Privacy policy · GlobalVendingSpot

This page describes what the site does with the data it collects. It is written to be read, not to cover ourselves: if a point strikes you as unclear, write to contact@globalvendingspot.com.

Who is responsible

Alexandre Trepagny, 96 rue Hérangère, 76500 La Londe. Contact for any question, or to exercise your rights: contact@globalvendingspot.com.

The site is published from France: the GDPR applies to it. In the United Kingdom, its equivalent — the UK GDPR — gives you the same rights.

What is collected, and why

Data	Why	Legal basis	Retention
Account: e-mail address, password (stored in a form that cannot be read back), role, language, and what you tell us about your business; for each open session, the IP address and browser, recorded by our authentication provider	Signing you in; identifying you as a property owner or an operator; reminding you once of a step left unfinished (an account without a request, a listing left in draft)	Performance of the service	As long as the account exists. You can delete it yourself from your dashboard (“Delete my account”): it is erased at once, with your listings, their photos and your alerts; a request that has been online is withdrawn, then erased like any withdrawn request; your messages stay with the person you wrote to, detached from your account.
Location request or alert: your e-mail address, the town and radius, the machines, what you offer the property owner in return, your text and, if you give it, your company	Publishing your request once reviewed — or, if you keep it private, telling you when a listing opens nearby; passing on property owners’ replies; reminding you once if you have not confirmed, and once before it expires	Performance of the service, at your request	Not confirmed: deleted after 7 days. Online: 90 days, renewable. Withdrawn: deleted after 30 days; if an owner has replied to it, only your e-mail address and company name are erased at that point; the rest is erased together with the conversation. Expired without being withdrawn: e-mail address and company name erased one year after expiry.
Reply to a request, without an account: your name, your e-mail address, your phone number if you give it, your message; if you tick it, the box “Let me know about new requests near me”, with its date	Passing your message and contact details to the operator who is searching, opening a conversation for you; and, if you asked, writing to you when a request opens near you	Performance of the service, at your request — nothing is sent before you confirm your address; your consent for the box	Not confirmed: deleted after 7 days. Confirmed: name, e-mail address and phone number erased one year after the request ends; the message stays in the conversation.
Location listing: the town, your text, the machines you would accept and, if you give them, the surface area, the rent, the address of the premises and photos; without an account, your e-mail address	Publishing your location, making it findable by town and by radius, sending you the link to edit or withdraw it	Performance of the service, at your request	As long as the listing exists; its photos are erased with it. Without an account, your e-mail address is erased one year after the listing leaves the site.
Message to a listing, without an account: your name or company, your e-mail address, your message	Passing your message to the property owner and opening a conversation for you; your address is not shown to them	Performance of the service, at your request — nothing is sent before you confirm your address	Not confirmed: deleted after 7 days. Confirmed: name and e-mail address erased one year after the listing leaves the site; the message stays in the conversation.
Messages exchanged	Letting you discuss a location	Performance of the service	Erased 3 years after the last message of the conversation. If one of the two parties deletes their account, their messages stay with the other, detached from that account, and the conversation closes.
Message notification: the e-mail address of your account, or the one you gave without an account	Telling you that someone has written to you — one e-mail per conversation as long as you have not read it, never one per message	Performance of the service; can be turned off at any time, from the link in every e-mail or from the Messages page	No extra data; the send date is kept with the message
Invitation: the e-mail address of a property owner, entered by an operator who found it on their own	Passing on to them, once only, that operator’s invitation to reply	Legitimate interest — one recipient, one click by the operator, a fixed text	Erased after 30 days without a reply; if you accept, erased one year after acceptance — the invitation stays linked to your account; if you opt out, only the address remains, on the list of addresses never to contact again
Inventory, if you are an operator: your notes and the follow-up status of each place, and the places or establishments whose details you opened, month by month	Keeping track of your outreach; telling you how many places you viewed this month; measuring how the tool is used	Performance of the service; legitimate interest for the measurement	Notes: as long as the account exists. Views: 13 months.
E-mail on new business openings, if you are an operator: your account’s e-mail address; for each e-mail sent, its date, the requests it mentions with their number of newly opened businesses, and when you opened the list from the e-mail; if you turn it off, the date	Telling you by e-mail, once per update of the SIRENE register and never when nothing has opened, how many businesses have opened within the radius of your requests in France whose alert is active; knowing whether this e-mail is useful	Legitimate interest — the follow-up to the alert you turned on, and the measurement; you can object at any time, in one click and without signing in, from the link in every e-mail, or by pausing the alert	E-mails sent: 13 months. The opt-out: as long as the account exists.
Your IP address in hashed form (a SHA-256 hash), when you submit a request, a reply, a message, a listing without an account or a removal from the directory	Limiting the number of submissions per network and per hour, against bots	Legitimate interest	Erased as soon as you confirm your address, or with the unconfirmed submission; after one day for a listing submitted without an account or a removal from the directory
Technical logs: IP address, browser, address of the page requested, time	Security and fault diagnosis	Legitimate interest	Our providers’ retention periods: 30 days at Google Cloud (its default setting, which we have not changed)
Audience measurement: page viewed, site or campaign you came from, device class (mobile, tablet, desktop), browser language	Knowing which pages are read and where readers come from	Legitimate interest	13 months
Towns searched and not found: the town you typed in the search field when our reference list does not know it, in a simplified form (lower case, no accents) — with no identifier at all, neither yours nor your device’s	Knowing which places are missing from our reference list, and which to add first	Legitimate interest	13 months
Removal from the operator directory: the company’s SIREN number, your e-mail address	Taking the company off our pages and keeping it off; being able to write to you about the removal	Legitimate interest — acting on your request	E-mail address: erased after one year. The removal itself: kept with no time limit, so that the company does not come back.

No personal data is sent to a language model. City pages are written from public data — town names, INSEE population figures, OpenStreetMap places — and from aggregated listing statistics, never from the content of an account or of a message.

Backups. A full copy of the database is made every night and kept for 30 days, at Google Cloud in Belgium: what is erased from the database disappears from the copies at most 30 days later.

What happens to your messages

A message written on the site is not published: it appears on no page, and no search engine reads it. That does not mean only one person reads it:

its recipient, on the site; the first message of an exchange started without an account may also reach them in full by e-mail;
in reply to a request, the operator receives with that first message your name, your e-mail address and your phone number if you gave it — that is what lets them get back to you;
in a message to a listing, the property owner receives your name or company, never your e-mail address;
the site’s publisher receives a copy of that first message, to follow how contacts are going: in reply to a request, with the contact details you gave; to a listing, with your name only. These copies stay in the publisher’s inbox, with no retention period set yet.

Later messages are copied nowhere: the e-mail that tells you about one only says that someone has written, and you read it on the site. A phone number left in a message follows the same path as the message.

Links that stand in for a password

Without an account, a link received by e-mail is what opens what you submitted. Whoever holds the link can do what it allows: keep these e-mails to yourself. When a more recent e-mail carries a new link, that one counts.

Confirming a request, a reply or a message: 7 days. Without a click, nothing is published or sent.
Following a conversation: 30 days, renewed by every e-mail that tells you about a new message.
Editing or withdrawing a listing submitted without an account: 30 days at most.
Withdrawing a request: as long as it exists.
Stopping message notifications: no time limit.
Stopping the e-mail on new business openings: 13 months; every e-mail carries a new one.

The operator directory

We keep a directory of companies in France that are registered in INSEE’s SIRENE register under the activity of sales through vending machines, or are known to carry it on (Licence Ouverte 2.0). It holds legal entities only — never a sole trader, nor a company that INSEE does not publish. What it can show: the company name, trading name, town, activity code, year founded and headcount band. The establishment’s address stays in our database and is shown nowhere; there is no director’s name, no e-mail address, no phone number.

A company that does not want to be listed removes itself without an account, from the page Remove a company from the directory: it disappears from our pages immediately and does not come back with later updates of the register. The form asks for the SIREN number and an e-mail address. That address is used only to write to you about the removal, if needed; it receives no automatic e-mail and is erased after one year. The removal itself — the SIREN number and the company name — is kept with no time limit: it is what keeps the company out of the directory. The publisher is told about every removal, without your address.

The vending machine map

The map of bread, pizza and farm produce vending machines uses points published in OpenStreetMap, the collaborative map of the world, under the ODbL licence: a machine’s position, what it sells and, where OpenStreetMap gives them, its opening hours and payment methods; we add the town that contains the point. These points sometimes carry a name, the name of their operator or a brand, as a contributor entered them — sometimes a person’s name. We do not keep them: during the import they may help tell what a machine sells when the machine does not say, then they are discarded — they never enter our database. So they appear nowhere: not on the map, not on the pages, not in the export. No address, phone number or e-mail address is collected. Points in Belgium and Italy are imported the same way; the site does not show them.

Legal basis: our legitimate interest in showing where to find these vending machines, from data their contributors published under an open licence. Retention: our copy is rewritten at each import, once a month; a point that disappears from OpenStreetMap leaves the map at that same import.

To have a point taken off this site — for instance because its position is that of a home — write to contact@globalvendingspot.com: it leaves the map, the pages and the export, its copy is erased from our database, and it does not come back with later imports. We keep only its OpenStreetMap reference (a number), with no time limit: that is what keeps it off the map. You can also correct or delete it in OpenStreetMap.

Cookies and audience measurement

This site measures its audience without cookies and without identifiers. Every page view is recorded with the page, the site or campaign you came from, the class of your device and the language of your browser. Your IP address and your browser signature are not kept for this: they only serve to compute a hash with a random salt drawn each day and deleted two days later. After that, nobody — us included — can trace an address back from the hash, or recognise you from one day to the next. This data stays in our database (Supabase, Ireland) for 13 months and is passed to no third party. Pages opened from a personal link — confirming, withdrawing, following a message thread, managing a listing — are not counted: their URL contains a token and is never recorded. This setup meets the conditions the CNIL sets for audience measurement exempt from consent: purpose limited to monitoring the site, data made anonymous, no tracking from one site to another.

Where a visit comes from. The site you arrived from, or the campaign of the link you followed, is kept in your browser for as long as the tab is open (session storage, never a cookie). It only leaves your browser if you submit a request: that submission is then counted with where it came from, like a page view, with no link to your request or your address.

The towns we do not know. When the town you type in the search field returns no suggestion, we record that entry alone — simplified (lower case, no accents), with the country and the date, and nothing else: not your IP address, not your browser signature, no hash, no cookie, not your account if you have one. So we cannot know who searched for what. It serves one purpose only: adding the places missing from our reference list.

No advertising tracker, no social network. The only cookies set keep you signed in and protect the forms against bots. They are strictly necessary: that is why no consent banner is forced upon you. When you are signed in as an operator, your browser also remembers when you last looked at the new listings in your areas; that date never leaves your device.

Who else sees this data

It is neither sold, nor rented, nor passed on for advertising. It is processed by the following providers, on our behalf and on our instructions:

Supabase — Database, authentication and photo storage. Hosting: European Union (Ireland).
Google Cloud — Hosting of the site, of its processing and of the database backups. Hosting: European Union (Belgium).
Resend — Sending of the site’s e-mails: sign-in, confirmations, relayed first messages, notifications. Hosting: European Union (Ireland).
OVH — Domain name and contact mailbox. Hosting: European Union (France).
Cloudflare — Bot protection on the forms (Turnstile). Hosting: Worldwide network. Transfers outside the EU are covered by standard contractual clauses of the European Commission.
OpenStreetMap / Nominatim — Turning the address entered in the listing form into coordinates — the address of the premises is sent to this service as it is typed. Hosting: European Union (Germany).

What you publish is, by nature, public: the text of a request, its town, its radius and your company if you give it; the text of a listing, its town, and what you add to it — surface area, rent, address of the premises, photos. All of it is visible to everyone, search engines included. Your e-mail address, on the other hand, is never shown: people write to you through the site.

Your rights

You can ask for access to your data, its correction, its erasure, the restriction of its processing, its portability, and you can object to processing based on legitimate interest. Write to contact@globalvendingspot.com — an answer within one month.

Without waiting for an answer, you can also:

delete your account, from your dashboard;
withdraw a request, from your dashboard or from the link in its e-mails;
withdraw or delete a listing, from your dashboard or from its management link;
turn off message notifications, from the link in every e-mail or from the Messages page;
stop the e-mail on new business openings, from the link in every e-mail or by pausing the alert;
stop receiving messages for a listing submitted without an account, from your conversation page;
remove a company from the directory, from its removal page.

If the answer does not satisfy you, you can refer the matter to the CNIL, the French supervisory authority.

Marketing e-mails

To date, we run no e-mail outreach campaigns. The day we do, every message will name its sender, give its postal address, say where the contact came from and carry an immediate unsubscribe link. An unsubscribe is final and holds for every market.

An invitation is sent from our servers, at an operator’s request. An operator who has found a place can invite its owner to reply: they enter the address themselves, the e-mail goes out once, with no follow-up, with a fixed text that says who sends it and where the address comes from. The “Stop receiving invitations” link puts the address on the list of addresses never to contact again — for good, for every operator. This feature is not available in Germany, Austria or Switzerland.