number] [Postal code and city] E-mail: [e-mail address]
Overview
This website presents Montreville and lets you offer pre-owned luxury and vintage watches for purchase. Personal data is processed only as far as necessary to operate the website and to handle your requests. The website sets no cookies that require consent and embeds no content from advertising networks. Fonts are served from our own server.
Hosting and server log files
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, Vercel processes technically necessary data on our behalf: IP address, date and time of access, page requested, amount of data transferred, browser type and version, operating system and the previously visited page (referrer). This data serves to deliver the website, for security and for error analysis, and is not combined with other data sources.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). A data processing agreement is in place with Vercel; transfers to the USA rely on the EU standard contractual clauses. Log files are deleted after [retention period, e.g. 30 days].
Audience measurement
We use Vercel Web Analytics to measure how the website is used. No cookies are set and no profiles are built across websites; page views are anonymised and evaluated in aggregated form only. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving the offer).
Purchase request form
When you offer us a watch through the request form, we process the details you enter: brand, model, reference, information on original box and papers, price expectation, additional information, uploaded photos and videos, and your contact details (name, e-mail address, phone number, country, preferred contact method).
The data is used solely to review and answer your request and to prepare a possible purchase. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract).
Transmission is encrypted. The request reaches us as an e-mail via the delivery provider Resend, Inc., San Francisco, USA, with whom a data processing agreement based on the EU standard contractual clauses is in place. Uploaded files are downsized in your browser before sending and are transmitted solely as attachments to that e-mail; they are not stored on the web server beyond that.
We keep your request until it has been fully dealt with, but no longer than [retention period, e.g. 12 months]. If a purchase is concluded, the statutory commercial and tax retention periods apply.
Contact by e-mail
If you contact us by e-mail, we process your details to handle the request and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where the request concerns a contract, and otherwise Art. 6 (1) (f) GDPR.
Our website links to our Instagram profile. No Instagram content is embedded; you leave our website only when you click the link. Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, is responsible for the processing of your data on Instagram, and its privacy policy applies.
Your rights
You have the right of access to the personal data concerning you (Art. 15 GDPR), and the rights to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).
To exercise these rights, contact the address given above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the authority responsible for [federal state].
Data security
This website is delivered over TLS encryption (https). We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
Changes
We update this privacy policy when the legal situation or our offer changes. Last updated: [date].